last executing test programs: 20m29.391031733s ago: executing program 32 (id=418): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = syz_io_uring_setup(0x10f, &(0x7f00000009c0)={0x0, 0x46ee, 0x10000, 0xffffdffd, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setown(r3, 0x8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x21, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0xc, 0x0, {0x0, r4}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000019abee5ea1f6f45f0a751afc2c366e5e7bcb0064a9a2a7e742212547d3b559065171867f6ea1e804e834dff1506604432743dd2f9b263f66a9f858796d92f543c3a96227caa3e6351fdc1a81af5bfb355181dba0", @ANYRES16=r6, @ANYBLOB="000426bd7000fcdbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="050010000e00000005000f0000000000050010000c000000050010000900000008000100", @ANYRES32=r8, @ANYBLOB="06001100700300000500100004000000"], 0x54}, 0x1, 0x0, 0x0, 0x200000a0}, 0x4001) io_uring_enter(r0, 0x3516, 0x67f, 0x64, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)={0x20c, 0x37, 0x1, {0x0, 0x8, 0x3, 0x0, 0x1ee, 'ss\xe1#\x1f\n\xcea\x88\x9a\r\x04\xfb\xa2\xf0L\xb9\xe8\xfc\xf3m\xdf\x02\xa05\xe8\xc0\xf0\x04l\xab\xdd\x831\xf5S\x8bQ\xb3\xe8X\xcb4\x1d\xedO\xc2\x19\xc6\xd0Sb\xd4Bp*+\x8f\x8de\xb5iq\xb9\xf4\x80\xf5\x9d\x84\xb6H\x94\xf1K\x87*\xbb\xf1\xf2!&\x1b?\v[\xben\xcc\xfd\xe9\x10\xc04\xa8}\xeb3\x84\x9a\x04\xe3\x85\xf3\xd1\xae(\xe3\xf4\xf1\xab\x8c\xb2\x17\n\xa7\xa5v\xf2t\xd9@\x8b\x90\x0f\xeaU\x8b\x17^\xed)\x9f\xdf\xb3\x04\x00\x00\x00\x00\x00\x00\x00\x84>\xe5\xd6\x9d\xbb\xc3\xf3?\xbb\xae~\xb2\x18\xd1n\x92=\x13s\xd9:*93\x92\x06\xee\xf3\xe4\xf1l`\xa5\x1a!\'\xea\xf6\x15\x98_\xd4\xba\xec\xc7\xcc\xf9\xf9\t\x8c\xcd\x80\x8b\x87\xfdm\xb0\x82\"@\xbcs\xef\x89\xa6\xbb\xe6aWe\xd0W]L\x90B\xfd\xfa|\x84\xd6C,\xc5\x9e\xe0\x13?/7oX\xfa\xfd5F\xd0\xb3]\x11\xeb\x96Tm\n\xf1i\x96\x87\xd7\xe2\xda\xe75\xe4\x1fq\x7f\xfa\xe5]]\\\x92\x04\nU\xb5\xa4<\x97\x90]8\xf6\x9e\x11\x8aI\x93\x03q\x14\x16\xbe\xda%\x1b\xd9F!\x83Vb\xa7&\xec\\\xf8wd\xbfr\xea\x96\xa8@d\xf5\xb9k0G\x06O`\xe5\xc6]\xa5\xbb6\xae1U\x01\x1c\fT\xe6z\xff\xcb\x85:\x96\xbb\xd6\x8f~\xba!\xbf\x8d\x86^\xf4\xb0\x19\x11\xf8\xff\xe6\x90\xe7=\x9b\xc15O\xd7\xaa\xda\f=!/8\x18\xd3p\x83\n^\v%E\x18W8\xabR\xba\xa1:\x0f{6[\x7f\xf8\x960\xee\xfd\x94\xac\xf7\xdf\x1f6\xbf\x94\xc5\xab\xb2\xe3\xc6\xc5\xf7\xdc0]g\x16jA\xc4\xc3\a\xc8\xdc5\xce\xf4\xd1z\x1d:\x94\xc0m+\x06\xd5\xa8\xad\xbf/m\xcd\xaf\xf2plr~\xac{\xf8_:\xeb\x97p0x0) r4 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x22, 0x0, 0x0, r5, 0x0, 0x0, 0x4}]) socket$netlink(0x10, 0x3, 0x7) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000640)={0x0, 0x7}, &(0x7f0000000680)=0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000003c0)={0x0, 0xffffffff, 0x4, r5, 0x1}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40004, 0x0, 0x0, 0xc46f, '\x00', 0x0, 0x0, 0x40000, 0x400}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x20, 0x9, 0x8, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x68, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ssrr={0x89, 0xf, 0x6c, [@rand_addr=0x64010102, @broadcast, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0xfd, [@dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x40}]}, @generic={0x94, 0xa, "67426d80b27c4789"}]}}}}}) r12 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x208180, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x4, r11, 0x2b, r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509ffffc0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r9, @ANYBLOB="00000000000060f49068d610803044db74e028061a950000b7050000080000004608f0ff9800000000000056080000000000008500000007000000b7000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 12m15.141391774s ago: executing program 33 (id=1625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000640)={'veth0_to_bond\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) io_setup(0x5ff, &(0x7f0000000400)=0x0) r4 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x22, 0x0, 0x0, r5, 0x0, 0x0, 0x4}]) socket$netlink(0x10, 0x3, 0x7) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000640)={0x0, 0x7}, &(0x7f0000000680)=0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000003c0)={0x0, 0xffffffff, 0x4, r5, 0x1}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40004, 0x0, 0x0, 0xc46f, '\x00', 0x0, 0x0, 0x40000, 0x400}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x20, 0x9, 0x8, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x68, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ssrr={0x89, 0xf, 0x6c, [@rand_addr=0x64010102, @broadcast, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0xfd, [@dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x40}]}, @generic={0x94, 0xa, "67426d80b27c4789"}]}}}}}) r12 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x208180, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x4, r11, 0x2b, r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509ffffc0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r9, @ANYBLOB="00000000000060f49068d610803044db74e028061a950000b7050000080000004608f0ff9800000000000056080000000000008500000007000000b7000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 12m11.49310614s ago: executing program 1 (id=1666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1c40, @remote, 0x7}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}]}, &(0x7f0000000080)=0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB='\aw'], 0x158}}, 0x0) 12m9.998351589s ago: executing program 1 (id=1669): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x10000000}, 0x70) 12m9.845445754s ago: executing program 1 (id=1670): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010800000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000980100002800c0001800800014000000180"], 0x78}, 0x1, 0x0, 0x0, 0x2000c045}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000006030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x0) 12m9.667672634s ago: executing program 1 (id=1672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000047000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m9.454672704s ago: executing program 1 (id=1674): r0 = socket$netlink(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 12m7.067838421s ago: executing program 1 (id=1676): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000ba00000005"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) getpid() r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r7, 0x40049409, r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a2348f7d2b19a50595dfae00ccacb48664a8be5d67b097a01abfbd7ab3016f8b71fa0a7692550ab7c3d4d4f57287299ef0ed0c8efb033034467a658a4754bd9e916a368d967cbe43bf38595ea2d7ee49620bdfc14018e2e1aaa2e6bcaf512a80e0485318dc9a8a4d8d6fbeef064cf9ab6f532d8824f", 0x8d}], 0x1}, 0x40000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 11m58.84607153s ago: executing program 5 (id=1689): syz_open_dev$dri(0x0, 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 11m57.581462864s ago: executing program 5 (id=1692): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000030006000800000019000000380000005e0200000804000004002000040005000800000200000000000000700700000006000000030000000900000006000000ffff00000500000006000000080000000700000003000000450000000c000000080000f6ffffff7f070000000a00000003000000020000000500000009000000010000000400000051e574640d0000004000000006000000a5d20000493000000080000007000000"], 0xb8) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000002380)=""/4100, 0x1004}, {&(0x7f0000000740)=""/183, 0xb7}], 0x3}, 0x8100) ioctl$KDMKTONE(r1, 0x4b30, 0x7) 11m57.178238711s ago: executing program 5 (id=1694): socket$inet(0x2, 0x6, 0x8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="f122cf32931b8d441bcc35ab74b582f1392f8f5712980fdbf15a152e651839abc26b3205315c4e9c7c7fccd5475e4c0c94eed2dfeae84831af3e0ea96fdd6c248f863fbd72ae91f1ba8c24b525d31b"], 0xa) 11m55.411655932s ago: executing program 5 (id=1697): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000ffffffffffffff80008bcc3e6f0000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c61746500"/237], 0x140}, 0x1, 0x0, 0x0, 0x4010}, 0x844) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x4001000) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) 11m53.490525163s ago: executing program 5 (id=1698): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000020000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000240000008500000005240000bf090000000000004509010000000370950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000032d300000000000000bf91000000000024b7020000020000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x100b, &(0x7f0000001e40)=""/4107, 0x41100, 0x20}, 0x94) 11m52.971393178s ago: executing program 5 (id=1699): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000ba00000005"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) getpid() r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a2348f7d2b19a50595dfae00ccacb48664a8be5d67b097a01abfbd7ab3016f8b71fa0a7692550ab7c3d4d4f57287299ef0ed0c8efb033034467a658a4754bd9e916a368d967cbe43bf38595ea2d7ee49620bdfc14018e2e1aaa2e6bcaf512a80e0485318dc9a8a4d8d6fbeef064cf9ab6f532d8824f", 0x8d}], 0x1}, 0x40000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 11m50.95758446s ago: executing program 34 (id=1676): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000ba00000005"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) getpid() r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r7, 0x40049409, r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a2348f7d2b19a50595dfae00ccacb48664a8be5d67b097a01abfbd7ab3016f8b71fa0a7692550ab7c3d4d4f57287299ef0ed0c8efb033034467a658a4754bd9e916a368d967cbe43bf38595ea2d7ee49620bdfc14018e2e1aaa2e6bcaf512a80e0485318dc9a8a4d8d6fbeef064cf9ab6f532d8824f", 0x8d}], 0x1}, 0x40000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 11m37.76903004s ago: executing program 35 (id=1699): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000ba00000005"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) getpid() r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a2348f7d2b19a50595dfae00ccacb48664a8be5d67b097a01abfbd7ab3016f8b71fa0a7692550ab7c3d4d4f57287299ef0ed0c8efb033034467a658a4754bd9e916a368d967cbe43bf38595ea2d7ee49620bdfc14018e2e1aaa2e6bcaf512a80e0485318dc9a8a4d8d6fbeef064cf9ab6f532d8824f", 0x8d}], 0x1}, 0x40000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 10m35.914601643s ago: executing program 4 (id=1800): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') ioprio_set$uid(0x3, 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000100)={{{0x7}}, 0x23, 0x5, &(0x7f0000000040)="1024ed5f3d1b87dd7d87791eaec74da53369eaeb15f27937cb21580b8a27baee6e9fa1"}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="250926bd7000fddbdf25010039f604000180100002800c000180080001002cf561ce"], 0x28}, 0x1, 0x0, 0x0, 0x4008094}, 0x40800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r2, 0x0) syz_clone3(&(0x7f0000000340)={0x100, &(0x7f00000000c0), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10m32.167493575s ago: executing program 4 (id=1803): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0x5, @output={0x1000, 0x0, {0x4, 0x4}, 0x7, 0x103}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0xb, @sdr={0x3136564e, 0x2}}) sendto$x25(0xffffffffffffffff, &(0x7f0000000240)="02bb5616110747d63447a7543b0a236e1bfc891a02d664c091eff355beb6aaa51a62e6feff6cebcbac4269593600ef62424a9058eca75ef4372d45506b76d4d1bafffcad3a0be17a0a8c245385dd684c6ef6530c26666b942103695d322f63716510739cb77a4be817c6178c33d734b78adba603a703faddfdf03cce63892929cb36a4d0885127613614f0475f5b9c3b98fefef3522c5adcfa96ac3ed5445840962333e2d50e261fd9a7", 0xaa, 0x4015, &(0x7f0000000300), 0x12) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x9, 0x1ff, {{0xc, 0x4, 0x3, 0x9, 0x30, 0x68, 0x0, 0xff, 0x29, 0x0, @multicast2, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x4, [{@empty, 0x1}, {@broadcast, 0x47d93609}, {@private=0xa010101, 0x6}]}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000400)={@remote, r2}, 0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x8}, &(0x7f0000000480)=0x8) r3 = accept4(r1, &(0x7f00000004c0)=@alg, &(0x7f0000000540)=0x80, 0x81000) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000580)={'hsr0\x00', {0x2, 0x0, @multicast1}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresgid(&(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000008c0)=0xe8) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x148063, &(0x7f0000000900)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7454b7e9}}, {@max_read={'max_read', 0x3d, 0x800}}, {@default_permissions}], [{@fowner_gt={'fowner>', r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0xe25348aebea92c28, 0x32, 0x61, 0x63, 0x32, 0x66], 0x2d, [0x34, 0x0, 0x37, 0x38], 0x2d, [0x37, 0x33, 0x66, 0x61], 0x2d, [0x66, 0x34, 0x37, 0x62], 0x2d, [0x33, 0x31, 0x32, 0x34, 0x34, 0x31, 0x62, 0x66]}}}, {@dont_measure}, {@measure}]}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r10 = dup(r9) ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000000ac0)=""/168) syz_usb_connect(0x5, 0x4d9, &(0x7f0000000b80)={{0x12, 0x1, 0x110, 0x7d, 0xee, 0x98, 0x8, 0x2100, 0x9e67, 0x6bf5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c7, 0x2, 0x80, 0x9, 0x10, 0x4, [{{0x9, 0x4, 0x9a, 0xfc, 0x9, 0x34, 0x8b, 0x72, 0x9, [], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xc, 0x4, 0x2, [@generic={0xfc, 0xa, "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"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xf7, 0x1, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x89, 0x5}, @generic={0x6c, 0xe, "f040e1d65dd46df8ad266de512eb5a495732752e3eb9f3db3b8f06966cef3705629a01181144bd703587349377c5e12725303a09a72036bc108ccd4d9b372169d7813f2acb06185b8eed92d20f341fd0e913052822cde7bf25211aa1ffc902622b15dc51eaca63719137"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x81, 0x81, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x4, 0x1, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0xb, 0x3, 0x9, [@generic={0x5f, 0x22, "96fa9b490958ef83a91d0f1c62e1c32f7c9093f80712a486c394eeb0eb87260a3662bcb797709d4cfd18b121c08670281a56073e97624cf48d92ca11277f2a04aa07dbb92397dde798088c1f044f658ba66ac85f0e39016fd9b22d0384"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x8}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x4, 0x80, 0x81}}, {{0x9, 0x5, 0x623add30ce79cb62, 0x0, 0x3ff, 0x75, 0xe, 0x7, [@generic={0xdb, 0x5, "0be123c92a2f1574e9f9cde79c12cc33ec16ec892af190632b39cfd98eb4bcdfdccf0cc1185967f2c8515b77f633778d03b6c52e418c71c12667c5dced7565e10505d9bb8394bd5a31c5a5eab1b5524fae84b1254c01b130b7e88611587b9967dbf89df4c0a1224f5aa77c455af4bf260700d661c3cec8e0b48a21ca813cca8bcc44be5a4618064cb42f73d756b76b64b713075851ef4f5791efce95125f8e15d02e126d561b8034da8582fafaf276279142e1a7a85e143350da44cdfb0acc39679504d44ae2c79a8f8fcb4f9edde280b7a168a3ef7d8caad0"}, @generic={0x88, 0x5, "0a5814587decddbbd0cd1e8867442f8752de7b0d4fc8b19d2bab8d56f53f1d05965792d8fd3684561bcb83c76fca2e522c17dfd9b6fc620f201b37bf1e52f6fef22e47171783627260599fc3a1bae401aab7cce6397308f19153bea30b0fc978cd1937c078f93a82f6a7b9f838c1afea2a5ffbc9de6a8331c742fd3f2e7e788a5dc5f030c84d"}]}}, {{0x9, 0x5, 0x2ff14fd819697ce6, 0x8, 0x400, 0x63, 0x9, 0xf, [@generic={0xc0, 0xa, "bc4a222af5c157042cb4e871ee9fc9e0ca5e584d0ea2a15a473edb3b0dddb2754052454cbea6665d2d24bb9d1970abe6799d32c8a59e5e40cfb27f4ef3f6efbc913c6281eb0c12e244138e1d219661c65c0d8562a8445c13156991686711008d5c6ab75f75207466b6ed4d9482fb210cf92fb94dfcd6e959c16f7219644f31bb1f7f2215c1feeb93f873e3784be4e7bbb410642195115a6ac7422da0b9e75b157987e01a9d85c50fbf68d646918e6ec4ea53cfa27c768e0169b07c7986ae"}, @generic={0x17, 0x31, "39b0575024df98e6491de2cd910df3892bde52547c"}]}}]}}, {{0x9, 0x4, 0xe6, 0xa, 0x1, 0x11, 0x49, 0xb7, 0x40, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x260, 0x5, 0xd}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x5e8e, 0x7, 0x8, 0x6, 0x9, 0x8}, @dmm={0x7, 0x24, 0x14, 0x7, 0xb4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x61}]}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x4, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x6}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001080)={0xa, 0x6, 0xd8, 0x1a, 0xe, 0x5, 0xff, 0x40}, 0xac, &(0x7f00000010c0)={0x5, 0xf, 0xac, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x8, 0xf, 0x8, [0xc000]}, @generic={0x89, 0x10, 0xa, "0729551708d81a168dd18f08bf55980545de541ee139494cf3f9f675ecaff8b057c0989025bd8b9bced395bad6a7fba422f10063bfdb76b3e10f999bdf013e27b2f5bcae8357c7327554f0a7982960d1423152ebfa0b62f91def056a8877e2333751cd166a32a1be59182b84612e2e5d547bea46e2663db1efb1e2e778577033296919562e8c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x5, 0x4, 0xa0, 0x7}]}, 0x2, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x449}}]}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r10, 0x19, &(0x7f0000001240)={0x0, 0x74, 0xc5}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x50000042}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0000c0}, 0x804) ioctl$KDDISABIO(r10, 0x4b37) mount$bpf(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), 0x2800008, &(0x7f0000001440)={[{@mode={'mode', 0x3d, 0x7}}, {@uid={'uid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x8000000000000001}}, {@gid={'gid', 0x3d, r5}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0x8000}}], [{@smackfsroot={'smackfsroot', 0x3d, '-!\'\\+\x8c@('}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, 'hsr0\x00'}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, 'ib_multicast\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')$\x1b#,{!:!