last executing test programs: 2m18.070262184s ago: executing program 2 (id=1297): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f048}) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f048}) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x6da24b7ebfdfaf83}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x3, 0x3d, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRESOCT=r2], 0x0) (async) syz_usb_connect(0x3, 0x3d, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRESOCT=r2], 0x0) 2m13.895444707s ago: executing program 2 (id=1309): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0xf423f}, 0xb, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {0x77359400}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) 2m13.798839827s ago: executing program 2 (id=1310): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186) fcntl$setownex(r0, 0xf, 0x0) 2m13.653168792s ago: executing program 2 (id=1311): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="8500000008000000350000008400000085000000070000009500000000000000fed023d1d405000000c7d4012507000000c71adb05d72768b8242dd90d17e4c52505750482b009546a5f3f00573f31b53fd3e52bd87184446d165ae2939bbca322a415a98c885faad395f3e4e0635559362ed862ce7c69ad133037af3a000000000000000000000058c122dff93c54caec3751652d11fd4f66711918d3604b92666d60c88b658fe57bb5d365c5b89625385f230ba21f570635837c7bc74be573bfd68aaaf06d842085f84b96c4709e2c9449f0818f6fc5657572fb3e5bb8ff6f643e52f4964c62a70a011ede8b504c8a30381b8eff01d7615e1789bb4b3b7ef3668a98a785a80aa2d1ab149b9316091fb3025f0716799d8280acb3880a882f28dd3111e02c3b0b2818bf5bb902cc9c1666f5fdd2e43901ca4796f04db25c3df35cdfc17c54936202b45b7a09816aa76e8b9bbe24022007aae367025040e8b2255ced48a4b2db3f280dc6fd2f5374548c499ae74631f3be04e28d601369f9488fb074eb35540df5e053376ea29125d6bb916496b04b8e359c1edef91677414729967cffa736d7789c14e918b77518ee8e5d5aff9148be69267fff35"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x670, 0x0, 0x8, 0x7f02ae, 0x468, 0x200, 0x5a0, 0x2e8, 0x2e8, 0x5a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x468, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:bin_t:s0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefa}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x24a, &(0x7f00000002c0)={0x0, 0x1df2, 0x20000, 0x0, 0x34c}, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x108, &(0x7f00000003c0)=0x8, 0x0, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000182d9c103009130a447601020301090224000104100000090f0f0202ffff000009050402100000fa00090582bc86a4b9300f"], 0x0) 2m11.30422602s ago: executing program 2 (id=1319): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty, 0xfff}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x287}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaa86dd6000000000101100c56e68044d1d9412c7fe8000000000000000000000000000bbff0200000000000000000000000000014e200e22001090782209000100000000847d77b0468cd7c38cfa72a27b8d9858c22413bf0dbf793dc391fdea57aacf7f8f470eaab569d6e8a05f4233d919d65bb461440f0143ff6a8a2381fc0e8d7752462de2cbb54df18c5d8b130b395db81bc54745971b3f657b9223d36e20bf9ff4aca8018ed71482b90a5b17c67648494ed1b2551b1b2cfb4a"], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0xfffffffffffffe59, &(0x7f00000001c0)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/4107, 0x1000}], 0x2, &(0x7f00000004c0)=""/66, 0x42}, 0x9}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000200)=""/19, 0x13}, {&(0x7f00000004c0)}, {&(0x7f0000002d80)=""/163, 0xa9}, {&(0x7f0000000500)}, {&(0x7f0000002b40)=""/160, 0xa0}], 0x5, &(0x7f0000002c80)=""/83, 0x53}, 0x7}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x6e) setreuid(0xee00, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="a2b34dbfd5a17d82d76502cdf2444198f6725050d99e6ea3256b911f41617919b6b6ac91c681bb51deac54e71eb1df35f268626b0e04b84d65f2b73c0902546daf1e133fc90e", @ANYRES32=r2], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8e79f0352167ea94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5], 0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x2000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x6}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 2m10.97131572s ago: executing program 2 (id=1323): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x299, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, 0x0, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2m10.602343398s ago: executing program 32 (id=1323): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x299, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, 0x0, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 11.068180041s ago: executing program 3 (id=1761): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300000018000180040002800d0001007564703a73797ab025"], 0x2c}}, 0x40) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x4, 0x9) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usbip_server_init(0x1) 10.685813558s ago: executing program 4 (id=1763): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) socket(0x10, 0x2, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$watch_queue(&(0x7f00000002c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r3) (async) r4 = dup(r3) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f000043f000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"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"}) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) 10.257095201s ago: executing program 5 (id=1766): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c67", 0x66}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) unshare(0x400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) 10.115945714s ago: executing program 5 (id=1769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$rtc(&(0x7f00000000c0), 0x8a2b, 0x480) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@broadcast, @local}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x400, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4d002, 0x408}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000180)={0x3, 0x2, 0x4d7}) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$rtc(&(0x7f00000000c0), 0x8a2b, 0x480) (async) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@broadcast, @local}, &(0x7f0000000200)=0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x400, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4d002, 0x408}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') (async) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000180)={0x3, 0x2, 0x4d7}) (async) 9.806996526s ago: executing program 5 (id=1771): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000080)) writev(r0, &(0x7f0000000c40)=[{0x0, 0x20}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) (async) writev(r0, &(0x7f0000000c40)=[{0x0, 0x20}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 9.267948874s ago: executing program 5 (id=1772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa441, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'ip6erspan0\x00', 