*\xfa%-$]\x9a\'}1]'}}, {@dont_hash}]}) fsmount(r10, 0x0, 0x8) mmap$xdp(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x8, 0x20010, r9, 0x80000000) write$P9_RVERSION(r10, &(0x7f00000015c0)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) openat$fuse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000001680)=@riscv64_core={0x803000000020001b, &(0x7f0000001640)=0x800}) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x5, 0x9}}}}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001700)={0xa, 0x6, 0x201, 0xb4, 0xb, 0xfb, 0x8, 0x10}, 0x5, &(0x7f0000001740)={0x5, 0xf, 0x5}, 0x2, [{0x6, &(0x7f0000001780)=@string={0x6, 0x3, "3baaf580"}}, {0x84, &(0x7f00000017c0)=@string={0x84, 0x3, "b8e681b53f10b72d55c711e88b0b952472c8650e82d0aff606d6d398b69a9ad6233b49f79c8002a13ccbf58e7baf3667739bd952b8f9763e58038f59be9f7e3e82aef30cf5b5a9a3cc08d2099375244c66defa2d984d920a5eb9eb494ecd11fffd55601abb8f6c16e03c7b40c22160f2153aa2f3b16ccfbfa9b17682eb364024915f"}}]}) r11 = accept4(r1, &(0x7f00000018c0)=@vsock, &(0x7f0000001940)=0x80, 0xc0800) connect$nfc_llcp(r11, &(0x7f00000019c0)={0x27, 0x0, 0x0, 0x4, 0x2c, 0x2, "e940f0facbee05309f09b766c428942f5323a09744078e39e179b3a600b261030fce64f3d1bf4df7a3e27b6336e73421c15f9428a2468dba65a6b5846ba8c3", 0x35}, 0x60) 10m31.332612083s ago: executing program 0 (id=1804): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000006b702000014000000b70300000000000085000000a4000000bf09000000000000b6090100c3ffffff660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m31.202518072s ago: executing program 0 (id=1805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYBLOB="793c5358bf0545bc25a2f82938f42370f395661269f129f247cb5cd8fca3f9794b0ac5867f9485bb350ceb483b3109b1f993ec57d93c532709a4df13b7dc7b1c27bbfe3070f806"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="01000000050000000800000086"], 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000f3, 0x0, 0x31}]}) ioctl$KVM_SMI(r4, 0xaeb7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x4}, 0x38) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff58) r5 = memfd_secret(0x80000) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0xb, r5, 0x0, r6}) 10m30.590461024s ago: executing program 4 (id=1806): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x2, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noxattr}, {@cache_mmap}, {@cache_fscache}, {@ignoreqv}, {@cache_mmap}, {@fscache}, {@loose}, {@privport}], [{@fowner_lt}, {@smackfsfloor}, {@fowner_eq}, {@uid_eq}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x8002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x9) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300000000000000000000000000000000ffffffa100", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f00000000000010e20000000000000000001300", [0xfffffffffffffffe, 0x8]}}) 10m30.485114847s ago: executing program 4 (id=1807): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) mknod(0x0, 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x210000, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt(0xffffffffffffffff, 0xffffffff, 0x8178, &(0x7f0000000080)="d59cfa1ad27d3f98193a3bfb260578586d99b58f39760a27a7a6bfd2d684b55d5db05b993e3b0658c0dc1fbe5595bbbce4d59627f6f62138bd0602c00a6f9fe0156413bdf73a1146420f2243788451ccba4517d8298ea0e53d2492ff93ba7b51811b6e0848aa8d1e8d8b9ae6fdf937ff748838573f0c87b7e58f382b123035437bb097b95169f3fc460cb888abc1864403616f96b6fd1e046952d6d4bc79013604605ed7ee262381cb763b24f49592", 0xaf) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 10m28.672151285s ago: executing program 4 (id=1808): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 10m28.110651764s ago: executing program 0 (id=1809): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000020000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) 10m27.930582896s ago: executing program 0 (id=1810): syz_usb_connect$uac1(0x0, 0x94, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6896, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1401, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000885}, 0x20000040) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x38}, 0x10) preadv(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40003) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) 10m27.867329118s ago: executing program 4 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x2c}}, 0x2000) 10m26.680912018s ago: executing program 0 (id=1812): r0 = socket(0x2b, 0x80801, 0x1) r1 = memfd_secret(0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee00) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_inet_udp_SIOCINQ(r0, 0x894b, &(0x7f00000001c0)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0xa12d, 0x10100, 0xfffffff8, 0x234, 0x0, r5}, &(0x7f0000000140), &(0x7f0000000000)=0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xf503, 0x40, 0x0, 0x10}, &(0x7f0000000180)=0x0, &(0x7f0000000640)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r10}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}], 0x1, 0xfffffffa) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0x184c, 0x0, 0x0, 0x0, 0x0) 10m25.675295512s ago: executing program 0 (id=1813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='\x00]\xfbo\x8e\x1d\x00\xfe', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100)="7265524f4c4f3a1a273726df520f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4) accept4(r5, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 10m12.190066899s ago: executing program 36 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x2c}}, 0x2000) 10m10.029924842s ago: executing program 37 (id=1813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='\x00]\xfbo\x8e\x1d\x00\xfe', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100)="7265524f4c4f3a1a273726df520f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4) accept4(r5, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 10.51813175s ago: executing program 7 (id=3293): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="050f"], 0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x2f) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in6=@private0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000240)=0x12d) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@loopback, @in6}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r7, 0x0) sendto$inet(r5, 0x0, 0x0, 0x24008000, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r5, &(0x7f0000000180)="b67cd9017609d6", 0x7, 0x2004082c, 0x0, 0x0) 9.2289128s ago: executing program 7 (id=3298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9200000000040056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.944146402s ago: executing program 8 (id=3300): syz_emit_ethernet(0x38b, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x355, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x7f, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000017000000000000000000"}, {0xe, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0x5, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2"}, {0x21, 0x7, "f5000000000002000000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 7.802468113s ago: executing program 7 (id=3301): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r6, 0x0, 0x0) (async) r7 = socket$rxrpc(0x21, 0x2, 0xa) listen(r7, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, 0x0) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r7], 0x48) (async) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) (async) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESHEX=r5, @ANYRESDEC=r0, @ANYRES32=r1, @ANYRESHEX=0x0], 0x0) 7.472486052s ago: executing program 2 (id=3304): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a80)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x1df, &(0x7f0000000b40)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x1d1, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0xa, 0x0, [0xfff], "f14d0932e389bf2633e0"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c6ae28805f5b92d524aba066a5be436da85d636f1b54f6075c59b208d9393cf9534dd1cf71bb9c9679a8d60a69c07f08f913afdb6f86a6237ece649c2b5108ad37de341fe229d4881a8499f2284eece490c6f36fd5fe3f236dd1f3db4855ea55d70a121cec5a20915454fbd8e958084fa1c7bb06f5659220828008d7a8c2eec03c7a5099245da5362464733606daf8d9d4e426a0f80b9a8861c274a8d6da7ab00d61fc579abd1bc8c722b9d099c45bdc99fb8b11eec5dc6bb08e587499f8bb9a8b005b94aebfc85ccd856e8b00a0eb3a703f815f6cdcdb0ab4"}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x0, "0bfe17b7624fd8107352600119a8f6b98e29f07f28b1bda18fbd1e2d183de15ba879d4a6c06bbbee9f467aa10d6bce6d5666700bf2874f19388ecd578605f24622753e0ab157cb6d2c33869c0e9c99b733202bd1c52a32aa5a8d1bbd1a2fc7fac6416916e52af21742a71bd5b8ebae1f1b004a9243246de7fdd2e9a73b6a847298bf890bb0c14724f2a0d764cd56de2ff5c154ab"}}}}}}, 0x0) 7.470505089s ago: executing program 8 (id=3305): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x80000000101008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000940)={{}, {}, 0x10000000, 0x1, 0xfd}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) tkill(0x0, 0x35) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 7.3498548s ago: executing program 7 (id=3307): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000dabe00", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x21e1c8, 0xffff, 0x0, 0x9, 0x5}}, 0x50) 7.195262153s ago: executing program 8 (id=3308): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000e40)="f94d45", 0xfdef}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 6.998387745s ago: executing program 7 (id=3309): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r4 = socket(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@li, {}, {0x7, 0x1, 0x4}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, [@jmp={0x5, 0x0, 0x1, 0x6, 0x2, 0x40, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000240)='syzkaller\x00', 0x24, 0xff9, &(0x7f0000001f40)=""/4089, 0x40f00, 0x15, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xe, 0x3fce, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r5, 0x401) 5.496078859s ago: executing program 6 (id=3312): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9", 0x31}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0a", 0x92}], 0x3}], 0x1, 0x44802) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000100)=""/41, 0x29}, {&(0x7f00000003c0)=""/168, 0xa8}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000880)=""/112, 0x70}, {&(0x7f0000000a40)=""/146, 0x92}, {&(0x7f0000000240)=""/63, 0x3f}], 0x7}, 0x0) 5.322166303s ago: executing program 8 (id=3313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000b2000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.276789063s ago: executing program 7 (id=3314): r0 = getpgrp(0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x40026, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000020a01020000003200000000070000020800024000000001140000001100010000000000000000000a00000a"], 0x44}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000804) close(r3) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2, r2}]) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x18000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r7, &(0x7f0000000880)=[{&(0x7f00000030c0)=""/4096, 0x79c5}], 0x1) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 5.214177973s ago: executing program 9 (id=3315): syz_emit_ethernet(0x38b, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x355, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x7f, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000017000000000000000000"}, {0xe, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0x5, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2"}, {0x21, 0x7, "f5000000000002000000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 5.212874832s ago: executing program 6 (id=3316): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x1000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "a42c3907"}]}}, 0x0}, 0x0) 5.081264881s ago: executing program 6 (id=3317): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0xd0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 4.747545328s ago: executing program 6 (id=3318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) socketpair(0x2f, 0x4, 0x2c, &(0x7f0000001400)) 4.707128441s ago: executing program 9 (id=3319): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) accept4(r0, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$tun(0xffffffffffffffff, 0x0, 0xfdef) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r5, @ANYBLOB="2000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 4.67016461s ago: executing program 8 (id=3320): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x2, 0x8, 0x9, 0x7f, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, &(0x7f0000000140)) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000100)={0x980900, 0x7, @name="ea8dd03fa72836ba95935cd834c7b2bb431da1f2462e78a208e78fe608a462a8"}) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x5, {0x5, 0x8, "098580"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x7, 0x2001) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800e0001006970366772657461700000001400028006000f000000000006000e00019c"], 0x48}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0xf, 0x49, 0x7fff0000}]}) r5 = socket$inet6(0xa, 0x5, 0x5) close(r5) socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x3, 0x9}, 0x20) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000002, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xadbd1262e940961f, 0x0) ioctl$HIDIOCSREPORT(r10, 0x400c4808, &(0x7f0000000280)={0x2, 0x3}) 4.474498139s ago: executing program 2 (id=3321): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}}}}}, 0x0) 3.153229571s ago: executing program 9 (id=3322): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="020300021000000000000000030000000200080008000000fd0000000000000005000600000000000a00000000000000fc000000000000e800000000000000000000000000000004020001000000000000000316ff80000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 3.152729324s ago: executing program 6 (id=3323): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000e40)="f94d45", 0xfdef}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.955722919s ago: executing program 2 (id=3324): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38d"}, 0x26) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.906826244s ago: executing program 6 (id=3325): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = syz_open_dev$MSR(&(0x7f0000000740), 0x33, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/211, 0xd3}], 0x2) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r3, r4}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 2.710259447s ago: executing program 9 (id=3326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x6}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000e00000000700000b890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x500) 2.508082646s ago: executing program 2 (id=3327): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9", 0x31}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0a", 0x92}], 0x3}], 0x1, 0x44802) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000100)=""/41, 0x29}, {&(0x7f00000003c0)=""/168, 0xa8}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000880)=""/112, 0x70}, {&(0x7f0000000a40)=""/146, 0x92}, {&(0x7f0000000240)=""/63, 0x3f}], 0x7}, 0x0) 2.29468748s ago: executing program 9 (id=3328): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setrlimit(0x1, &(0x7f0000000040)={0x6065, 0x8}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000140b9000000000000010000850200000000000000020000000021004300000000da"], 0x0, 0x52, 0x0, 0x0, 0x4}, 0x28) 2.246459251s ago: executing program 2 (id=3329): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@bcast, @bcast, @rose, @null, @null, @default, @default]}, &(0x7f0000000000)=0x48, 0x80800) accept$netrom(r0, 0x0, &(0x7f0000000140)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x1, 0x2}) 226.350001ms ago: executing program 9 (id=3330): syz_emit_ethernet(0x3a1, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x36b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x7f, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000017000000000000000000"}, {0xe, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0x8, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537"}, {0x21, 0x7, "f5000000000002000000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 12.89028ms ago: executing program 2 (id=3331): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a80)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x1df, &(0x7f0000000b40)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x1d1, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0xa, 0x0, [0xfff], "f14d0932e389bf2633e0"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c6ae28805f5b92d524aba066a5be436da85d636f1b54f6075c59b208d9393cf9534dd1cf71bb9c9679a8d60a69c07f08f913afdb6f86a6237ece649c2b5108ad37de341fe229d4881a8499f2284eece490c6f36fd5fe3f236dd1f3db4855ea55d70a121cec5a20915454fbd8e958084fa1c7bb06f5659220828008d7a8c2eec03c7a5099245da5362464733606daf8d9d4e426a0f80b9a8861c274a8d6da7ab00d61fc579abd1bc8c722b9d099c45bdc99fb8b11eec5dc6bb08e587499f8bb9a8b005b94aebfc85ccd856e8b00a0eb3a703f815f6cdcdb0ab4"}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x0, "0bfe17b7624fd8107352600119a8f6b98e29f07f28b1bda18fbd1e2d183de15ba879d4a6c06bbbee9f467aa10d6bce6d5666700bf2874f19388ecd578605f24622753e0ab157cb6d2c33869c0e9c99b733202bd1c52a32aa5a8d1bbd1a2fc7fac6416916e52af21742a71bd5b8ebae1f1b004a9243246de7fdd2e9a73b6a847298bf890bb0c14724f2a0d764cd56de2ff5c154ab"}}}}}}, 0x0) 0s ago: executing program 8 (id=3332): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="240000002c00070100000000ffdbdf25027c00000800018004000600080002"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000080)=0x7) kernel console output (not intermixed with test programs): usb 10-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1194.206027][T10727] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.253642][T13877] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1194.258806][ T5860] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1194.302672][ T31] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1194.308843][T10727] usb 10-1: config 0 descriptor?? [ 1194.403443][ T5860] usb 8-1: device descriptor read/64, error -71 [ 1194.704229][T12528] usb 10-1: USB disconnect, device number 14 [ 1194.733221][ T5860] usb usb8-port1: attempt power cycle [ 1194.765937][T12188] usb 7-1: USB disconnect, device number 7 [ 1196.209846][ T5860] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1196.288824][ T5860] usb 8-1: device descriptor read/8, error -71 [ 1196.769034][T12188] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1196.868794][ T5860] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1196.889462][ T5860] usb 8-1: Using ep0 maxpacket: 16 [ 1196.894908][ T5860] usb 8-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1196.894941][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.894966][ T5860] usb 8-1: Product: syz [ 1196.894981][ T5860] usb 8-1: Manufacturer: syz [ 1196.894998][ T5860] usb 8-1: SerialNumber: syz [ 1196.909905][ T31] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1196.918820][T12188] usb 7-1: Using ep0 maxpacket: 16 [ 1196.945290][T12188] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1196.945397][T12188] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.945460][T12188] usb 7-1: config 0 has no interface number 0 [ 1196.952695][ T5860] usb 8-1: config 0 descriptor?? [ 1196.964610][T12188] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1196.964690][T12188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.964713][T12188] usb 7-1: Product: syz [ 1196.964737][T12188] usb 7-1: Manufacturer: syz [ 1196.964786][T12188] usb 7-1: SerialNumber: syz [ 1197.031102][T12188] usb 7-1: config 0 descriptor?? [ 1197.047539][ T5860] as10x_usb: device has been detected [ 1197.048499][ T5860] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1197.072893][T12188] uvcvideo 7-1:0.105: probe with driver uvcvideo failed with error -22 [ 1197.099402][ T5860] usb 8-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 1197.128523][ T5860] as10x_usb: error during firmware upload part1 [ 1197.136072][ T5860] Registered device Sky IT Digital Key (green led) [ 1197.199031][ T31] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1197.199084][ T31] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.199111][ T31] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1197.199142][ T31] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1197.199178][ T31] usb 10-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1197.199205][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.204881][ T31] usb 10-1: config 0 descriptor?? [ 1197.205493][T13912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.206048][T13912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.724170][T12188] usb 8-1: USB disconnect, device number 8 [ 1197.843132][ T5860] usb 7-1: USB disconnect, device number 8 [ 1197.956062][ T31] usbhid 10-1:0.0: can't add hid device: -71 [ 1197.956196][ T31] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1198.051919][ T31] usb 10-1: USB disconnect, device number 15 [ 1199.167143][T12188] Unregistered device Sky IT Digital Key (green led) [ 1199.214029][T12188] as10x_usb: device has been disconnected [ 1201.549859][T13954] tipc: Started in network mode [ 1201.549895][T13954] tipc: Node identity ac1414aa, cluster identity 4711 [ 1202.081032][T13954] tipc: Enabled bearer , priority 10 [ 1203.390912][ T5860] tipc: Node number set to 2886997162 [ 1204.040015][T13962] IPv6: addrconf: prefix option has invalid lifetime [ 1204.361971][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 1207.927758][T13989] Mount JFS Failure: -5 [ 1207.927773][T13989] jfs_mount failed w/return code = -5 [ 1208.042263][T12188] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1208.321700][T12188] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 1208.321733][T12188] usb 3-1: config 0 has no interface number 0 [ 1208.321781][T12188] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1208.321811][T12188] usb 3-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1208.321836][T12188] usb 3-1: config 0 interface 216 has no altsetting 0 [ 1208.321872][T12188] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1208.321898][T12188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.413913][T12188] usb 3-1: config 0 descriptor?? [ 1208.414981][T13985] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1208.418406][T12188] usb 3-1: NFC: intf ffff88802ac83000 id ffffffff8e54a8e0 [ 1208.660977][ T31] usb 3-1: USB disconnect, device number 25 [ 1208.882039][T14001] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 1208.967754][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1208.967774][ T37] audit: type=1326 audit(1771199716.979:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1208.967825][ T37] audit: type=1326 audit(1771199716.979:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1208.967875][ T37] audit: type=1326 audit(1771199716.979:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1209.016078][ T37] audit: type=1326 audit(1771199717.029:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3aa6a7c84e code=0x7ffc0000 [ 1209.016228][ T37] audit: type=1326 audit(1771199717.029:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3aa6abd297 code=0x7ffc0000 [ 1209.016354][ T37] audit: type=1326 audit(1771199717.029:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1209.016473][ T37] audit: type=1326 audit(1771199717.029:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3aa6abd297 code=0x7ffc0000 [ 1209.016634][ T37] audit: type=1326 audit(1771199717.029:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3aa6a7c84e code=0x7ffc0000 [ 1209.016743][ T37] audit: type=1326 audit(1771199717.029:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1209.016865][ T37] audit: type=1326 audit(1771199717.029:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14000 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1209.385753][T14003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'. [ 1209.462860][T14001] bond3: entered promiscuous mode [ 1209.463316][T14001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1209.465321][T14003] bond3: entered allmulticast mode [ 1209.847640][T14003] bond3: (slave bridge1): making interface the new active one [ 1209.847665][T14003] bridge1: entered promiscuous mode [ 1209.847836][T14003] bridge1: entered allmulticast mode [ 1209.909562][T14003] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1210.002044][T14016] loop8: detected capacity change from 0 to 7 [ 1210.090715][T14016] Dev loop8: unable to read RDB block 7 [ 1210.090756][T14016] loop8: unable to read partition table [ 1210.090925][T14016] loop8: partition table beyond EOD, truncated [ 1210.090939][T14016] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1210.488909][T10727] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1210.815249][T14019] tipc: Enabled bearer , priority 0 [ 1211.988991][ T6002] tipc: Node number set to 4209852189 [ 1213.265696][T14029] syzkaller0: entered promiscuous mode [ 1213.265725][T14029] syzkaller0: entered allmulticast mode [ 1213.268065][T10727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.268090][T10727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.268107][T10727] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1213.268138][T10727] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1213.268156][T10727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.361807][T10727] usb 3-1: config 0 descriptor?? [ 1213.489569][T10727] usb 3-1: can't set config #0, error -71 [ 1213.550644][T10727] usb 3-1: USB disconnect, device number 26 [ 1213.809916][ T36] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1213.938746][ T36] usb 7-1: device descriptor read/64, error -71 [ 1214.040720][T10727] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1214.185946][ T36] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1214.199245][T10727] usb 3-1: not running at top speed; connect to a high speed hub [ 1214.201259][T10727] usb 3-1: config 3 has an invalid interface number: 47 but max is 1 [ 1214.201290][T10727] usb 3-1: config 3 has no interface number 0 [ 1214.201375][T10727] usb 3-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1214.201402][T10727] usb 3-1: config 3 interface 1 has no altsetting 0 [ 1214.201423][T10727] usb 3-1: config 3 interface 47 has no altsetting 0 [ 1214.206820][T10727] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 1214.206854][T10727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.206877][T10727] usb 3-1: Product: syz [ 1214.206892][T10727] usb 3-1: Manufacturer: syz [ 1214.206906][T10727] usb 3-1: SerialNumber: syz [ 1214.259220][ T5959] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1214.338780][ T36] usb 7-1: device descriptor read/64, error -71 [ 1214.435760][ T5959] usb 10-1: Using ep0 maxpacket: 8 [ 1214.449350][ T36] usb usb7-port1: attempt power cycle [ 1214.457177][ T5959] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1214.457211][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.457234][ T5959] usb 10-1: Product: syz [ 1214.457250][ T5959] usb 10-1: Manufacturer: syz [ 1214.457266][ T5959] usb 10-1: SerialNumber: syz [ 1214.525207][ T5959] usb 10-1: config 0 descriptor?? [ 1214.538611][ T5959] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1214.567703][T10727] usb 3-1: selecting invalid altsetting 0 [ 1214.568274][ T5959] dvb-usb: bulk message failed: -22 (2/0) [ 1214.655173][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1214.656014][ T5959] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1214.656091][ T5959] usb 10-1: media controller created [ 1214.760554][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1214.762138][T14023] tipc: Resetting bearer [ 1214.924364][ T5959] cxusb: set interface failed [ 1214.924387][ T5959] dvb-usb: bulk message failed: -22 (1/0) [ 1214.928046][T10727] usb 3-1: USB disconnect, device number 27 [ 1215.595007][T14064] loop5: detected capacity change from 0 to 1 [ 1217.228857][ T5959] DVB: Unable to find symbol mt352_attach() [ 1217.228892][ T5959] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1217.466428][T14074] loop2: detected capacity change from 0 to 7 [ 1217.469308][T14074] Dev loop2: unable to read RDB block 7 [ 1217.469383][T14074] loop2: AHDI p2 [ 1217.469457][T14074] loop2: partition table partially beyond EOD, truncated [ 1217.497515][T14023] tipc: Disabling bearer [ 1217.573998][T12484] udevd[12484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1217.648798][ T5959] rc_core: IR keymap rc-dvico-portable not found [ 1217.648819][ T5959] Registered IR keymap rc-empty [ 1217.783612][ T5959] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1217.786052][ T5959] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input31 [ 1217.839422][ T5959] dvb-usb: schedule remote query interval to 100 msecs. [ 1217.839448][ T5959] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1217.896065][ T5959] usb 10-1: USB disconnect, device number 16 [ 1219.426641][ T5959] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1221.548312][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2278'. [ 1222.361483][T14106] ODEBUG: Out of memory. ODEBUG disabled [ 1222.570440][T14129] input: syz0 as /devices/virtual/input/input32 [ 1223.068842][ T5959] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1223.231913][ T5959] usb 8-1: Using ep0 maxpacket: 16 [ 1223.508188][ T5959] usb 8-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1223.508248][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1223.508280][ T5959] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 1223.508307][ T5959] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1223.597550][T14146] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.2283'. [ 1224.388927][T14151] netlink: 26 bytes leftover after parsing attributes in process `syz.9.2287'. [ 1224.578343][ T5959] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1224.578377][ T5959] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1224.578401][ T5959] usb 8-1: Manufacturer: syz [ 1224.631658][ T5959] usb 8-1: config 0 descriptor?? [ 1224.984927][T14169] loop3: detected capacity change from 0 to 7 [ 1224.995608][T14169] Dev loop3: unable to read RDB block 7 [ 1224.995641][T14169] loop3: AHDI p1 p2 [ 1224.995670][T14169] loop3: partition table partially beyond EOD, truncated [ 1224.995915][T14169] loop3: p1 start 1702000233 is beyond EOD, truncated [ 1225.139009][ T5959] rc_core: IR keymap rc-hauppauge not found [ 1225.139033][ T5959] Registered IR keymap rc-empty [ 1225.142535][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1225.613404][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1225.871472][ T5959] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1225.897687][ T5959] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input33 [ 1226.015840][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.029297][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.053617][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.069177][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.089341][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.110703][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.129137][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.149108][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.169220][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.190161][ T5959] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1226.247953][ T37] kauditd_printk_skb: 117 callbacks suppressed [ 1226.247975][ T37] audit: type=1326 audit(1771199734.259:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.281485][ T37] audit: type=1326 audit(1771199734.299:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.283223][ T37] audit: type=1326 audit(1771199734.299:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.283796][ T37] audit: type=1326 audit(1771199734.299:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.284080][ T37] audit: type=1326 audit(1771199734.299:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.285142][ T37] audit: type=1326 audit(1771199734.299:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.285550][ T37] audit: type=1326 audit(1771199734.299:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.285840][ T37] audit: type=1326 audit(1771199734.299:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.286248][ T37] audit: type=1326 audit(1771199734.299:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.485294][ T5959] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1226.485363][ T5959] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1226.506150][ T37] audit: type=1326 audit(1771199734.299:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14185 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1226.633258][ T5959] usb 8-1: USB disconnect, device number 9 [ 1227.311220][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2299'. [ 1228.058746][ T5880] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1228.240138][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 1228.286144][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1228.286250][ T5880] usb 3-1: no configurations [ 1228.286266][ T5880] usb 3-1: can't read configurations, error -22 [ 1228.569250][T10727] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1228.967397][T10727] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.967424][T10727] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.967453][T10727] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1228.967470][T10727] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.034926][T10727] usb 10-1: config 0 descriptor?? [ 1229.543641][T10727] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1229.543684][T10727] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1229.543716][T10727] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1229.543746][T10727] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1229.543775][T10727] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1229.611047][T10727] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 1229.728993][T10727] playstation 0003:054C:0DF2.000E: Invalid reportID received, expected 9 got 128 [ 1229.729040][T10727] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense pairing info: -22 [ 1229.729102][T10727] playstation 0003:054C:0DF2.000E: Failed to get MAC address from DualSense [ 1229.729128][T10727] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 1229.732639][T10727] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -22 [ 1230.068079][T14239] netlink: 6 bytes leftover after parsing attributes in process `syz.9.2308'. [ 1232.013840][ T5880] usb 10-1: USB disconnect, device number 17 [ 1233.728923][T14303] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2315'. [ 1237.429146][ T5880] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1237.948762][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 1237.951377][ T5880] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1237.951405][ T5880] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.951428][ T5880] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1237.954697][ T5880] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1237.954731][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.954755][ T5880] usb 8-1: Product: syz [ 1237.954773][ T5880] usb 8-1: Manufacturer: syz [ 1237.954789][ T5880] usb 8-1: SerialNumber: syz [ 1238.043549][T14333] loop2: detected capacity change from 0 to 7 [ 1238.100369][T14333] Dev loop2: unable to read RDB block 7 [ 1238.100408][T14333] loop2: AHDI p2 p3 [ 1238.100500][T14333] loop2: partition table partially beyond EOD, truncated [ 1238.100747][T14333] loop2: p3 start 335544320 is beyond EOD, truncated [ 1238.507545][ T5880] usb 8-1: 0:2 : does not exist [ 1238.595830][ T37] audit: type=1326 audit(1771199746.589:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14337 comm="syz.6.2329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd74a0bf79 code=0x7ffd0000 [ 1239.157764][T14327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1239.172904][T14327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1239.205586][ T5880] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 1239.339558][ T5880] usb 8-1: USB disconnect, device number 10 [ 1239.399602][ T5860] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1239.515095][T12501] udevd[12501]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1239.578710][ T5860] usb 10-1: Using ep0 maxpacket: 16 [ 1239.600674][ T5860] usb 10-1: config 0 has no interfaces? [ 1239.620690][ T5860] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1239.620725][ T5860] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.620748][ T5860] usb 10-1: Product: syz [ 1239.620763][ T5860] usb 10-1: Manufacturer: syz [ 1239.620780][ T5860] usb 10-1: SerialNumber: syz [ 1239.681254][ T5860] usb 10-1: config 0 descriptor?? [ 1239.943096][ T5880] usb 10-1: USB disconnect, device number 18 [ 1241.980118][ T6002] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1242.133972][ T6002] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 1242.134008][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.172973][T14390] loop2: detected capacity change from 0 to 7 [ 1242.173569][ T6002] usb 3-1: config 0 descriptor?? [ 1242.174031][T14390] loop2: [ 1242.174060][T14390] loop2: partition table partially beyond EOD, truncated [ 1242.291209][T14393] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2344'. [ 1242.456128][T14380] IPv6: addrconf: prefix option has invalid lifetime [ 1242.465867][ T6002] usb 3-1: string descriptor 0 read error: -71 [ 1242.465942][ T6002] ldusb 3-1:0.0: Interrupt in endpoint not found [ 1242.498326][ T6002] usb 3-1: USB disconnect, device number 30 [ 1242.861124][T14411] FAULT_INJECTION: forcing a failure. [ 1242.861124][T14411] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.861169][T14411] CPU: 0 UID: 0 PID: 14411 Comm: syz.7.2349 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1242.861203][T14411] Tainted: [L]=SOFTLOCKUP [ 1242.861211][T14411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1242.861224][T14411] Call Trace: [ 1242.861234][T14411] [ 1242.861245][T14411] dump_stack_lvl+0xe8/0x150 [ 1242.861285][T14411] should_fail_ex+0x46b/0x600 [ 1242.861320][T14411] should_failslab+0xa8/0x100 [ 1242.861349][T14411] __kmalloc_cache_noprof+0x84/0x690 [ 1242.861376][T14411] ? mutex_lock_nested+0x152/0x1d0 [ 1242.861398][T14411] ? io_uring_alloc_task_context+0x178/0x5a0 [ 1242.861433][T14411] ? io_uring_alloc_task_context+0x107/0x5a0 [ 1242.861474][T14411] io_uring_alloc_task_context+0x178/0x5a0 [ 1242.861516][T14411] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1242.861558][T14411] ? __fget_files+0x2a/0x420 [ 1242.861595][T14411] __io_uring_add_tctx_node+0x38d/0x530 [ 1242.861634][T14411] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1242.861668][T14411] ? __fget_files+0x2a/0x420 [ 1242.861703][T14411] ? __fget_files+0x2a/0x420 [ 1242.861740][T14411] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 1242.861790][T14411] __se_sys_io_uring_enter+0x15d8/0x18c0 [ 1242.861829][T14411] ? lockdep_hardirqs_on+0x7a/0x110 [ 1242.861865][T14411] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1242.861898][T14411] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1242.861935][T14411] ? fput+0xa0/0xd0 [ 1242.861966][T14411] ? ksys_write+0x248/0x270 [ 1242.861991][T14411] ? __pfx_ksys_write+0x10/0x10 [ 1242.862021][T14411] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1242.862060][T14411] do_syscall_64+0x14d/0xf80 [ 1242.862089][T14411] ? rcu_is_watching+0x15/0xb0 [ 1242.862121][T14411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.862146][T14411] ? clear_bhb_loop+0x40/0x90 [ 1242.862174][T14411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.862196][T14411] RIP: 0033:0x7faf4df0bf79 [ 1242.862218][T14411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.862238][T14411] RSP: 002b:00007faf4bd1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1242.862263][T14411] RAX: ffffffffffffffda RBX: 00007faf4e186180 RCX: 00007faf4df0bf79 [ 1242.862280][T14411] RDX: 0000000000000000 RSI: 000000000000184c RDI: 0000000000000009 [ 1242.862295][T14411] RBP: 00007faf4bd1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.862309][T14411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.862323][T14411] R13: 00007faf4e186218 R14: 00007faf4e186180 R15: 00007ffd1de53338 [ 1242.862358][T14411] [ 1243.498770][T14410] tipc: Enabled bearer , priority 0 [ 1243.558797][ T5802] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1243.564535][T14413] syzkaller0: entered promiscuous mode [ 1243.564564][T14413] syzkaller0: entered allmulticast mode [ 1243.746931][ T5802] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1243.746964][ T5802] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.746987][ T5802] usb 7-1: config 0 has no interface number 0 [ 1243.781561][ T5802] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1243.781595][ T5802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.781617][ T5802] usb 7-1: Product: syz [ 1243.781633][ T5802] usb 7-1: Manufacturer: syz [ 1243.781649][ T5802] usb 7-1: SerialNumber: syz [ 1243.829322][T14408] tipc: Resetting bearer [ 1243.832999][T14418] loop2: detected capacity change from 0 to 7 [ 1243.834932][ T5802] usb 7-1: config 0 descriptor?? [ 1243.859345][T14418] Dev loop2: unable to read RDB block 7 [ 1243.859377][T14418] loop2: AHDI p2 p3 [ 1243.859408][T14418] loop2: partition table partially beyond EOD, truncated [ 1243.859661][T14418] loop2: p3 start 335544320 is beyond EOD, truncated [ 1243.864397][ T5802] ims_pcu 7-1:0.41: Missing CDC union descriptor [ 1243.864461][ T5802] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22 [ 1243.878867][ T5880] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1243.929671][T14405] tipc: Resetting bearer [ 1244.068718][ T5880] usb 9-1: Using ep0 maxpacket: 8 [ 1244.086574][ T5880] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1244.086607][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.086645][ T5880] usb 9-1: Product: syz [ 1244.086661][ T5880] usb 9-1: Manufacturer: syz [ 1244.086677][ T5880] usb 9-1: SerialNumber: syz [ 1244.184254][T14412] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1244.206020][ T5880] usb 9-1: config 0 descriptor?? [ 1244.307025][T14425] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2353'. [ 1244.347850][T14405] tipc: Disabling bearer [ 1244.442508][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.444256][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.468855][ T37] audit: type=1326 audit(1771199752.479:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14420 comm="syz.7.2356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf4df0bf79 code=0x0 [ 1244.494012][ T5880] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1244.620343][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.622803][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.669161][ T5880] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1246.692043][ T5880] usb 9-1: USB disconnect, device number 16 [ 1246.777173][ T5959] usb 7-1: USB disconnect, device number 12 [ 1247.454828][T14456] IPv6: addrconf: prefix option has invalid lifetime [ 1247.660718][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2365'. [ 1248.077227][T14473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.077630][T14473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.169312][T14473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.169697][T14473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.781634][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2372'. [ 1250.078969][ T6002] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1250.242846][ T6002] usb 9-1: Using ep0 maxpacket: 16 [ 1250.254966][ T6002] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.255087][ T6002] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1250.255120][ T6002] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1250.259122][ T6002] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1250.259208][ T6002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.259264][ T6002] usb 9-1: Product: syz [ 1250.259299][ T6002] usb 9-1: Manufacturer: syz [ 1250.259342][ T6002] usb 9-1: SerialNumber: syz [ 1250.368751][ T5860] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1250.496247][T14485] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2374'. [ 1250.519306][ T5860] usb 7-1: Using ep0 maxpacket: 16 [ 1250.525269][ T5860] usb 7-1: config 252 has an invalid interface number: 165 but max is 0 [ 1250.525300][ T5860] usb 7-1: config 252 has no interface number 0 [ 1250.525584][ T5860] usb 7-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 1250.525612][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.589907][ T6002] usb 9-1: unit 2 not found! [ 1250.625309][T14489] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2374'. [ 1250.719104][ T5860] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 1250.719142][ T5860] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1250.877576][ T5959] usb 7-1: USB disconnect, device number 13 [ 1251.034059][ T6002] usb 9-1: USB disconnect, device number 17 [ 1251.306573][T12501] udevd[12501]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1251.878752][ T44] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1252.036998][ T44] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.037031][ T44] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1252.037072][ T44] usb 3-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 1252.037099][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.210574][T14505] syzkaller0: entered promiscuous mode [ 1252.210605][T14505] syzkaller0: entered allmulticast mode [ 1252.213274][T14510] tipc: Enabled bearer , priority 0 [ 1252.392507][T14504] tipc: Resetting bearer [ 1252.402076][ T5802] usb 3-1: USB disconnect, device number 31 [ 1255.543091][T14540] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2383'. [ 1255.802300][T14504] tipc: Disabling bearer [ 1257.368009][T14557] loop5: detected capacity change from 0 to 7 [ 1257.479211][T12501] Dev loop5: unable to read RDB block 7 [ 1257.479257][T12501] loop5: unable to read partition table [ 1257.479492][T12501] loop5: partition table beyond EOD, truncated [ 1257.514648][T14557] Dev loop5: unable to read RDB block 7 [ 1257.514706][T14557] loop5: unable to read partition table [ 1257.514913][T14557] loop5: partition table beyond EOD, truncated [ 1257.514954][T14557] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1257.817649][T14566] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2390'. [ 1262.219307][T14607] overlay: Unknown parameter 'func' [ 1262.347280][T14609] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2398'. [ 1262.347320][T14609] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2398'. [ 1263.653047][T14639] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2407'. [ 1266.529126][ T5860] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1266.680456][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 1266.682944][ T5860] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1266.682972][ T5860] usb 3-1: config 0 has no interface number 0 [ 1266.685955][ T5860] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1266.685985][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.686009][ T5860] usb 3-1: Product: syz [ 1266.686025][ T5860] usb 3-1: Manufacturer: syz [ 1266.686042][ T5860] usb 3-1: SerialNumber: syz [ 1266.772905][ T5860] usb 3-1: config 0 descriptor?? [ 1267.051437][ T5860] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1267.092946][ T6002] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1267.240219][T14704] syzkaller0: entered promiscuous mode [ 1267.240249][T14704] syzkaller0: entered allmulticast mode [ 1267.248718][ T6002] usb 9-1: Using ep0 maxpacket: 16 [ 1267.266912][ T6002] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1267.267010][ T6002] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1267.267040][ T6002] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1267.283984][ T6002] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1267.285701][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1267.287365][ T6002] usb 9-1: SerialNumber: syz [ 1267.429249][T14693] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1267.577786][T14708] tipc: Enabled bearer , priority 0 [ 1267.587699][ T5860] gspca_spca1528: reg_w err -110 [ 1267.598884][ T5860] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1267.700402][T14703] tipc: Resetting bearer [ 1267.842411][ T5959] usb 3-1: USB disconnect, device number 32 [ 1267.987279][T14703] tipc: Disabling bearer [ 1268.166232][ T6002] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1268.222832][ T6002] usb 9-1: USB disconnect, device number 18 [ 1268.353632][T14725] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2426'. [ 1268.593292][T14728] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1269.384205][T14758] exFAT-fs (loop2): unable to read boot sector [ 1269.384225][T14758] exFAT-fs (loop2): failed to read boot sector [ 1269.384236][T14758] exFAT-fs (loop2): failed to recognize exfat type [ 1270.968805][ T5802] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1271.125753][ T5802] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1271.125789][ T5802] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1271.125816][ T5802] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1271.125863][ T5802] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1271.125890][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.223469][T14784] loop5: detected capacity change from 0 to 7 [ 1271.226721][ T5802] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 1271.227369][T14784] Dev loop5: unable to read RDB block 7 [ 1271.227411][T14784] loop5: unable to read partition table [ 1271.227608][T14784] loop5: partition table beyond EOD, truncated [ 1271.227632][T14784] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1271.352920][T14794] tipc: Enabling of bearer rejected, already enabled [ 1271.590057][ T5802] usb 3-1: USB disconnect, device number 33 [ 1271.740513][T14807] loop8: detected capacity change from 0 to 7 [ 1271.741546][T14807] Dev loop8: unable to read RDB block 7 [ 1271.741599][T14807] loop8: unable to read partition table [ 1271.741805][T14807] loop8: partition table beyond EOD, truncated [ 1271.741825][T14807] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1274.655686][ T5800] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 1274.655811][ T5800] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 1274.792545][T14847] QAT: Device 1 not found [ 1279.214097][T14875] FAULT_INJECTION: forcing a failure. [ 1279.214097][T14875] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.214235][T14875] CPU: 0 UID: 0 PID: 14875 Comm: syz.2.2462 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1279.214270][T14875] Tainted: [L]=SOFTLOCKUP [ 1279.214279][T14875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1279.214293][T14875] Call Trace: [ 1279.214303][T14875] [ 1279.214314][T14875] dump_stack_lvl+0xe8/0x150 [ 1279.214352][T14875] should_fail_ex+0x46b/0x600 [ 1279.214388][T14875] should_failslab+0xa8/0x100 [ 1279.214418][T14875] __kmalloc_cache_noprof+0x84/0x690 [ 1279.214444][T14875] ? io_wq_create+0x6b/0x7b0 [ 1279.214503][T14875] io_wq_create+0x6b/0x7b0 [ 1279.214553][T14875] io_uring_alloc_task_context+0x265/0x5a0 [ 1279.214599][T14875] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1279.214639][T14875] ? __fget_files+0x2a/0x420 [ 1279.214677][T14875] __io_uring_add_tctx_node+0x38d/0x530 [ 1279.214715][T14875] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1279.214747][T14875] ? __fget_files+0x2a/0x420 [ 1279.214782][T14875] ? __fget_files+0x2a/0x420 [ 1279.214817][T14875] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 1279.214855][T14875] __se_sys_io_uring_enter+0x15d8/0x18c0 [ 1279.214892][T14875] ? lockdep_hardirqs_on+0x7a/0x110 [ 1279.214927][T14875] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1279.214955][T14875] ? lock_release+0x2d7/0x3a0 [ 1279.214988][T14875] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1279.215027][T14875] ? fput+0xa0/0xd0 [ 1279.215056][T14875] ? ksys_write+0x248/0x270 [ 1279.215082][T14875] ? __pfx_ksys_write+0x10/0x10 [ 1279.215110][T14875] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1279.215150][T14875] do_syscall_64+0x14d/0xf80 [ 1279.215179][T14875] ? rcu_is_watching+0x15/0xb0 [ 1279.215211][T14875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.215236][T14875] ? clear_bhb_loop+0x40/0x90 [ 1279.215265][T14875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.215288][T14875] RIP: 0033:0x7f3aa6abbf79 [ 1279.215309][T14875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.215330][T14875] RSP: 002b:00007f3aa48cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1279.215355][T14875] RAX: ffffffffffffffda RBX: 00007f3aa6d36180 RCX: 00007f3aa6abbf79 [ 1279.215373][T14875] RDX: 0000000000000000 RSI: 000000000000184c RDI: 0000000000000009 [ 1279.215407][T14875] RBP: 00007f3aa48cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.215422][T14875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.215437][T14875] R13: 00007f3aa6d36218 R14: 00007f3aa6d36180 R15: 00007fff6e008538 [ 1279.215473][T14875] [ 1279.585616][T14877] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2467'. [ 1283.441322][T14902] loop2: detected capacity change from 0 to 7 [ 1283.442391][T14902] Dev loop2: unable to read RDB block 7 [ 1283.442419][T14902] loop2: AHDI p2 [ 1283.442446][T14902] loop2: partition table partially beyond EOD, truncated [ 1283.620198][ T5860] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1283.784540][ T5860] usb 9-1: Using ep0 maxpacket: 8 [ 1283.787097][ T5860] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1283.787159][ T5860] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1283.787185][ T5860] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.787214][ T5860] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1283.787242][ T5860] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.787289][ T5860] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1283.787314][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.184566][T14928] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2481'. [ 1285.354426][ T6002] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1286.298420][T12528] usb 9-1: USB disconnect, device number 19 [ 1286.574189][ T6002] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1286.574286][ T6002] usb 8-1: too many configurations: 240, using maximum allowed: 8 [ 1286.577078][ T6002] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1286.577124][ T6002] usb 8-1: can't read configurations, error -71 [ 1286.670050][T14943] loop5: detected capacity change from 0 to 7 [ 1286.674061][T14943] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1286.674324][T14943] loop5: p1 size 33488896 extends beyond EOD, truncated [ 1286.691935][T14943] loop5: p2 start 3092617689 is beyond EOD, truncated [ 1286.691965][T14943] loop5: p3 start 3917893270 is beyond EOD, truncated [ 1286.691984][T14943] loop5: p4 start 4207865973 is beyond EOD, truncated [ 1286.692018][T14943] loop5: p5 start 1189728164 is beyond EOD, truncated [ 1286.692088][T14943] loop5: p6 start 1446819786 is beyond EOD, truncated [ 1286.880295][T12501] udevd[12501]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1287.621139][T14949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2487'. [ 1289.327437][T14951] tipc: Enabling of bearer rejected, already enabled [ 1289.683085][ T5802] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1289.840989][ T5802] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 1289.841042][ T5802] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 1289.841074][ T5802] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1289.841109][ T5802] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1289.841136][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.855141][ T5802] usb 3-1: config 0 descriptor?? [ 1291.044358][ T5802] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 1291.044406][ T5802] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 1291.044436][ T5802] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 1291.044465][ T5802] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 1291.044493][ T5802] cougar 0003:060B:700A.000F: unknown main item tag 0x0 [ 1291.088560][ T5802] cougar 0003:060B:700A.000F: hidraw0: USB HID v0.01 Device [HID 060b:700a] on usb-dummy_hcd.2-1/input0 [ 1291.117824][ T5802] usb 3-1: USB disconnect, device number 35 [ 1291.466395][T14987] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2495'. [ 1291.850473][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2496'. [ 1291.934900][T14983] fido_id[14983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1293.574893][T14997] overlay: Bad value for 'upperdir' [ 1297.150562][T15026] binder_alloc: 15019: binder_alloc_buf, no vma [ 1297.348895][T15026] binder: 15019:15026 ioctl c0306201 2000000002c0 returned -14 [ 1297.362173][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2507'. [ 1298.103059][T15050] input: syz0 as /devices/virtual/input/input34 [ 1298.424866][T15054] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2513'. [ 1299.693211][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2517'. [ 1303.445914][T15097] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2525'. [ 1304.431624][T15106] ip6erspan0: entered promiscuous mode [ 1308.141981][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1308.142054][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.370477][T15134] loop8: detected capacity change from 0 to 7 [ 1308.623655][T15134] Dev loop8: unable to read RDB block 7 [ 1308.623721][T15134] loop8: unable to read partition table [ 1308.623933][T15134] loop8: partition table beyond EOD, truncated [ 1308.623968][T15134] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1310.015046][T15145] loop2: detected capacity change from 0 to 7 [ 1310.035754][T15145] Dev loop2: unable to read RDB block 7 [ 1310.035792][T15145] loop2: AHDI p2 p3 [ 1310.035821][T15145] loop2: partition table partially beyond EOD, truncated [ 1310.036071][T15145] loop2: p3 start 335544320 is beyond EOD, truncated [ 1310.196630][T15153] loop5: detected capacity change from 0 to 7 [ 1310.211427][T15153] Dev loop5: unable to read RDB block 7 [ 1310.211466][T15153] loop5: AHDI p2 p3 [ 1310.211499][T15153] loop5: partition table partially beyond EOD, truncated [ 1312.010063][T15164] FAULT_INJECTION: forcing a failure. [ 1312.010063][T15164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.010116][T15164] CPU: 0 UID: 0 PID: 15164 Comm: syz.8.2548 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1312.010148][T15164] Tainted: [L]=SOFTLOCKUP [ 1312.010157][T15164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1312.010171][T15164] Call Trace: [ 1312.010181][T15164] [ 1312.010191][T15164] dump_stack_lvl+0xe8/0x150 [ 1312.010229][T15164] should_fail_ex+0x46b/0x600 [ 1312.010262][T15164] _copy_from_user+0x2d/0xb0 [ 1312.010296][T15164] ___sys_sendmsg+0x1c6/0x360 [ 1312.010318][T15164] ? __lock_acquire+0x6b5/0x2cf0 [ 1312.010352][T15164] ? __pfx____sys_sendmsg+0x10/0x10 [ 1312.010413][T15164] ? __fget_files+0x2a/0x420 [ 1312.010444][T15164] ? __fget_files+0x3a6/0x420 [ 1312.010482][T15164] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1312.010508][T15164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1312.010541][T15164] ? __pfx_ksys_write+0x10/0x10 [ 1312.010575][T15164] do_syscall_64+0x14d/0xf80 [ 1312.010606][T15164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.010629][T15164] ? trace_irq_disable+0x37/0x100 [ 1312.010650][T15164] ? clear_bhb_loop+0x40/0x90 [ 1312.010677][T15164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.010700][T15164] RIP: 0033:0x7f9eab89bf79 [ 1312.010721][T15164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.010742][T15164] RSP: 002b:00007f9ea9af6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1312.010767][T15164] RAX: ffffffffffffffda RBX: 00007f9eabb15fa0 RCX: 00007f9eab89bf79 [ 1312.010784][T15164] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1312.010799][T15164] RBP: 00007f9ea9af6090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.010815][T15164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.010830][T15164] R13: 00007f9eabb16038 R14: 00007f9eabb15fa0 R15: 00007ffc309d09b8 [ 1312.010866][T15164] [ 1312.031699][T15162] loop5: detected capacity change from 0 to 7 [ 1312.093839][T15162] Dev loop5: unable to read RDB block 7 [ 1312.093976][T15162] loop5: unable to read partition table [ 1312.094998][T15162] loop5: partition table beyond EOD, truncated [ 1312.095053][T15162] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1317.694922][T15191] FAULT_INJECTION: forcing a failure. [ 1317.694922][T15191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.694966][T15191] CPU: 1 UID: 0 PID: 15191 Comm: syz.8.2557 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1317.694998][T15191] Tainted: [L]=SOFTLOCKUP [ 1317.695007][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1317.695021][T15191] Call Trace: [ 1317.695030][T15191] [ 1317.695041][T15191] dump_stack_lvl+0xe8/0x150 [ 1317.695079][T15191] should_fail_ex+0x46b/0x600 [ 1317.695112][T15191] _copy_from_iter+0x1d3/0x1670 [ 1317.695146][T15191] ? rcu_is_watching+0x15/0xb0 [ 1317.695188][T15191] ? __pfx__copy_from_iter+0x10/0x10 [ 1317.695218][T15191] ? __build_skb_around+0x22d/0x3c0 [ 1317.695254][T15191] ? __alloc_skb+0x193/0x390 [ 1317.695285][T15191] ? netlink_sendmsg+0x650/0xb40 [ 1317.695314][T15191] ? skb_put+0x11b/0x210 [ 1317.695352][T15191] netlink_sendmsg+0x6c0/0xb40 [ 1317.695392][T15191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.695432][T15191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1317.695461][T15191] ____sys_sendmsg+0xa4e/0xac0 [ 1317.695483][T15191] ? __might_fault+0xaf/0x130 [ 1317.695525][T15191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1317.695558][T15191] ? import_iovec+0x73/0xa0 [ 1317.695593][T15191] ___sys_sendmsg+0x2a5/0x360 [ 1317.695615][T15191] ? __lock_acquire+0x6b5/0x2cf0 [ 1317.695650][T15191] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.695711][T15191] ? __fget_files+0x2a/0x420 [ 1317.695743][T15191] ? __fget_files+0x3a6/0x420 [ 1317.695785][T15191] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1317.695812][T15191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1317.695847][T15191] ? __pfx_ksys_write+0x10/0x10 [ 1317.695883][T15191] do_syscall_64+0x14d/0xf80 [ 1317.695914][T15191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.695937][T15191] ? trace_irq_disable+0x37/0x100 [ 1317.695958][T15191] ? clear_bhb_loop+0x40/0x90 [ 1317.695985][T15191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.696008][T15191] RIP: 0033:0x7f9eab89bf79 [ 1317.696029][T15191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.696049][T15191] RSP: 002b:00007f9ea9af6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.696073][T15191] RAX: ffffffffffffffda RBX: 00007f9eabb15fa0 RCX: 00007f9eab89bf79 [ 1317.696091][T15191] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1317.696106][T15191] RBP: 00007f9ea9af6090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.696121][T15191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.696135][T15191] R13: 00007f9eabb16038 R14: 00007f9eabb15fa0 R15: 00007ffc309d09b8 [ 1317.696171][T15191] [ 1319.055627][T15211] loop5: detected capacity change from 0 to 7 [ 1319.099970][T15211] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1319.100231][T15211] loop5: p1 size 33488896 extends beyond EOD, truncated [ 1319.122070][T15211] loop5: p2 start 3092617689 is beyond EOD, truncated [ 1319.122101][T15211] loop5: p3 start 3917893270 is beyond EOD, truncated [ 1319.122122][T15211] loop5: p4 start 4207865973 is beyond EOD, truncated [ 1319.122141][T15211] loop5: p5 start 1189728164 is beyond EOD, truncated [ 1319.122159][T15211] loop5: p6 start 1446819786 is beyond EOD, truncated [ 1321.354038][T12501] udevd[12501]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1323.325084][T15235] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 1323.326142][T15235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.326672][T15235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.378769][T12528] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1323.404931][T15235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.405039][T15235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.405331][T15235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.405433][T15235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.482904][T15235] team0: Port device bridge0 added [ 1323.529728][T12528] usb 9-1: Using ep0 maxpacket: 32 [ 1323.532036][T12528] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 1323.532067][T12528] usb 9-1: config 0 has no interface number 0 [ 1323.534331][T12528] usb 9-1: New USB device found, idVendor=1546, idProduct=1313, bcdDevice=31.e5 [ 1323.534362][T12528] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1323.534386][T12528] usb 9-1: Product: syz [ 1323.534402][T12528] usb 9-1: SerialNumber: syz [ 1323.603076][T12528] usb 9-1: config 0 descriptor?? [ 1323.607491][T12528] usb 9-1: bad CDC descriptors [ 1323.824685][T12528] usb 9-1: USB disconnect, device number 20 [ 1324.031794][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1328.321709][T15269] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2568'. [ 1329.567693][T15276] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2576'. [ 1333.790321][ T5880] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1333.942562][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1333.945554][ T5880] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1333.945585][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1333.948132][ T5880] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1333.948163][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.948186][ T5880] usb 3-1: Product: syz [ 1333.948212][ T5880] usb 3-1: Manufacturer: syz [ 1333.948228][ T5880] usb 3-1: SerialNumber: syz [ 1334.646356][T15320] IPv6: addrconf: prefix option has invalid lifetime [ 1334.698752][ T5802] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1336.959548][ T5880] usb 3-1: 0:2 : does not exist [ 1336.980248][ T5802] usb 9-1: Using ep0 maxpacket: 16 [ 1336.983110][ T5802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.983146][ T5802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.983176][ T5802] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1336.983208][ T5802] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1336.983226][ T5802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.075582][ T5802] usb 9-1: config 0 descriptor?? [ 1337.099747][T15327] loop8: detected capacity change from 0 to 7 [ 1337.141259][T15327] Dev loop8: unable to read RDB block 7 [ 1337.141309][T15327] loop8: unable to read partition table [ 1337.141517][T15327] loop8: partition table beyond EOD, truncated [ 1337.141537][T15327] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1337.339610][ T5880] usb 3-1: USB disconnect, device number 36 [ 1338.112781][ T5802] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 1338.116017][ T5802] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 1338.117616][ T5802] microsoft 0003:045E:07DA.0010: collection stack underflow [ 1338.117651][ T5802] microsoft 0003:045E:07DA.0010: item 0 4 0 12 parsing failed [ 1338.165041][ T5802] microsoft 0003:045E:07DA.0010: parse failed [ 1338.165161][ T5802] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 1338.307319][T15316] futex_wake_op: syz.8.2587 tries to shift op by -1; fix this program [ 1338.508156][ T5880] usb 9-1: USB disconnect, device number 21 [ 1339.217763][T15350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1340.462089][T15366] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.2598'. [ 1344.138720][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1344.298733][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1344.301633][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1344.307600][ T10] usb 9-1: config 56 has an invalid interface number: 120 but max is 0 [ 1344.307633][ T10] usb 9-1: config 56 has no interface number 0 [ 1344.307685][ T10] usb 9-1: config 56 interface 120 altsetting 224 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1344.307716][ T10] usb 9-1: config 56 interface 120 altsetting 224 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1344.307743][ T10] usb 9-1: config 56 interface 120 has no altsetting 0 [ 1344.340775][ T10] usb 9-1: New USB device found, idVendor=1199, idProduct=683e, bcdDevice=c4.4f [ 1344.340809][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.340832][ T10] usb 9-1: Product: syz [ 1344.340959][ T10] usb 9-1: Manufacturer: syz [ 1344.340977][ T10] usb 9-1: SerialNumber: syz [ 1344.612072][T15387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.612629][T15387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.652944][T15404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.653856][T15404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.678232][T15387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.686440][T15387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.758200][ T10] sierra 9-1:56.120: Sierra USB modem converter detected [ 1344.772306][ T10] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 1344.797241][ T10] usb 9-1: USB disconnect, device number 22 [ 1344.825514][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1344.826354][ T10] sierra 9-1:56.120: device disconnected [ 1345.158738][ T5860] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1345.385761][T15415] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2612'. [ 1345.858712][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 1345.861079][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1345.861128][ T5860] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1345.861156][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.866674][ T5860] usb 3-1: config 0 descriptor?? [ 1346.285512][ T5860] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 1346.285554][ T5860] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 1346.285584][ T5860] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 1346.285613][ T5860] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 1346.285641][ T5860] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0 [ 1346.364472][ T5860] corsair-psu 0003:1B1C:1C09.0011: hidraw0: USB HID v0.03 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1346.479406][ T5860] corsair-psu 0003:1B1C:1C09.0011: unable to initialize device (-71) [ 1346.485023][ T5860] corsair-psu 0003:1B1C:1C09.0011: probe with driver corsair-psu failed with error -71 [ 1347.904195][ T5860] usb 3-1: USB disconnect, device number 37 [ 1348.306332][T15427] fido_id[15427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1348.368812][ T5802] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1348.518725][ T5802] usb 9-1: Using ep0 maxpacket: 8 [ 1348.521826][ T5802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.521863][ T5802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.521906][ T5802] usb 9-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 1348.521932][ T5802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.617059][ T5802] usb 9-1: config 0 descriptor?? [ 1349.093998][ T5802] wacom 0003:056A:0302.0012: collection stack underflow [ 1349.094036][ T5802] wacom 0003:056A:0302.0012: item 0 2 0 12 parsing failed [ 1349.094763][ T5802] wacom 0003:056A:0302.0012: parse failed [ 1349.094872][ T5802] wacom 0003:056A:0302.0012: probe with driver wacom failed with error -22 [ 1349.296994][T10727] usb 9-1: USB disconnect, device number 23 [ 1349.417686][ T5800] Bluetooth: Unexpected continuation frame (len 16) [ 1349.478837][T15451] vlan2: entered allmulticast mode [ 1349.478862][T15451] vlan0: entered allmulticast mode [ 1349.478876][T15451] veth0_vlan: entered allmulticast mode [ 1351.348754][ T5959] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1351.518839][ T5959] usb 10-1: Using ep0 maxpacket: 8 [ 1351.521165][ T5959] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1351.521223][ T5959] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1351.521256][ T5959] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1351.521286][ T5959] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1351.521315][ T5959] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1351.522712][ T5959] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1351.522765][ T5959] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1351.522796][ T5959] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1351.522823][ T5959] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1351.522852][ T5959] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1351.526534][ T5959] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1351.526596][ T5959] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1351.526628][ T5959] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1351.526656][ T5959] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1351.526685][ T5959] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1351.570788][ T5959] usb 10-1: string descriptor 0 read error: -22 [ 1351.571202][ T5959] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1351.571267][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.831862][ T5959] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1354.459103][ T5802] usb 10-1: USB disconnect, device number 19 [ 1354.657730][T15503] loop2: detected capacity change from 0 to 7 [ 1354.668222][T15503] Dev loop2: unable to read RDB block 7 [ 1354.668256][T15503] loop2: AHDI p2 p3 [ 1354.668297][T15503] loop2: partition table partially beyond EOD, truncated [ 1354.668769][T15503] loop2: p3 start 335544320 is beyond EOD, truncated [ 1356.930546][T10727] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1357.068759][T10727] usb 9-1: device descriptor read/64, error -71 [ 1357.300084][ T37] audit: type=1326 audit(1771199865.319:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.308794][T10727] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1357.314481][ T37] audit: type=1326 audit(1771199865.329:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.358375][ T37] audit: type=1326 audit(1771199865.369:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.358521][ T37] audit: type=1326 audit(1771199865.369:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.368817][ T37] audit: type=1326 audit(1771199865.379:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.450477][ T37] audit: type=1326 audit(1771199865.469:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.450541][ T37] audit: type=1326 audit(1771199865.469:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.450586][ T37] audit: type=1326 audit(1771199865.469:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.459234][T10727] usb 9-1: device descriptor read/64, error -71 [ 1357.490309][ T37] audit: type=1326 audit(1771199865.479:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.490450][ T37] audit: type=1326 audit(1771199865.509:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.2.