0x100}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4381, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x1, 0x100000e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000005140)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb88a840008100e0ff884845e4005800640000032f90782c14880b00000003050008000500ed86dd080088be00000003170411070100000000000009080022eb00000001230618070200000000000800739f8a1d0800655800000001"], 0x6e) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r5, 0x0, 0x0) r6 = openat$cgroup_int(r1, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'pimreg\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r9, &(0x7f00000004c0)="27ae7a5c0cbed4eb3bebc9ec4672", 0xe, 0x800, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000040900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000078020000060a010400000000000000000100000008000b4000000000480204804402018008000100636d700038020280340003803000028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a320000000008000180fffffffff8010380440002800900020073797a300000000008000180fffffffb080003400000000408000180fffffffc08000180fffffffb0900020073797a320000000008000180fffffffc5800020800000000000000fd080003400000000208000340000000030900020073797a30000000000900020073797a32000000000900020073797a30000000000800034000000002080003400000800008000180fffffffb970001007f6d3eaa7eb424ddb50bd575f2698e0c693f9e03d6d088f084aac4c43a3e87a173ea63de6ab5977158a54b2e6b43d287e9404f417429b1728de084f2f18dcea15018d9d42b2137688161fba5ae91377f688ae79324c8c9f14b4e75b9a12cdde4570d2a29b6a1881e6df511ce3f7cd2d2a1cc5f3c1b3a0e93b0ebd04cf7e867debe7dae9489335f4c3d3114e6a61b65379d76e4005400028008000180fffffffd08000180fffffffd0900020073797a3000000000080001800000000008000180fffffffe08000180fffffffd0900020073797a310000000008000180fffffffc080003400000000114000280080003400000000408000180fffffffe28000100e0552d7a2d57fb8ef003efa82fd16cd146df9ed2bad4b0e1de959e820396578adc3ff1a50c00028008000180fffffffe240002800900020073797a32000000000900020073797a3100000000080003400000000408000240000000000900010073797a300000000005000740ef000000140000001100010000000000000000000000000a"], 0x2ec}}, 0x0) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d80", @ANYRES16, @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[], 0x51) 8.781033504s ago: executing program 4 (id=1773): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9bd, 0x28540) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x200000000000001, 0x0) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$kcm(0x10, 0x2, 0x4) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000340), 0xe0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00100000010400004a"]) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00100000010400004a"]) 8.10157341s ago: executing program 5 (id=1775): socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0xc0b71de71b8dd5d}, [@remote]}}}]}, 0x4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) epoll_create(0xfe) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xc002) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0xfffffffffffffff4}) setsockopt$inet_buf(r0, 0x0, 0x26, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x101, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 7.636976465s ago: executing program 3 (id=1777): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req={0xf, 0xfeff, 0x7ff, 0xa599}, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xfffc, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x1, "ff0f0000000000006f51bd9e4d2af0b20000f0ffdefe0000040000000f00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) (async, rerun: 32) r5 = syz_io_uring_setup(0x65e0, &(0x7f0000000140)={0x0, 0xa83b, 0x40, 0x2, 0x320}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (rerun: 32) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f00000006c0)={0x50, 0xfffffffffffffffe, r9, {0x7, 0x1f, 0x4, 0x12008000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x581000, 0x8) dup2(r10, r8) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r10, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 7.434108336s ago: executing program 3 (id=1778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000200)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b203c0a8b089b3f32356c030890e0879b0af8c6e70a9b334a959b6696048ed30af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773180acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2ff7949d1f416e56c71b1931870262f5e801119242ca026bfcc21e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae1b9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982c04000000000000005c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80c1ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843ddbd8db411d8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227fff72de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e240100c0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f7524e2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458ffff5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945fc83d38a155d5284edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295bf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e542ccea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x1000}}, 0x1006) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001340)=ANY=[@ANYRES64=r1, @ANYBLOB="f4838e1a476fc478ce23e089b8141fc091c0a8eb58a7d049cfcc23dd522956476f6cecb472fe243fb44bc0b9355577993c17c95c05ce23b790dff2ae93e7e897fdf87db892a307834d9d88e6bfa0bc0e8f4217fe15fabd548dd18e33c5397a2f2f4a9d12e3637c093a0f855bbb7044f0bbdf866bc9b870f394fe2dacc6183b8a814641b983f64c03155e933171fc1d7f3db142ecaaa675b7bbc90c906b290b3c33a7d14ea81f70047cabe237b92e60e4cce50c151c891f650f30ef68232e1b5e70e50913965bb5fdaffec1ea643fd01189661b5db7ba031a9f923683be028efdc6d9c990ebbf96428e9c11dfa980f7cfdef31bbc", @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32], 0x118) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020303090212000100000000090400000002"], 0x0) 6.280907688s ago: executing program 4 (id=1780): socket$nl_netfilter(0x10, 0x3, 0xc) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x58900, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x7, 0x4e, 0x8c, 0x0, 0x4, 0xeb, 0x1, 0x23, 0x7, 0xa0, 0xa, 0x1, 0x0, 0x0, 0xf8de, 0x5, 0x7, 0x2, 0xdb, '\x00', 0x0, 0xaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x3, 0x2a9, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x5e, 0x43, 0x84, 0x20, 0x5ac, 0x291, 0x868e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x297, 0x2, 0x3, 0x8, 0x20, 0x40, [{{0x9, 0x4, 0xb0, 0x4, 0x2, 0x3, 0x5d, 0x2, 0x55, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xc, 0xee, 0x1002}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0xfffd, 0xd, "17"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xfe, 0x3, 0x3, 0x6, "439b", "f13b"}]}], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0xd1, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7}, @generic={0xcb, 