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6abbf79 code=0x7ffc0000 [ 1357.569985][T10727] usb usb9-port1: attempt power cycle [ 1357.709461][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2638'. [ 1357.950388][T15529] bond1: up delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 1357.950422][T15529] bond1: down delay (8) is not a multiple of miimon (7), value rounded to 7 ms [ 1357.950456][T15529] bond1: entered allmulticast mode [ 1358.492282][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2641'. [ 1361.079330][T15570] netlink: 'syz.2.2648': attribute type 1 has an invalid length. [ 1361.383531][T15575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2648'. [ 1362.447473][T15585] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.2636'. [ 1362.833893][T15592] loop5: detected capacity change from 0 to 7 [ 1362.888730][T15592] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1362.889022][T15592] loop5: p1 size 33488896 extends beyond EOD, truncated [ 1362.924717][T15592] loop5: p2 start 3092617689 is beyond EOD, truncated [ 1362.924749][T15592] loop5: p3 start 3917893270 is beyond EOD, truncated [ 1362.924769][T15592] loop5: p4 start 4207865973 is beyond EOD, truncated [ 1362.924788][T15592] loop5: p5 start 1189728164 is beyond EOD, truncated [ 1362.924806][T15592] loop5: p6 start 1446819786 is beyond EOD, truncated [ 1363.086738][T15599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.145622][T15598] sctp: [Deprecated]: syz.9.2656 (pid 15598) Use of int in max_burst socket option. [ 1363.145622][T15598] Use struct sctp_assoc_value instead [ 1363.302694][T12501] udevd[12501]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1363.325707][T15602] loop2: detected capacity change from 0 to 7 [ 1363.327662][T12211] loop2: [POWERTEC] p1 p2 [ 1363.379721][T12211] loop2: p1 size 655360 extends beyond EOD, truncated [ 1363.400462][T10727] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 1363.408282][T12211] loop2: p2 size 1680801792 extends beyond EOD, truncated [ 1363.456291][T15602] loop2: [POWERTEC] p1 p2 [ 1363.456532][T15602] loop2: p1 size 655360 extends beyond EOD, truncated [ 1363.471951][T15602] loop2: p2 size 1680801792 extends beyond EOD, truncated [ 1363.570997][T10727] usb 10-1: Invalid ep0 maxpacket: 64 [ 1363.718769][T10727] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 1365.318730][T10727] usb 10-1: Invalid ep0 maxpacket: 64 [ 1365.319609][T10727] usb usb10-port1: attempt power cycle [ 1365.402649][T12513] udevd[12513]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1365.427046][T12500] udevd[12500]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1365.582613][T12513] udevd[12513]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1365.679273][T12501] udevd[12501]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1365.708731][T10727] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 1365.738683][T10727] usb 10-1: Invalid ep0 maxpacket: 64 [ 1365.850050][T15632] netlink: 'syz.7.2667': attribute type 1 has an invalid length. [ 1365.878666][T10727] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 1365.901546][T10727] usb 10-1: Invalid ep0 maxpacket: 64 [ 1365.902466][T10727] usb usb10-port1: unable to enumerate USB device [ 1366.068722][T10727] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1366.158265][T15638] openvswitch: netlink: IP tunnel TTL not specified. [ 1366.369548][T15642] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2670'. [ 1366.478651][T10727] usb 3-1: Using ep0 maxpacket: 8 [ 1366.481072][T10727] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1366.485759][T10727] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1366.485791][T10727] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1366.485815][T10727] usb 3-1: Product: syz [ 1366.485832][T10727] usb 3-1: Manufacturer: syz [ 1366.485853][T10727] usb 3-1: SerialNumber: syz [ 1366.590496][T15645] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2668'. [ 1367.520958][T10727] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1367.521882][T10727] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1368.563530][T15660] loop2: detected capacity change from 0 to 7 [ 1368.577575][T15660] Dev loop2: unable to read RDB block 7 [ 1368.577608][T15660] loop2: AHDI p2 [ 1368.577639][T15660] loop2: partition table partially beyond EOD, truncated [ 1369.130613][T15673] loop5: detected capacity change from 0 to 7 [ 1369.150041][T15673] Dev loop5: unable to read RDB block 7 [ 1369.150101][T15673] loop5: unable to read partition table [ 1369.150287][T15673] loop5: partition table beyond EOD, truncated [ 1369.150302][T15673] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1372.338368][ T36] usb 3-1: USB disconnect, device number 38 [ 1373.123944][T15703] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2682'. [ 1373.640364][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1373.640437][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1374.030795][T15709] macsec1: entered promiscuous mode [ 1374.030825][T15709] macsec1: entered allmulticast mode [ 1376.819091][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1377.116712][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1378.383074][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1378.383114][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1378.383143][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1378.389488][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1378.389519][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1378.389541][ T10] usb 10-1: SerialNumber: syz [ 1378.460412][T15725] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1379.285731][ T10] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1379.513161][T15752] loop2: detected capacity change from 0 to 7 [ 1379.529815][T15752] loop2: [POWERTEC] p1 p2 [ 1379.530535][T15752] loop2: p1 size 655360 extends beyond EOD, truncated [ 1379.535810][T15752] loop2: p2 size 1680801792 extends beyond EOD, truncated [ 1379.565747][ T10] usb 10-1: USB disconnect, device number 24 [ 1379.909975][T12513] udevd[12513]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1379.928328][T12501] udevd[12501]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1380.217004][ T10] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1380.379129][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1380.381722][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.381758][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.381966][ T10] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1380.381995][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.446529][ T10] usb 10-1: config 0 descriptor?? [ 1381.107589][ T10] ft260 0003:0403:6030.0013: failed to retrieve chip version [ 1381.108095][ T10] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -71 [ 1381.145557][ T10] usb 10-1: USB disconnect, device number 25 [ 1382.743210][T15792] binder_alloc: 15791: binder_alloc_buf, no vma [ 1383.018383][T15796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1383.165988][T15799] syz_tun: entered allmulticast mode [ 1383.208933][T15799] dvmrp1: entered allmulticast mode [ 1383.390831][T15798] syz_tun: left allmulticast mode [ 1384.885763][T15852] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2720'. [ 1385.293338][T15852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.413167][T15852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.510125][T15852] bond0 (unregistering): Released all slaves [ 1385.861635][ T808] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1386.148365][ T808] usb 10-1: Using ep0 maxpacket: 32 [ 1386.187147][ T808] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1386.187191][ T808] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.187214][ T808] usb 10-1: Product: syz [ 1386.187231][ T808] usb 10-1: Manufacturer: syz [ 1386.187247][ T808] usb 10-1: SerialNumber: syz [ 1387.083102][ T808] usb 10-1: config 0 descriptor?? [ 1387.089828][ T808] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1387.090030][ T808] dvb-usb: bulk message failed: -22 (4/0) [ 1387.090052][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1387.090185][ T808] dvb-usb: bulk message failed: -22 (5/0) [ 1387.090202][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1387.149447][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1387.158473][ T808] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1387.163010][ T808] usb 10-1: media controller created [ 1387.270975][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1387.423060][ T808] usb 10-1: selecting invalid altsetting 3 [ 1387.423085][ T808] ttusb2: set interface to alts=3 failed [ 1387.464732][T15903] geneve2: entered promiscuous mode [ 1387.629277][ T808] DVB: Unable to find symbol tda10086_attach() [ 1387.629297][ T808] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1387.636656][ T808] dvb-usb: bulk message failed: -22 (4/0) [ 1387.636720][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1387.636950][ T808] dvb-usb: bulk message failed: -22 (5/0) [ 1387.636968][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1387.637077][ T808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1387.703987][ T808] usb 10-1: USB disconnect, device number 26 [ 1387.921454][ T808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1388.289793][ T6002] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1388.483601][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.483638][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.483664][ T6002] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1388.483708][ T6002] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1388.483744][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.490120][ T6002] usb 3-1: config 0 descriptor?? [ 1389.018049][ T5800] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1389.026067][ T6002] magicmouse 0003:05AC:0324.0014: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 1389.232691][ T10] usb 3-1: USB disconnect, device number 39 [ 1389.366905][T15946] fido_id[15946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1390.290536][T15975] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1392.165655][T16012] 9p: Bad value for 'rfdno' [ 1392.368868][T16021] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1392.428972][ T5880] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1392.451816][ T5880] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1393.999607][T16077] kAFS: No cell specified [ 1394.122936][ T5800] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1394.362749][T16088] 9p: Bad value for 'rfdno' [ 1395.740006][T16147] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2829'. [ 1396.193518][T16165] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2835'. [ 1396.430611][T16178] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1396.430646][T16178] overlayfs: failed to set xattr on upper [ 1396.430657][T16178] overlayfs: ...falling back to redirect_dir=nofollow. [ 1396.430667][T16178] overlayfs: ...falling back to index=off. [ 1396.430677][T16178] overlayfs: ...falling back to uuid=null. [ 1396.434680][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1396.498014][T16180] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1396.595059][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1396.602315][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 129, using maximum allowed: 30 [ 1396.602369][ T10] usb 3-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 21, changing to 8 [ 1396.602401][ T10] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1396.602433][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1396.602468][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 1396.602494][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.682105][ T10] usb 3-1: config 0 descriptor?? [ 1396.930359][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1396.930498][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1396.972951][T16189] syz_tun: entered allmulticast mode [ 1396.977235][ T10] usb 3-1: USB disconnect, device number 40 [ 1397.276379][ T5880] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1398.666210][ T5880] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1398.666247][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.666272][ T5880] usb 9-1: Product: syz [ 1398.666288][ T5880] usb 9-1: Manufacturer: syz [ 1398.666305][ T5880] usb 9-1: SerialNumber: syz [ 1398.805994][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2847'. [ 1398.806022][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2847'. [ 1399.213514][ T5880] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1399.213582][ T5880] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1399.242392][T16222] random: crng reseeded on system resumption [ 1399.745292][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 1399.745314][ T37] audit: type=1800 audit(1771199905.730:528): pid=16237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2855" name="file1" dev="tmpfs" ino=981 res=0 errno=0 [ 1400.039806][ T5880] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1400.039870][ T5880] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1400.040707][ T5880] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1400.086818][ T5880] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1400.445367][ T5860] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1400.611667][ T5860] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1400.611692][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.611708][ T5860] usb 3-1: Product: syz [ 1400.611719][ T5860] usb 3-1: Manufacturer: syz [ 1400.611731][ T5860] usb 3-1: SerialNumber: syz [ 1400.630728][ T5860] usb 3-1: config 0 descriptor?? [ 1400.803682][T16265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.805123][T16265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.896416][T16267] fuse: Bad value for 'fd' [ 1401.087061][T16265] syz_tun: left allmulticast mode [ 1401.106251][ T5860] airspy 3-1:0.0: Board ID: 00 [ 1401.106277][ T5860] airspy 3-1:0.0: Firmware version: [ 1402.725487][ T5880] usb 9-1: USB disconnect, device number 27 [ 1403.021834][ T5860] airspy 3-1:0.0: Registered as swradio24 [ 1403.021859][ T5860] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1403.060760][ T5860] usb 3-1: USB disconnect, device number 41 [ 1404.227227][T16336] input: syz1 as /devices/virtual/input/input35 [ 1404.338466][T16339] netlink: 'syz.6.2896': attribute type 21 has an invalid length. [ 1404.338495][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2896'. [ 1404.575808][T16348] fuse: Bad value for 'fd' [ 1405.360547][T16362] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2904'. [ 1408.951847][T16383] IPv6: addrconf: prefix option has invalid lifetime [ 1409.025951][T16382] program syz.8.2914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1409.333543][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2920'. [ 1409.887689][ T5860] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 1412.331971][ T5860] usb 10-1: Invalid ep0 maxpacket: 64 [ 1412.501645][ T5860] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 1414.684184][T16418] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.2929'. [ 1414.684351][T16418] nbd: must specify at least one socket [ 1416.702507][T16419] syz.2.2929 (16419): drop_caches: 2 [ 1419.061423][T16442] IPv6: addrconf: prefix option has invalid lifetime [ 1419.668533][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2928'. [ 1424.726643][T16472] syzkaller0: entered promiscuous mode [ 1424.726674][T16472] syzkaller0: entered allmulticast mode [ 1426.795933][ T5860] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1426.956534][ T5860] usb 9-1: Using ep0 maxpacket: 32 [ 1426.963785][ T5860] usb 9-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.963808][ T5860] usb 9-1: config 47 has no interfaces? [ 1426.967729][ T5860] usb 9-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 1426.967758][ T5860] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.967774][ T5860] usb 9-1: Product: syz [ 1426.967786][ T5860] usb 9-1: Manufacturer: syz [ 1426.967797][ T5860] usb 9-1: SerialNumber: syz [ 1427.306531][ T5860] usb 9-1: USB disconnect, device number 28 [ 1427.362575][ T5880] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1427.730894][ T5880] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1427.730930][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.730953][ T5880] usb 10-1: Product: syz [ 1427.730970][ T5880] usb 10-1: Manufacturer: syz [ 1427.730987][ T5880] usb 10-1: SerialNumber: syz [ 1429.356794][ T5880] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1429.356995][ T5880] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1430.652406][ T5880] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1430.652906][ T5880] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1430.653801][ T5880] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1430.653860][ T5880] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1430.654694][ T5880] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1430.780667][ T5880] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1430.925001][ T5880] usb 10-1: USB disconnect, device number 29 [ 1431.943152][T16513] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2960'. [ 1432.694379][T16520] sctp: [Deprecated]: syz.8.2953 (pid 16520) Use of int in max_burst socket option. [ 1432.694379][T16520] Use struct sctp_assoc_value instead [ 1432.791005][T16520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1434.662415][T16537] loop2: detected capacity change from 0 to 7 [ 1434.663238][T16537] Dev loop2: unable to read RDB block 7 [ 1434.663269][T16537] loop2: AHDI p2 p3 [ 1434.663288][T16537] loop2: partition table partially beyond EOD, truncated [ 1434.663438][T16537] loop2: p3 start 335544320 is beyond EOD, truncated [ 1436.426466][T16552] IPv6: addrconf: prefix option has invalid lifetime [ 1436.647989][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2975'. [ 1438.119308][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2974'. [ 1439.521969][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1439.522044][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1439.780982][T16579] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2980'. [ 1439.810321][T16579] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1439.846420][T16581] loop5: detected capacity change from 0 to 7 [ 1439.874769][T16581] Dev loop5: unable to read RDB block 7 [ 1439.874822][T16581] loop5: unable to read partition table [ 1439.875037][T16581] loop5: partition table beyond EOD, truncated [ 1439.875079][T16581] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1440.531863][T16595] syz_tun: entered allmulticast mode [ 1440.727149][T16599] lo: entered allmulticast mode [ 1440.767881][T16598] lo: left allmulticast mode [ 1440.811434][ T808] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1440.832717][ T6003] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1440.987971][ T808] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1440.987996][ T808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.988012][ T808] usb 9-1: Product: syz [ 1440.988023][ T808] usb 9-1: Manufacturer: syz [ 1440.988034][ T808] usb 9-1: SerialNumber: syz [ 1441.035122][ T6003] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1441.046617][ T6003] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1441.046639][ T6003] usb 3-1: config 1 has no interface number 1 [ 1441.046688][ T6003] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1441.089724][ T6003] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1441.089748][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.089764][ T6003] usb 3-1: Product: syz [ 1441.089775][ T6003] usb 3-1: Manufacturer: syz [ 1441.089787][ T6003] usb 3-1: SerialNumber: syz [ 1442.945614][ T808] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1442.945731][ T808] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1444.237750][ T808] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1444.238577][ T808] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1444.286918][ T808] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1444.322370][ T808] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1445.385378][ T6003] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 1445.385412][ T6003] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1445.428414][T16613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.428986][T16613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.492856][ T6003] usb 3-1: USB disconnect, device number 42 [ 1445.709499][T12513] udevd[12513]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.796007][T16622] loop2: detected capacity change from 0 to 7 [ 1445.821877][T16622] Dev loop2: unable to read RDB block 7 [ 1445.821901][T16622] loop2: AHDI p2 p3 [ 1445.835301][T15325] usb 9-1: USB disconnect, device number 29 [ 1445.867469][T16622] loop2: partition table partially beyond EOD, truncated [ 1445.867733][T16622] loop2: p3 start 335544320 is beyond EOD, truncated [ 1447.346903][T16616] syz_tun: left allmulticast mode [ 1447.487229][T16618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2997'. [ 1447.942463][T16637] syz_tun: entered allmulticast mode [ 1448.209299][T15325] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1448.319093][T16642] tipc: Enabled bearer , priority 10 [ 1448.395290][T15325] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1448.395327][T15325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.395343][T15325] usb 9-1: Product: syz [ 1448.395354][T15325] usb 9-1: Manufacturer: syz [ 1448.395365][T15325] usb 9-1: SerialNumber: syz [ 1448.798866][T16651] netlink: 'syz.2.3010': attribute type 10 has an invalid length. [ 1448.798917][T16651] ipvlan1: entered promiscuous mode [ 1448.805695][T16651] team0: Device ipvlan1 failed to register rx_handler [ 1448.883718][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1448.883764][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1449.513704][ T5880] tipc: Node number set to 1890651839 [ 1449.532795][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1449.532859][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1449.533419][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1449.621395][T15325] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1449.781180][T16664] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.3014'. [ 1451.253643][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 1451.390161][ T6003] usb 9-1: USB disconnect, device number 30 [ 1451.433239][T16636] syz_tun: left allmulticast mode [ 1452.150516][ T6003] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 1452.304032][ T6003] usb 10-1: Invalid ep0 maxpacket: 16 [ 1452.442757][ T6003] usb 10-1: new low-speed USB device number 31 using dummy_hcd [ 1453.096771][T16693] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3024'. [ 1454.281498][ T6003] usb 10-1: Invalid ep0 maxpacket: 16 [ 1454.282037][ T6003] usb usb10-port1: attempt power cycle [ 1455.906539][ T6003] usb 10-1: new low-speed USB device number 32 using dummy_hcd [ 1456.076551][ T6003] usb 10-1: device descriptor read/8, error -71 [ 1456.229354][T16706] loop8: detected capacity change from 0 to 7 [ 1456.246076][T16706] Dev loop8: unable to read RDB block 7 [ 1456.246125][T16706] loop8: unable to read partition table [ 1456.246352][T16706] loop8: partition table beyond EOD, truncated [ 1456.270476][T16706] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1456.304952][ T31] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1456.441022][ T31] usb 3-1: device descriptor read/64, error -71 [ 1459.042113][ T31] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1460.519883][T16722] loop5: detected capacity change from 0 to 7 [ 1460.522287][T16722] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1460.522550][T16722] loop5: p1 size 33488896 extends beyond EOD, truncated [ 1460.575878][T16722] loop5: p2 start 3092617689 is beyond EOD, truncated [ 1460.575909][T16722] loop5: p3 start 3917893270 is beyond EOD, truncated [ 1460.575929][T16722] loop5: p4 start 4207865973 is beyond EOD, truncated [ 1460.575949][T16722] loop5: p5 start 1189728164 is beyond EOD, truncated [ 1460.575968][T16722] loop5: p6 start 1446819786 is beyond EOD, truncated [ 1460.944361][T12501] udevd[12501]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1460.982896][T16726] input: syz0 as /devices/virtual/input/input36 [ 1465.073846][ T5808] Bluetooth: hci4: ISO packet for unknown connection handle 15 [ 1470.293352][T16785] IPv6: addrconf: prefix option has invalid lifetime [ 1470.552859][T16790] syz_tun: entered allmulticast mode [ 1470.585686][T16792] loop2: detected capacity change from 0 to 7 [ 1470.586810][T16792] Dev loop2: unable to read RDB block 7 [ 1470.586841][T16792] loop2: AHDI p2 p3 [ 1470.586867][T16792] loop2: partition table partially beyond EOD, truncated [ 1470.587221][T16792] loop2: p3 start 335544320 is beyond EOD, truncated [ 1470.835570][T15325] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1471.000490][T15325] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1471.000527][T15325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.000551][T15325] usb 9-1: Product: syz [ 1471.000567][T15325] usb 9-1: Manufacturer: syz [ 1471.000584][T15325] usb 9-1: SerialNumber: syz [ 1471.482062][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1471.482134][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1472.883960][T16816] syz_tun: entered allmulticast mode [ 1473.023640][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1473.023700][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1473.024556][T15325] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1473.119254][T15325] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1473.536289][ T31] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1474.315799][T16828] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3074'. [ 1474.624662][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1474.624689][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.624705][ T31] usb 3-1: Product: syz [ 1474.624716][ T31] usb 3-1: Manufacturer: syz [ 1474.624727][ T31] usb 3-1: SerialNumber: syz [ 1474.934194][T16833] netlink: 'syz.7.3075': attribute type 13 has an invalid length. [ 1475.108316][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1475.108380][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1476.403617][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1476.403680][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1476.404508][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1476.406874][T16813] syz_tun: left allmulticast mode [ 1476.526043][ T31] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1476.637840][ T6003] usb 9-1: USB disconnect, device number 31 [ 1476.640129][T16790] syz_tun: left allmulticast mode [ 1479.112004][ T31] usb 3-1: USB disconnect, device number 45 [ 1479.632727][T16861] loop8: detected capacity change from 0 to 7 [ 1479.633789][T16861] Dev loop8: unable to read RDB block 7 [ 1479.633833][T16861] loop8: unable to read partition table [ 1479.634038][T16861] loop8: partition table beyond EOD, truncated [ 1479.634059][T16861] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1479.919329][T16866] loop5: detected capacity change from 0 to 7 [ 1479.922005][T16866] Dev loop5: unable to read RDB block 7 [ 1479.922035][T16866] loop5: AHDI p1 [ 1479.922064][T16866] loop5: partition table partially beyond EOD, truncated [ 1480.110119][T16873] IPVS: length: 78 != 24 [ 1480.228226][T16875] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3092'. [ 1480.563579][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3093'. [ 1480.586567][T16879] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1480.686827][T16880] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3093'. [ 1480.686860][T16880] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3093'. [ 1482.772067][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1482.932339][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1482.934938][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1482.934981][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1482.935008][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.983017][ T9] usb 3-1: config 0 descriptor?? [ 1483.280724][T16918] lo: entered allmulticast mode [ 1483.292913][T16917] loop2: detected capacity change from 0 to 7 [ 1483.294844][T16917] loop2: [ 1483.294873][T16917] loop2: partition table partially beyond EOD, truncated [ 1483.323022][T16918] lo: left allmulticast mode [ 1483.733113][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1483.733240][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1483.751592][ T9] usb 3-1: USB disconnect, device number 46 [ 1484.497944][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1485.736660][T16951] lo: entered allmulticast mode [ 1485.742743][T16951] lo: left allmulticast mode [ 1485.968818][ T808] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1486.288745][ T808] usb 10-1: Using ep0 maxpacket: 16 [ 1486.297086][ T808] usb 10-1: config 0 has an invalid interface number: 247 but max is 0 [ 1486.297116][ T808] usb 10-1: config 0 has no interface number 0 [ 1486.297149][ T808] usb 10-1: config 0 interface 247 has no altsetting 0 [ 1486.311468][ T808] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1486.311503][ T808] usb 10-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 1486.311526][ T808] usb 10-1: Product: syz [ 1486.311543][ T808] usb 10-1: Manufacturer: syz [ 1486.311560][ T808] usb 10-1: SerialNumber: syz [ 1486.386890][ T808] usb 10-1: config 0 descriptor?? [ 1486.431687][ T808] visor 10-1:0.247: Sony Clie 3.5 converter detected [ 1486.847895][ T808] usb 10-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1486.869842][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.869858][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.869972][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.869982][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.870087][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.870098][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.870201][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.870211][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.870320][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.870330][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.872983][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.872998][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873106][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873116][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873219][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873229][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873337][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873348][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873458][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873465][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873537][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873544][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873613][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873620][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873688][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873695][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873792][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873800][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873867][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873874][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.873954][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.873960][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1486.889740][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.889784][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1487.069633][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1487.130136][T16969] binder: BINDER_SET_CONTEXT_MGR already set [ 1487.130153][T16969] binder: 16948:16969 ioctl 4018620d 200000000100 returned -16 [ 1487.275705][ T5880] usb 10-1: USB disconnect, device number 34 [ 1487.322920][ T5880] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1487.335453][ T5880] visor 10-1:0.247: device disconnected [ 1487.337166][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1487.349124][ T10] usb 3-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 1487.349152][ T10] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 1487.351665][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.45 [ 1487.351696][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.351718][ T10] usb 3-1: Product: syz [ 1487.351837][ T10] usb 3-1: Manufacturer: syz [ 1487.351856][ T10] usb 3-1: SerialNumber: syz [ 1489.975567][T16991] IPv6: addrconf: prefix option has invalid lifetime [ 1490.689634][T16999] netlink: 212328 bytes leftover after parsing attributes in process `syz.9.3134'. [ 1491.783531][ T10] usb 3-1: USB disconnect, device number 47 [ 1491.881703][T17004] syz_tun: entered allmulticast mode [ 1492.017925][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3138'. [ 1492.126426][ T808] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1492.169213][T16603] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1492.177267][T17011] bond1: up delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 1492.177296][T17011] bond1: down delay (8) is not a multiple of miimon (7), value rounded to 7 ms [ 1492.177323][T17011] bond1: entered allmulticast mode [ 1492.291777][ T808] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1492.291812][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.322963][ T808] usb 10-1: config 0 descriptor?? [ 1492.341581][T16603] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1492.341616][T16603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.341644][T16603] usb 9-1: Product: syz [ 1492.341660][T16603] usb 9-1: Manufacturer: syz [ 1492.341676][T16603] usb 9-1: SerialNumber: syz [ 1493.759135][ T808] ath6kl: Failed to submit usb control message: -71 [ 1493.759931][ T808] ath6kl: unable to send the bmi data to the device: -71 [ 1493.759951][ T808] ath6kl: Unable to send get target info: -71 [ 1494.384747][ T808] ath6kl: Failed to init ath6kl core: -71 [ 1494.757531][ T808] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1494.778599][T16603] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1494.778663][T16603] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1494.780672][ T808] usb 10-1: USB disconnect, device number 35 [ 1495.788398][T16603] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1495.788453][T16603] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1495.789321][T16603] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1496.171846][T16603] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1497.374254][T17033] syz_tun: left allmulticast mode [ 1497.386124][ T36] usb 9-1: USB disconnect, device number 32 [ 1497.512964][T17052] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1499.896226][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3153'. [ 1500.518275][ C1] Clock: inserting leap second 23:59:60 UTC [ 1501.331114][T16603] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1501.502090][T16603] usb 9-1: Using ep0 maxpacket: 32 [ 1501.508258][T16603] usb 9-1: config 0 has an invalid interface number: 72 but max is 3 [ 1501.508299][T16603] usb 9-1: config 0 has an invalid interface number: 187 but max is 3 [ 1501.508322][T16603] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1501.508344][T16603] usb 9-1: config 0 has an invalid interface number: 146 but max is 3 [ 1501.508365][T16603] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1501.508384][T16603] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1501.508404][T16603] usb 9-1: config 0 has an invalid interface number: 209 but max is 3 [ 