0x0, "46bcd959c937518ef44128403137e4d9bc03c925d2f04d36d49aa7990be62c32dba80f183f7b2eef430438e395f1cacff643a790fae3a4cc13a49a0f29398e067a27becf2d7836f39bae2528f5ad67074a66a1ee3d522a24878523f1a343421efccb3b96b15b09bf84809e201126bfe7bd385f04624ac95daf651614bd071be54fc470a33993ee258855ab0822f4f26a6a09960af89372cbe75b6d37a3975c6bbfbbb6554be67a6b5f9b4215fcc0b36a25485028d81138867a6b118159946872230d559a2432fae45c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0xfb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x6, 0xb}]}}]}}, {{0x9, 0x4, 0x6f, 0x7, 0x5, 0xfa, 0x88, 0x3b, 0xf, [@hid_hid={0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0xf2f}}], [{{0x9, 0x5, 0xa, 0x2, 0x400, 0x3, 0x0, 0x4, [@generic={0x53, 0xf, "c78e6b5de98e0fbf7c093ca7c6f2ea24a05d02b2cdd4fb245c80bc787f046f467eeb795bc12b5b10f7dfb010061dc1e97708dbd7d10a0ccb25973c2e8316db42e7a5268cedcfd6fa6f0389bc53de5678b9"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x7, 0x4, 0x9}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0xf3, 0x8}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x81, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x6}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x4, 0x8, 0x3, [@generic={0xe4, 0x23, "94162d6c50468079bd86021f6d0c6f58a2ebafd944c71140130d0ef1bf5d912f5ec07d45cbec1cc0b6aabf391c68e2a64ff9811fbc22762f5243da0d053309353dbf42a5d75f93b5bf14035b36423d2abb59201f5c3d18664be00fb59ffd95f48d7fd61310bee6b4b9ca26fdf90f88757db07a230cceaeadb874b9511354ed83f645b102c5841d1324e877a9a54e4a760e2bc4acc718a87c8024d65f4221bcc2a9cabaf590bd6f52cdedf860103db8b24eaf7151ed4f758377e300b3b8d5c6e946f12f945bee215813a376877bef65fd21b73eb0823e9f96bbb59fbdbe8930ac9114"}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xff, 0x40, 0x8, 0x10, 0x10}, 0x74, &(0x7f0000000540)={0x5, 0xf, 0x74, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x4, 0x2, 0xb1, 0x18}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "399d6367e84fe083c6c9a608efd21a46"}, @generic={0x43, 0x10, 0xb, "78285d3294446b4b0272dee6b5aca5cdfaa73a88ab26f723ec863b0b596356f8d74d5212a25935bc7518c41d44a36548ad2cb15f8549b5756fd5aafc764a2048"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x7f, 0xb}]}, 0x1, [{0x87, &(0x7f0000000700)=@string={0x87, 0x3, "5b8040426ea18ec7c9a76b3b17a100a73a3481a5f95a7a61864b8b85abcba5828fd201c58537cdfc4f3f3a42cef9e699bb9a75c3068243e60338a2e592daf6992df3f9723c1cae082a8f3fbe55d98c3138b2a92781de9e2ae6d80a1fcf98ee9489cc8dc76444eaf434a631355ccfd97ac5f317bbd9112a77c9cd47f226a50b9fbb6a4eca18"}}]}) 4.892868677s ago: executing program 0 (id=1784): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140e, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0xc884}, 0x20004880) r3 = io_uring_setup(0xd33, &(0x7f0000000140)={0x0, 0x98d8, 0x800, 0x1, 0x43}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000200)={0xfffffffd, 0x0, &(0x7f00000001c0)=[r2, r1, r1, r1, r2, r1, r0, r0]}, 0x8) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x208480, 0x0) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000280)) socket$kcm(0x29, 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000002c0)={{0x1, 0x3}, 'port0\x00', 0x80, 0xc0400, 0x8, 0x0, 0xffffffff, 0x0, 0x10001, 0x0, 0x1, 0x7}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)="31c88e14c7af496574766a952ca07a1646eacb68dc35822e9ed726ed9407d990b591fe797eae563f664af1ae4c9487b9ac844dc5087c2a8781f0c6163828521d10ef2601c2d249aae49b95a799d0906c21bddfa4abcb2e09f7b2959f219eb4a4e805bc95c43b5d20ae943bfd70aac35f1db2f076074dd614", 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x79, "4d33dea24a8ba0e188583b5a25bdeee3f4d0ab1493b02867968b840835e51483918fa92fa4544d9c6dfd820c4a14d0610e73503c7d9c2fddb1e95e86f758502748a597d95bd441d785771c563352399bfecba3c17eba77aec06efb7c1e5a46ed1fa5d015022cfb7537dc97774a0336a33b91716d030fd868d9"}, &(0x7f0000000540)=0x81) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000005c0)={r6, 0x38, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x8, @local, 0x7}, @in6={0xa, 0x4e24, 0x4, @remote, 0x9}]}, &(0x7f0000000600)=0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000640)={0x6, 'bond0\x00', {0x7}, 0x4}) unshare(0x20000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x1, 0x1, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x3a) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c40)={0x0, &(0x7f00000006c0)=[@cpuid={0x2, 0x18, {0x0, 0xffff}}, @uexit={0x0, 0x18, 0xa}, @cpuid={0x2, 0x18, {0x3, 0x8}}, @cpuid={0x2, 0x18, {0x81, 0x9ab}}, @code={0x1, 0x6f, {"f3f3400f07c481795b9a9d890000b939030000b800800000ba000000000f300f00d766baf80cb8e2830185ef66bafc0c66b8060066ef440f20c03506000000440f22c0360fae7127b9800000c00f3235004000000f30c481a572d61c456f"}}, @cpuid={0x2, 0x18, {0x80000001, 0x8}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x7f, {"b805000000b9c60000000f01c1b805000000b9fc7f00000f01c1c4819351b62cea000064676764364e0fc718c74424000080ffffc7442402f16c9ff5c7442406000000000f011c240f2084b8010000000f01c1b9800000c00f3235004000000f30440f005cb50066b82c000f00d0"}}, @cpuid={0x2, 0x18, {0x3, 0x10}}, @cpuid={0x2, 0x18, {0x2, 0x1ff}}, @code={0x1, 0x7c, {"c483154ae391660f3830a300000000440fc7b2ba3f00000f017a3a0f0f029e0f07c744240000000000c7442402f0000000c7442406000000000f011424c74424006ed90000c744240200600000c7442406000000000f011424b92c030000b83f000000ba000000000f30a5"}}, @code={0x1, 0x7e, {"2e36f466ba400066b8ee8266ef66baf80cb89c1c6a8cef66bafc0cb8f6ffffffef66b868000f00d848b8fb000000000000000f23d00f21f8351000000a0f23f8430f019b11000000c4a2d13e33c463594152115764640fc71c98c7442400c7000000c7442402faffffffff2c24"}}, @code={0x1, 0x6b, {"2e652e3e2e65440f01ca8f2978c710440f070f683d980000000f005c5f2ec7442400fbfc1da9c7442402769e96c4c7442406000000000f011424440f1be3b9280b00000f32c744240036010000c74424029a000000ff1c240f08"}}, @cpuid={0x2, 0x18, {0x8000, 0x69}}, @code={0x1, 0x76, {"66baf80cb8070fb684ef66bafc0cec670f880700000066baf80cb87cb0ed8eef66bafc0c66b84ce066ef66bad00466edb9260b0000b826a10000ba000000000f300ad6660f212dc42195664f0066baf80cb8f69faa8aef66bafc0cb04eee660f38814cb372"}}, @cpuid={0x2, 0x18, {0x60000000, 0x7000}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @code={0x1, 0x5e, {"b9330800000f32c74424005d000000c7442402e7ae0000ff2c240f79ce66450fec767666baf80cb87acaed8def66bafc0cec66b8fb008ec03e0f2334c482d109c1c40218f261b6c4420d045600"}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x80000000, 0x8}}, @cpuid={0x2, 0x18, {0x5, 0x4}}, @uexit={0x0, 0x18, 0xfffffffffffffffb}, @code={0x1, 0x72, {"6766430f79d1b9800000c00f3235000800000f3066b83e000f00d8c7442400b2000000c74424020f000000ff1c240fc72966baf80cb8bcfc7e80ef66bafc0cb8808a3f20ef0fb58fd60000000fe397c25e0000400f070f20d835080000000f22d8"}}, @uexit={0x0, 0x18, 0x566}, @cpuid={0x2, 0x18, {0x400, 0x1ff}}, @uexit={0x0, 0x18, 0xfffffffffffffffe}, @uexit={0x0, 0x18, 0xf26}, @uexit={0x0, 0x18, 0x6}], 0x579}) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000c80)=0x100000) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r9, 0xc0485660, &(0x7f0000000d00)={0x0, 0x1, @raw_data=[0x6, 0x7, 0x4078, 0x4, 0x4d4a, 0x8, 0x6, 0xe, 0x74, 0x2, 0x7f, 0x4, 0x6, 0x10, 0xbd4, 0x6]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0, 0x0}) sched_setattr(r10, &(0x7f0000000e00)={0x38, 0x6, 0x10000022, 0x986, 0x1, 0xffffffffffffffff, 0xa53e, 0x2, 0x5, 0x10001}, 0x0) r11 = creat(&(0x7f0000000e40)='./file0\x00', 0x0) setsockopt$packet_int(r11, 0x107, 0x12, &(0x7f0000000e80)=0x571b, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000ec0)={0x6, 'geneve1\x00', {0x75b}, 0x7}) setsockopt$inet6_tcp_int(r11, 0x6, 0x1, &(0x7f0000000f00)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000f40)={r6, 0x1, 0x72c, 0x0, 0x0, 0x5}, 0x14) 4.491295444s ago: executing program 0 (id=1785): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x2, {0x2, 0x22}}, 0x0}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000100)=@v2={0x2000000, [{0x3, 0x2}, {0x2, 0x211a}]}, 0x14, 0x2) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x80000) r5 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0xffffffff80000001, 0x0, 0x4, r5, 0x1}) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000180)={0xc5, 0x0, r3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x0, 0x1, r5}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5000, 0x3000, 0x8, r4, 0x4}) 4.437046994s ago: executing program 5 (id=1786): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000000)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x10}, &(0x7f0000000400)=""/165, 0xa5, &(0x7f0000000800)=""/4096, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) sched_setattr(r6, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xffffffffffffffff, 0xfffffffc, 0xf}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3d8, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) r9 = syz_io_uring_setup(0x5284, &(0x7f0000000200)={0x0, 0x3416, 0x13100, 0x2, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000000)) ioctl$int_out(r9, 0x5460, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) close(r2) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r10 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186) fcntl$setownex(r10, 0xf, &(0x7f0000000240)={0x3}) 4.226145526s ago: executing program 3 (id=1787): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) socket$inet(0x2, 0x2, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0xfffffffffffffff7}) setsockopt$inet_buf(r0, 0x0, 0x26, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x101, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 3.748328939s ago: executing program 3 (id=1788): r0 = gettid() tkill(r0, 0x15) statx(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x100, 0x100, &(0x7f0000000c40)) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000006c0)}, {&(0x7f0000000540)="6f4673b3978110", 0x7}, {&(0x7f0000000740)="dfc1", 0x2}, {&(0x7f0000000780)="d21d6bb74e2ec78032d680d81948aa9aa290a27d8f1278a897c4f8ff6a254edaca3f1f1d6ce7f9125e2f98d4dc3468f10d111bb791c97021ebeb2e3b38ac3e73dbd678c3bc3092cca3726ba5a477609f94bc0427d2e59806904bedbe06fa38f1d60a108debbf4ecdc179e4ed956072cadc22de9e9f74e5dbbd7fa44fabd2937c1a4c3ab0c4f7380f9c97b504d68b99b8b7da0af9a0de902b63d34f92ed67f6cc09057d432f9a76f90210ae7d0919980596f4466b1049f6d319e882bd7dd7", 0xbe}, {&(0x7f0000000840)='s^', 0x2}, {&(0x7f0000000880)="3c12054b1eb9d71b66b15341b47383d43d9b17de44cfd9a47c84e393a2fc206d1fd88669eb7c62", 0x27}, {&(0x7f00000008c0)="7ce6fad3e73e5840af0c6306830b10285fc1d9500c9a3dae0f32ddb2b732f1bcbafbc9edfb519363b7ab7e571f28b42c2b2ab0932dae1b0e2e6fbfe6e7c5f901fdf8527e370025500657e372f0c8b383f716544dbe4d3d308385d6dee1448e604f5af4ea2160c7365f5f4ca7c98040cdacb72712664b0aea5f06908fa3eec2a8f5854c580f", 0x85}], 0x7, 0x0, 0x70, 0x4000}}], 0x1, 0x20000885) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x80000}, 0x4040840) sendmsg$nl_route_sched(r6, 0x0, 0x0) 3.061233008s ago: executing program 4 (id=1789): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000008000180000000080000000b7080000000000007baaf0ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa420000000000007040000f0ffffffb70200000800000418230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900020195"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x1}, 0x94) 2.862641796s ago: executing program 4 (id=1790): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001480040005"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000040)=0x7) 2.591766425s ago: executing program 1 (id=1791): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec", 0x99}, {&(0x7f0000000d80)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) unshare(0x400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) 2.494285258s ago: executing program 1 (id=1792): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4cffff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000808000002c00128009000100626f6e64000000001c00028008000a000100000005001000090000000500110009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x100010, r0, 0x63034000) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) faccessat(0xffffffffffffffff, 0x0, 0x0) munlockall() (async, rerun: 64) munlockall() (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073"], 0x92fc}}, 0xc000) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) (async) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.36523685s ago: executing program 0 (id=1793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000001c0)="01000000a0caccf05a94a66bb55a2a630b00c145f94cd977", 0xf0e4, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000a80)={{r0}, "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 2.364347432s ago: executing program 4 (id=1794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0xa, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x9c7}, {0x8, 0x3, 0x4, 0x2}, {0x5, 0x21, 0x3, 0xfffffa9e}, {0xe, 0x7, 0x70, 0x80000001}, {0x7f, 0x0, 0x16, 0x2}, {0x7fff, 0x25, 0x1, 0x9}, {0xb, 0x0, 0x3, 0x80}, {0x1000, 0x4, 0x8, 0x8001}, {0x2, 0x4, 0x9, 0x4}, {0xfff9, 0x0, 0x3, 0x401}]}) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003580)={0x20, 0x15, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x885}, 0x4800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) r6 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4733, 0x10100, 0x0, 0x24d, 0x0, r5}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1200}, 0x1}) io_uring_enter(r6, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r9 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r12 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) mq_timedreceive(r12, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xf72}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r13, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd29, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) connect$inet6(r13, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 2.304710292s ago: executing program 1 (id=1795): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = userfaultfd(0x80001) r2 = dup3(r1, r1, 0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x198, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000180)={{0x0, 