1501.508427][T16603] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1501.508449][T16603] usb 9-1: config 0 has no interface number 0 [ 1501.508467][T16603] usb 9-1: config 0 has no interface number 1 [ 1501.508485][T16603] usb 9-1: config 0 has no interface number 2 [ 1501.508501][T16603] usb 9-1: config 0 has no interface number 3 [ 1501.508573][T16603] usb 9-1: config 0 interface 72 altsetting 107 bulk endpoint 0x2 has invalid maxpacket 1023 [ 1501.508600][T16603] usb 9-1: config 0 interface 72 altsetting 107 has an invalid descriptor for endpoint zero, skipping [ 1501.508622][T16603] usb 9-1: config 0 interface 72 altsetting 107 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1501.508651][T16603] usb 9-1: config 0 interface 72 altsetting 107 has an invalid descriptor for endpoint zero, skipping [ 1501.508695][T16603] usb 9-1: config 0 interface 187 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1501.508719][T16603] usb 9-1: config 0 interface 187 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 1501.508743][T16603] usb 9-1: config 0 interface 187 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1501.508767][T16603] usb 9-1: config 0 interface 187 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1501.508796][T16603] usb 9-1: config 0 interface 187 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1501.508821][T16603] usb 9-1: config 0 interface 187 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1501.508844][T16603] usb 9-1: config 0 interface 187 altsetting 4 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1501.508884][T16603] usb 9-1: config 0 interface 187 altsetting 4 endpoint 0x8A has an invalid bInterval 130, changing to 11 [ 1501.508913][T16603] usb 9-1: config 0 interface 187 altsetting 4 endpoint 0x8A has invalid maxpacket 34440, setting to 1024 [ 1501.508943][T16603] usb 9-1: config 0 interface 187 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 32 [ 1501.508967][T16603] usb 9-1: config 0 interface 187 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1501.508991][T16603] usb 9-1: config 0 interface 187 altsetting 4 bulk endpoint 0xB has invalid maxpacket 80 [ 1501.509014][T16603] usb 9-1: config 0 interface 187 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1501.509032][T16603] usb 9-1: config 0 interface 187 altsetting 4 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 1501.509074][T16603] usb 9-1: config 0 interface 146 altsetting 137 has a duplicate endpoint with address 0xB, skipping [ 1501.509095][T16603] usb 9-1: config 0 interface 146 altsetting 137 has a duplicate endpoint with address 0x8, skipping [ 1501.509115][T16603] usb 9-1: config 0 interface 146 altsetting 137 has a duplicate endpoint with address 0xC, skipping [ 1501.509139][T16603] usb 9-1: config 0 interface 146 altsetting 137 has a duplicate endpoint with address 0x9, skipping [ 1501.509162][T16603] usb 9-1: config 0 interface 146 altsetting 137 has a duplicate endpoint with address 0x5, skipping [ 1501.509185][T16603] usb 9-1: config 0 interface 146 altsetting 137 has a duplicate endpoint with address 0x1, skipping [ 1501.509208][T16603] usb 9-1: config 0 interface 146 altsetting 137 has a duplicate endpoint with address 0xA, skipping [ 1501.509232][T16603] usb 9-1: config 0 interface 146 altsetting 137 has an invalid descriptor for endpoint zero, skipping [ 1501.509267][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0x8, skipping [ 1501.509291][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0x6, skipping [ 1501.509314][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0xB, skipping [ 1501.509337][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0x5, skipping [ 1501.509363][T16603] usb 9-1: config 0 interface 209 altsetting 26 has an invalid descriptor for endpoint zero, skipping [ 1501.509386][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0x9, skipping [ 1501.509410][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0xE, skipping [ 1501.509434][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0xF, skipping [ 1501.509459][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0x2, skipping [ 1501.509485][T16603] usb 9-1: config 0 interface 209 altsetting 26 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1501.509512][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0x2, skipping [ 1501.509537][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0x9, skipping [ 1501.509561][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0x6, skipping [ 1501.509586][T16603] usb 9-1: config 0 interface 209 altsetting 26 has a duplicate endpoint with address 0xE, skipping [ 1501.509611][T16603] usb 9-1: config 0 interface 72 has no altsetting 0 [ 1501.509630][T16603] usb 9-1: config 0 interface 187 has no altsetting 0 [ 1501.509649][T16603] usb 9-1: config 0 interface 146 has no altsetting 0 [ 1501.509669][T16603] usb 9-1: config 0 interface 209 has no altsetting 0 [ 1501.585053][T16603] usb 9-1: Dual-Role OTG device on HNP port [ 1501.599336][T16603] usb 9-1: New USB device found, idVendor=1110, idProduct=9021, bcdDevice=40.25 [ 1501.599423][T16603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.599484][T16603] usb 9-1: Product: ш [ 1501.599526][T16603] usb 9-1: Manufacturer: В [ 1501.599568][T16603] usb 9-1: SerialNumber: Ѝ [ 1502.094169][T16603] usb 9-1: config 0 descriptor?? [ 1502.137433][T17074] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1502.697006][T16603] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9021) Rev (0X4025): Eagle II [ 1502.945019][T16603] usb 9-1: reset high-speed USB device number 33 using dummy_hcd [ 1503.825484][T16603] ueagle-atm 9-1:0.72: usbatm_usb_probe: bind failed: -19! [ 1503.866988][T16603] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9021) Rev (0X4025): Eagle II [ 1503.867382][T16603] ueagle-atm 9-1:0.187: usbatm_usb_probe: bind failed: -19! [ 1503.913044][T16603] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9021) Rev (0X4025): Eagle II [ 1503.913417][T16603] ueagle-atm 9-1:0.146: usbatm_usb_probe: bind failed: -19! [ 1503.951539][T16603] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9021) Rev (0X4025): Eagle II [ 1503.951926][T16603] ueagle-atm 9-1:0.209: usbatm_usb_probe: bind failed: -19! [ 1503.982235][T16603] usb 9-1: USB disconnect, device number 33 [ 1504.256523][T17103] netlink: 277 bytes leftover after parsing attributes in process `syz.8.3165'. [ 1504.852628][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1504.852702][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1505.471825][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3172'. [ 1505.510978][T16603] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1505.671251][T16603] usb 9-1: Using ep0 maxpacket: 32 [ 1505.694237][T16603] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1505.694272][T16603] usb 9-1: config 0 has no interface number 0 [ 1505.718867][T16603] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1505.718902][T16603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.718926][T16603] usb 9-1: Product: syz [ 1505.718942][T16603] usb 9-1: Manufacturer: syz [ 1505.718959][T16603] usb 9-1: SerialNumber: syz [ 1505.758877][T16603] usb 9-1: config 0 descriptor?? [ 1505.780966][T16603] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1506.000273][T16603] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1507.465547][T17108] input: syz0 as /devices/virtual/input/input38 [ 1507.628907][T16603] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1507.871416][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1507.888690][ T5959] usb 9-1: USB disconnect, device number 34 [ 1507.981490][ T5959] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1507.996059][T17152] IPv6: addrconf: prefix option has invalid lifetime [ 1508.035153][ T5959] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1508.036167][ T5959] quatech2 9-1:0.51: device disconnected [ 1508.707455][ T5959] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1508.867925][ T5959] usb 3-1: Invalid ep0 maxpacket: 9 [ 1510.011646][ T5959] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1510.192973][ T5959] usb 3-1: Invalid ep0 maxpacket: 9 [ 1510.199016][ T5959] usb usb3-port1: attempt power cycle [ 1511.851599][ T5959] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1511.881043][ T5959] usb 3-1: device descriptor read/8, error -71 [ 1512.053652][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 1512.058928][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1512.058956][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1512.475946][T17220] loop2: detected capacity change from 0 to 7 [ 1513.267854][T17220] loop2: [ 1513.267891][T17220] loop2: partition table partially beyond EOD, truncated [ 1513.424026][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'. [ 1514.185361][T17227] bond0: up delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 1514.185395][T17227] bond0: down delay (8) is not a multiple of miimon (7), value rounded to 7 ms [ 1514.185428][T17227] bond0: entered allmulticast mode [ 1514.217097][T17220] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3191'. [ 1514.567242][ T5163] loop2: [ 1514.567280][ T5163] loop2: partition table partially beyond EOD, truncated [ 1514.637796][T17248] netlink: 169404 bytes leftover after parsing attributes in process `syz.2.3218'. [ 1514.975384][ T5959] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1515.206174][ T5959] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1515.217310][ T5959] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1515.217342][ T5959] usb 10-1: config 1 has no interface number 1 [ 1515.217391][ T5959] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1515.265600][ T5959] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1515.265635][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.265659][ T5959] usb 10-1: Product: syz [ 1515.265676][ T5959] usb 10-1: Manufacturer: syz [ 1515.265692][ T5959] usb 10-1: SerialNumber: syz [ 1516.015672][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 1516.151131][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1516.151161][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1516.738376][ T5959] usb 10-1: found format II with max.bitrate = 26774, frame size=2 [ 1516.738409][ T5959] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1516.820295][ T5959] usb 10-1: USB disconnect, device number 36 [ 1516.864879][T12501] udevd[12501]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.190535][ T5163] loop2: [ 1517.190567][ T5163] loop2: partition table partially beyond EOD, truncated [ 1517.523391][ T5163] loop2: [ 1517.523428][ T5163] loop2: partition table partially beyond EOD, truncated [ 1517.865880][ T5163] loop2: [ 1517.865916][ T5163] loop2: partition table partially beyond EOD, truncated [ 1517.902320][T17316] netlink: 'syz.8.3239': attribute type 3 has an invalid length. [ 1517.902356][T17316] netlink: 'syz.8.3239': attribute type 4 has an invalid length. [ 1518.028395][T17324] syz_tun: entered allmulticast mode [ 1518.296978][ T808] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1519.817949][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 1519.828991][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1519.829017][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1519.850639][ T808] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1519.850672][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.850695][ T808] usb 3-1: Product: syz [ 1519.850711][ T808] usb 3-1: Manufacturer: syz [ 1519.850727][ T808] usb 3-1: SerialNumber: syz [ 1520.147282][T17349] netlink: 'syz.6.3251': attribute type 10 has an invalid length. [ 1520.147310][T17349] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3251'. [ 1520.147954][T17349] batadv0: entered promiscuous mode [ 1520.147979][T17349] batadv0: entered allmulticast mode [ 1520.149030][T17349] bridge0: port 3(batadv0) entered blocking state [ 1520.149166][T17349] bridge0: port 3(batadv0) entered disabled state [ 1520.275985][T17349] bridge0: port 3(batadv0) entered blocking state [ 1520.276145][T17349] bridge0: port 3(batadv0) entered forwarding state [ 1520.328436][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1520.328501][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1520.429706][ T3592] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1520.430120][ T3592] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1521.196566][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1521.196627][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1521.237676][T17317] syz_tun: left allmulticast mode [ 1521.270666][ T808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1521.395191][ T808] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1521.479488][ T808] usb 3-1: USB disconnect, device number 52 [ 1521.928436][ T5163] loop2: [ 1521.928470][ T5163] loop2: partition table partially beyond EOD, truncated [ 1522.190413][T17389] syzkaller0: entered promiscuous mode [ 1522.190443][T17389] syzkaller0: entered allmulticast mode [ 1523.459937][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 1523.472713][ T9] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1523.472742][ T9] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1523.473610][T17382] syzkaller0: entered promiscuous mode [ 1523.473636][T17382] syzkaller0: entered allmulticast mode [ 1523.870687][T17397] tipc: Enabled bearer , priority 5 [ 1523.876533][T17407] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1523.971831][T17380] tipc: Resetting bearer [ 1524.031494][ T5163] loop2: [ 1524.031518][ T5163] loop2: partition table partially beyond EOD, truncated [ 1524.276360][ T5163] loop2: [ 1524.276395][ T5163] loop2: partition table partially beyond EOD, truncated [ 1524.610052][T17380] tipc: Disabling bearer [ 1526.855668][T17460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3285'. [ 1527.819054][T17466] 9p: Bad value for 'wfdno' [ 1527.907317][T17435] syz_tun: entered allmulticast mode [ 1528.048967][T17471] sctp: [Deprecated]: syz.2.3288 (pid 17471) Use of int in max_burst socket option deprecated. [ 1528.048967][T17471] Use struct sctp_assoc_value instead [ 1528.269642][T17437] syz_tun: left allmulticast mode [ 1528.586511][ T5808] Bluetooth: hci1: ISO packet for unknown connection handle 15 [ 1530.824129][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1530.824160][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1530.826205][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 1531.010635][T17493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3296'. [ 1531.628496][T17526] syz_tun: entered allmulticast mode [ 1533.413622][T17522] syz_tun: left allmulticast mode [ 1536.329982][T17601] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3326'. [ 1539.155226][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3332'. [ 1539.175692][ C0] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000025: 0000 [#1] SMP KASAN PTI [ 1539.175722][ C0] KASAN: maybe wild-memory-access in range [0xdead000000000128-0xdead00000000012f] [ 1539.175751][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1539.175783][ C0] Tainted: [L]=SOFTLOCKUP [ 1539.175793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1539.175808][ C0] RIP: 0010:detach_timer+0x120/0x2b0 [ 1539.175847][ C0] Code: c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 39 bb 78 00 4d 89 3c 24 4d 85 ff 74 46 e8 cb a0 13 00 49 83 c7 08 4c 89 f8 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 ff e8 12 bb 78 00 4d 89 27 80 7c 24 04 00 [ 1539.175869][ C0] RSP: 0018:ffffc90000157af8 EFLAGS: 00010802 [ 1539.175893][ C0] RAX: 1bd5a00000000025 RBX: 1ffff1100d02ebe7 RCX: ffff88801cad8000 [ 1539.175913][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1539.175928][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1539.175945][ C0] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffc90000157c00 [ 1539.175964][ C0] R13: ffff888068175f40 R14: 1ffff1100d02ebe8 R15: dead00000000012a [ 1539.175984][ C0] FS: 0000000000000000(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 1539.176004][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1539.176022][ C0] CR2: 00007f9eab885180 CR3: 000000007bbe8000 CR4: 00000000003526f0 [ 1539.176043][ C0] Call Trace: [ 1539.176053][ C0] [ 1539.176067][ C0] __run_timer_base+0x624/0x9f0 [ 1539.176105][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1539.176138][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1539.176168][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1539.176200][ C0] run_timer_softirq+0xb7/0x170 [ 1539.176231][ C0] handle_softirqs+0x1de/0x640 [ 1539.176263][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1539.176295][ C0] run_ktimerd+0x69/0x100 [ 1539.176327][ C0] smpboot_thread_fn+0x541/0xa50 [ 1539.176359][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1539.176394][ C0] kthread+0x388/0x470 [ 1539.176436][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1539.176466][ C0] ? __pfx_kthread+0x10/0x10 [ 1539.176500][ C0] ret_from_fork+0x51e/0xb90 [ 1539.176531][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1539.176560][ C0] ? __switch_to+0xc7d/0x1400 [ 1539.176587][ C0] ? __pfx_kthread+0x10/0x10 [ 1539.176621][ C0] ret_from_fork_asm+0x1a/0x30 [ 1539.176664][ C0] [ 1539.176680][ C0] Modules linked in: [ 1539.176701][ C0] ---[ end trace 0000000000000000 ]--- [ 1539.176712][ C0] RIP: 0010:detach_timer+0x120/0x2b0 [ 1539.176743][ C0] Code: c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 39 bb 78 00 4d 89 3c 24 4d 85 ff 74 46 e8 cb a0 13 00 49 83 c7 08 4c 89 f8 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 ff e8 12 bb 78 00 4d 89 27 80 7c 24 04 00 [ 1539.176762][ C0] RSP: 0018:ffffc90000157af8 EFLAGS: 00010802 [ 1539.176782][ C0] RAX: 1bd5a00000000025 RBX: 1ffff1100d02ebe7 RCX: ffff88801cad8000 [ 1539.176801][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1539.176816][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1539.176830][ C0] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffc90000157c00 [ 1539.176847][ C0] R13: ffff888068175f40 R14: 1ffff1100d02ebe8 R15: dead00000000012a [ 1539.176864][ C0] FS: 0000000000000000(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 1539.176883][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1539.176899][ C0] CR2: 00007f9eab885180 CR3: 000000007bbe8000 CR4: 00000000003526f0 [ 1539.176926][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1539.177118][ C0] Kernel Offset: disabled