0x85f}, {0x5, 0x2a}, 0x1, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) (async) userfaultfd(0x80001) (async) dup3(r1, r1, 0x80000) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) userfaultfd(0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x198, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) (async) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000180)={{0x0, 0x85f}, {0x5, 0x2a}, 0x1, 0x4}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5, 0x2}) (async) 2.15039725s ago: executing program 1 (id=1796): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x13, r0, 0xb18df000) syz_usb_connect(0x6, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES8=r0], 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000040)={0x14}, 0x14) 1.928989821s ago: executing program 0 (id=1797): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000007250b0a34000000060a0b04000000000000000002000000200004801c0001800900010068617368000000000c00028008003b270000000a140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x240000c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwrite64(r3, 0x0, 0x0, 0x2) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x28300, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x104}}, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x8000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5b00000068705ab99ea44fa00625d7b0795240b0245ed4233e0b0b49a1153e2dcda1b1b40d35c1192fdc4b624feedef430b171d3676a8145bde5414267bf409962266195dd475427ca919feb0992caf33adc832f795430daadcf70d63639b2a40481ce4eea1965a6acec9ed11dc54a633d7c1179fd06a9fdf69395c02532f27ddc6872d1ed0700d73599279678f13ed264549442535959edc2b04c2ca0f07eeea39588921a3ea715f72141667974884289a6069f829f7589ff4c6659161bdada9aceba1815c6f0c6d616044a5e0e9ae017a9a4bebfc74a025658cea29c07b3b8c10f1b5176989907070606", @ANYRES16=r5, @ANYBLOB="02002dbd7000fddbdf25170000000c00990002000000450000000a000600ffffffffffff00000a00060008021100000000000a001a0008021100000000000a001a00ffffffffffff00000a0006000802110000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040041) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) 1.498124451s ago: executing program 1 (id=1798): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) socket$inet(0x2, 0x2, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0xfffffffffffffffe}) setsockopt$inet_buf(r0, 0x0, 0x26, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x101, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 1.267420776s ago: executing program 1 (id=1799): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x68, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000040), 0x0, 0x4000084) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffffff, 0x0, 0x89101) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r6 = landlock_create_ruleset(&(0x7f00000004c0)={0x4300, 0x1}, 0x18, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000200)='./file0\x00', 0x6) landlock_restrict_self(r6, 0x0) renameat2(r7, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xd}, 0x1c) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.03270576s ago: executing program 0 (id=1800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(r0, &(0x7f0000000540), 0x0, 0x4040880) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r2, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) r4 = socket$kcm(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x47}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 0s ago: executing program 0 (id=1801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000000)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x10}, &(0x7f0000000400)=""/165, 0xa5, &(0x7f0000000800)=""/4096, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) sched_setattr(r6, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xffffffffffffffff, 0xfffffffc, 0xf}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3d8, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) r9 = syz_io_uring_setup(0x5284, &(0x7f0000000200)={0x0, 0x3416, 0x13100, 0x2, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000000)) ioctl$int_out(r9, 0x5460, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) close(r2) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r10 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186) fcntl$setownex(r10, 0xf, &(0x7f0000000240)={0x3}) kernel console output (not intermixed with test programs): 771590][ T5930] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 444.810845][ T5930] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 444.845657][ T5930] asix 5-1:0.0: probe with driver asix failed with error -71 [ 444.855852][T11543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.867271][ T5915] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 444.879584][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 444.883930][ T5930] usb 5-1: USB disconnect, device number 93 [ 444.896452][ T5915] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 444.909728][ T9] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 444.936532][ T9] usb 2-1: config 0 has no interface number 0 [ 444.942857][ T9] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 444.973202][ T9] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.995992][ T9] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 445.019383][ T9] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 445.055815][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 445.067889][T11492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.076785][ T9] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 445.101307][ T9] usb 2-1: Product: syz [ 445.105589][ T9] usb 2-1: Manufacturer: syz [ 445.107107][T11492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.116474][ T9] usb 2-1: SerialNumber: syz [ 445.129429][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 445.137970][ T9] usb 2-1: config 0 descriptor?? [ 445.147260][T11530] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 445.158235][ T5915] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 445.187040][ T5915] usb 1-1: USB disconnect, device number 76 [ 445.245750][T11537] kernel profiling enabled (shift: 63) [ 445.268123][T11537] profiling shift: 63 too large [ 445.378809][T11530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.397230][T11530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.027061][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 446.107499][ T5848] Bluetooth: hci4: command 0x0419 tx timeout [ 446.496707][ T5930] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 446.676978][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 446.726967][ T5930] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 446.748083][ T5930] usb 4-1: config 0 has no interface number 0 [ 446.780773][ T5930] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 446.824030][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.908082][ T5930] usb 4-1: Product: syz [ 446.921240][ T5930] usb 4-1: Manufacturer: syz [ 446.933366][ T5930] usb 4-1: SerialNumber: syz [ 446.975760][ T5930] usb 4-1: config 0 descriptor?? [ 447.009855][ T5930] gspca_main: etoms-2.14.0 probing 102c:6251 [ 447.137514][ T978] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 447.371279][T11599] fuse: Bad value for 'fd' [ 447.427665][T11577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 447.495598][T11577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.546297][T11577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 447.753754][ T978] usb 5-1: config 0 has no interfaces? [ 447.772206][ T978] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 447.782310][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.843381][ T978] usb 5-1: Product: syz [ 447.864013][ T978] usb 5-1: Manufacturer: syz [ 447.893979][ T978] usb 5-1: SerialNumber: syz [ 447.941433][ T978] usb 5-1: config 0 descriptor?? [ 448.031263][ T9] usb 2-1: USB disconnect, device number 84 [ 448.233777][ T5930] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 448.418898][ T5930] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 448.486793][ T5930] usb 1-1: config 0 has no interface number 0 [ 448.539532][ T5930] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 448.578752][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 448.663411][ T5930] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 448.735705][ T5930] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 448.758134][ T9] usb 2-1: config 0 has no interfaces? [ 448.773160][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 448.783147][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.796709][ T9] usb 2-1: Product: syz [ 448.802942][ T5930] usb 1-1: config 0 interface 200 has no altsetting 0 [ 448.813353][ T5930] usb 1-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 448.825663][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.834113][ T5930] usb 1-1: Product: syz [ 448.834497][ T9] usb 2-1: Manufacturer: syz [ 448.847025][ T5930] usb 1-1: Manufacturer: syz [ 448.855692][ T5930] usb 1-1: SerialNumber: syz [ 448.884245][ T9] usb 2-1: SerialNumber: syz [ 448.901690][ T9] usb 2-1: config 0 descriptor?? [ 449.006993][ T5930] usb 1-1: config 0 descriptor?? [ 449.276863][ T978] usb 4-1: USB disconnect, device number 90 [ 449.384586][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 449.406091][ T5930] usb 1-1: USB disconnect, device number 77 [ 449.457071][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 449.536572][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 449.632678][ T5848] Bluetooth: hci4: command 0x0419 tx timeout [ 449.651776][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.689984][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 449.720726][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.759166][ T9] usb 6-1: config 0 descriptor?? [ 449.807046][ T978] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 449.968372][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 449.978416][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 450.015113][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.063988][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 450.104314][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.187817][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1368'. [ 450.195215][ T9] usb 6-1: USB disconnect, device number 2 [ 450.197092][T11644] netlink: 'syz.5.1368': attribute type 30 has an invalid length. [ 450.203632][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.249994][T11644] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.259508][T11644] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.268831][T11644] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.276910][ T978] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 450.278075][T11644] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.286955][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.289973][ T978] usb 4-1: config 0 descriptor?? [ 450.306554][ T5930] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 450.478640][ T5915] usb 5-1: USB disconnect, device number 94 [ 450.572333][ T5930] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 450.598407][ T5930] usb 1-1: config 0 has no interface number 0 [ 450.605261][ T5930] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 450.668289][ T5930] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 450.695779][ T5930] usb 1-1: config 0 interface 230 has no altsetting 0 [ 450.720123][ T5930] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 450.745414][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.761426][ T5930] usb 1-1: Product: syz [ 450.771479][ T5930] usb 1-1: Manufacturer: syz [ 450.786763][ T5930] usb 1-1: SerialNumber: syz [ 450.834080][ T5930] usb 1-1: config 0 descriptor?? [ 450.853859][T11656] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 450.861572][T11656] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 450.872830][ T5930] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 450.894278][ T5930] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 451.097400][ T978] usbhid 4-1:0.0: can't add hid device: -71 [ 451.121804][ T978] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 451.180660][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 451.207218][ T978] usb 4-1: USB disconnect, device number 91 [ 451.263596][T11678] batadv_slave_1: entered promiscuous mode [ 451.367218][T11678] batadv_slave_1: left promiscuous mode [ 451.696684][ T5848] Bluetooth: hci4: command 0x0419 tx timeout [ 451.789032][ T5914] usb 2-1: USB disconnect, device number 85 [ 452.146836][ T5914] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 452.308509][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 452.349424][ T5914] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 452.369681][ T24] IPVS: starting estimator thread 0... [ 452.371023][ T5914] usb 2-1: config 0 has no interface number 0 [ 452.411501][ T5914] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 452.434143][ T5914] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 452.456057][ T5914] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 452.470777][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.479033][T11720] IPVS: using max 32 ests per chain, 76800 per kthread [ 452.506515][ T5914] usb 2-1: Product: syz [ 452.513314][ T5914] usb 2-1: Manufacturer: syz [ 452.525784][ T5914] usb 2-1: SerialNumber: syz [ 452.584228][ T5914] usb 2-1: config 0 descriptor?? [ 452.643183][T11699] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 452.654391][T11699] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 452.820130][ T5915] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 452.939376][T11736] xt_hashlimit: max too large, truncated to 1048576 [ 453.013877][ T5915] usb 6-1: config 0 has no interfaces? [ 453.029230][ T5915] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 453.039956][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.048775][ T5915] usb 6-1: Product: syz [ 453.071516][ T5915] usb 6-1: Manufacturer: syz [ 453.086189][ T5915] usb 6-1: SerialNumber: syz [ 453.109551][ T5915] usb 6-1: config 0 descriptor?? [ 453.776663][ T5848] Bluetooth: hci4: command 0x0419 tx timeout [ 453.869344][T11699] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 453.877616][T11699] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 454.303366][ T5914] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 454.322485][ T5914] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 454.353073][ T5914] asix 2-1:0.251: probe with driver asix failed with error -71 [ 454.463669][ T5914] usb 2-1: USB disconnect, device number 86 [ 454.483077][ T5930] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 454.618087][ T5930] usb 1-1: USB disconnect, device number 78 [ 455.165399][T11763] usb usb8: usbfs: process 11763 (syz.0.1390) did not claim interface 0 before use [ 455.488983][ T978] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 455.648287][ T978] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 455.670830][ T978] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 455.762481][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.791936][ T978] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 455.804343][ T978] usb 2-1: config 0 has no interface number 0 [ 455.811648][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 455.822077][ T978] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 455.829459][ T5930] usb 6-1: USB disconnect, device number 3 [ 455.832405][ T978] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 455.854496][ T978] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 455.871771][ T978] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.889349][ T978] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 455.899302][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.918666][ T978] usb 2-1: config 0 descriptor?? [ 455.935805][ T978] gspca_main: spca561-2.14.0 probing abcd:cdee [ 455.967330][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 455.976722][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 456.194441][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 456.211415][ T978] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 456.224368][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 456.254836][ T978] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 456.270030][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 456.281737][ T978] usb 2-1: MIDIStreaming interface descriptor not found [ 456.307551][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 456.389473][ T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 456.416188][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.449975][ T978] usb 2-1: USB disconnect, device number 87 [ 456.481157][ T9] usb 5-1: Product: syz [ 456.500655][ T9] usb 5-1: Manufacturer: syz [ 456.505276][ T9] usb 5-1: SerialNumber: syz [ 456.578979][ T9] usb 5-1: config 0 descriptor?? [ 457.047761][ T9] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 457.053837][ T9] input input26: Device does not respond to id packet M [ 457.079887][ T9] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 457.089670][ T9] input input26: Device does not respond to id packet P [ 457.106800][ T9] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 457.238043][ T9] input input26: Device does not respond to id packet B [ 457.251965][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 457.258279][ T9] input input26: Device does not respond to id packet N [ 457.265912][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 457.276042][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 457.291197][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 457.307258][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 457.327428][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 457.397830][ T9] usb 5-1: USB disconnect, device number 95 [ 457.541466][ T5914] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 457.836566][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 457.854144][ T5914] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 457.903481][ T5914] usb 1-1: config 0 has no interface number 0 [ 457.913768][ T5914] usb 1-1: config 0 interface 184 has no altsetting 0 [ 457.940669][ T5914] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 457.950545][ T5914] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 457.962313][ T5914] usb 1-1: Product: syz [ 457.985413][ T5914] usb 1-1: Manufacturer: syz [ 457.990520][ T5914] usb 1-1: SerialNumber: syz [ 458.028761][ T5914] usb 1-1: config 0 descriptor?? [ 458.041558][ T5914] smsc75xx v1.0.0 [ 458.454955][T11820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.652199][ T5914] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 458.712201][ T5914] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 458.907461][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 458.987970][ T24] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 459.090198][ T9] usb 2-1: config 0 has no interfaces? [ 459.136656][ T24] usb 6-1: device descriptor read/64, error -71 [ 459.341877][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 459.351750][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.386835][ T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 459.447928][ T9] usb 2-1: Product: syz [ 459.455424][ T9] usb 2-1: Manufacturer: syz [ 459.539784][ T5914] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 459.548375][ T24] usb 6-1: device descriptor read/64, error -71 [ 459.556619][ T9] usb 2-1: SerialNumber: syz [ 459.564903][ T5914] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 459.596101][ T9] usb 2-1: config 0 descriptor?? [ 459.637920][ T5914] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 459.706855][ T24] usb usb6-port1: attempt power cycle [ 459.723936][ T5914] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 459.878558][ T5930] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 460.028477][ T5930] usb 4-1: device descriptor read/64, error -71 [ 460.078697][ T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 460.117326][ T24] usb 6-1: device descriptor read/8, error -71 [ 460.156577][T10894] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 460.276498][ T5930] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 460.286496][T10894] usb 5-1: device descriptor read/64, error -71 [ 460.356541][ T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 460.377213][ T24] usb 6-1: device descriptor read/8, error -71 [ 460.416737][ T5930] usb 4-1: device descriptor read/64, error -71 [ 460.487178][ T24] usb usb6-port1: unable to enumerate USB device [ 460.526608][T10894] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 460.536933][ T5930] usb usb4-port1: attempt power cycle [ 460.659386][T10894] usb 5-1: device descriptor read/64, error -71 [ 460.763966][ T24] usb 1-1: USB disconnect, device number 79 [ 460.770191][T10894] usb usb5-port1: attempt power cycle [ 460.855400][T11879] binder_alloc: 11878: binder_alloc_buf, no vma [ 460.879575][ T5930] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 460.907008][ T5930] usb 4-1: device descriptor read/8, error -71 [ 461.126578][T10894] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 461.149600][ T5930] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 461.157888][T10894] usb 5-1: device descriptor read/8, error -71 [ 461.178239][ T5930] usb 4-1: device descriptor read/8, error -71 [ 461.276645][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 461.286936][ T5930] usb usb4-port1: unable to enumerate USB device [ 461.396626][T10894] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 461.417061][T10894] usb 5-1: device descriptor read/8, error -71 [ 461.429378][ T24] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1983, setting to 1024 [ 461.445343][ T24] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 461.476087][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 461.501140][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 461.514798][ T5930] usb 2-1: USB disconnect, device number 88 [ 461.520928][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.530367][T10894] usb usb5-port1: unable to enumerate USB device [ 461.538613][ T24] usb 1-1: Product: syz [ 461.544098][ T24] usb 1-1: Manufacturer: syz [ 461.559248][ T24] usb 1-1: SerialNumber: syz [ 461.571086][T11885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 461.790094][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.807252][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.820504][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.837083][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.868319][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.880753][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.881865][T11891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.899471][ T5930] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 461.918050][ T24] usb 1-1: USB disconnect, device number 80 [ 462.068512][ T5930] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 462.091852][ T5930] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 462.102241][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.110697][ T5930] usb 2-1: Product: syz [ 462.114980][ T5930] usb 2-1: Manufacturer: syz [ 462.135401][ T5930] usb 2-1: SerialNumber: syz [ 462.155595][ T5930] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 462.402907][T11910] xt_connbytes: Forcing CT accounting to be enabled [ 462.410562][T11910] Cannot find add_set index 0 as target [ 462.797490][T11925] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 462.803562][T11925] syzkaller0: owner set to 0 [ 462.916301][ T923] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 463.101015][ T5930] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 463.176519][ T923] usb 1-1: Using ep0 maxpacket: 16 [ 463.196112][ T923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 463.220839][ T923] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.9c [ 463.280415][ T923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.329430][ T923] usb 1-1: Product: syz [ 463.337954][ T923] usb 1-1: Manufacturer: syz [ 463.342822][ T923] usb 1-1: SerialNumber: syz [ 463.353213][ T923] usb 1-1: config 0 descriptor?? [ 463.380898][ T923] usb 1-1: selecting invalid altsetting 1 [ 463.408519][ T923] snd-usb-caiaq 1-1:0.0: can't set alt interface. [ 463.413893][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.422447][T11937] syzkaller0: entered promiscuous mode [ 463.434409][ T923] usb 1-1: unable to init card! (ret=-5) [ 463.446932][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.462776][ T923] snd-usb-caiaq 1-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 463.472805][T11937] syzkaller0: entered allmulticast mode [ 463.590144][ T9] usb 2-1: USB disconnect, device number 89 [ 463.650481][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.668543][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.690072][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 463.774063][ T5914] usb 1-1: USB disconnect, device number 81 [ 464.674269][T11963] input: syz0 as /devices/virtual/input/input27 [ 466.597125][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 466.802536][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 466.815170][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.834262][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.853101][ T9] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 466.866219][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 466.873615][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 466.884856][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.907540][ T9] usb 1-1: config 0 descriptor?? [ 466.959064][T11986] random: crng reseeded on system resumption [ 467.105149][T11987] usb usb8: usbfs: process 11987 (syz.1.1438) did not claim interface 0 before use [ 467.323158][ T9] hid-generic 0003:045E:05DA.0017: unknown main item tag 0x0 [ 467.336638][ T9] hid-generic 0003:045E:05DA.0017: unknown main item tag 0x0 [ 467.381578][ T9] hid-generic 0003:045E:05DA.0017: unknown main item tag 0x0 [ 467.413402][ T9] hid-generic 0003:045E:05DA.0017: ignoring exceeding usage max [ 467.467546][ T9] hid-generic 0003:045E:05DA.0017: ignoring exceeding usage max [ 467.479481][ T9] hid-generic 0003:045E:05DA.0017: unknown main item tag 0x0 [ 467.492326][ T9] hid-generic 0003:045E:05DA.0017: unbalanced collection at end of report description [ 467.526807][ T9] hid-generic 0003:045E:05DA.0017: probe with driver hid-generic failed with error -22 [ 467.558109][T11980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.588552][T11980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.636894][T10894] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 467.667486][T12000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.734377][T12000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.775219][ T923] usb 1-1: USB disconnect, device number 82 [ 467.807055][T10894] usb 5-1: Using ep0 maxpacket: 8 [ 467.812912][T10894] usb 5-1: no configurations [ 467.833057][T10894] usb 5-1: can't read configurations, error -22 [ 467.881270][T12006] fuse: Bad value for 'fd' [ 467.896503][ T5930] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 468.007163][T10894] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 468.086977][ T5930] usb 6-1: Invalid ep0 maxpacket: 64 [ 468.169539][T10894] usb 5-1: Using ep0 maxpacket: 8 [ 468.192734][T10894] usb 5-1: no configurations [ 468.207770][T10894] usb 5-1: can't read configurations, error -22 [ 468.218525][ T5930] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 468.237062][T10894] usb usb5-port1: attempt power cycle [ 468.283260][T12021] netlink: 'syz.0.1446': attribute type 10 has an invalid length. [ 468.398597][ T5930] usb 6-1: Invalid ep0 maxpacket: 64 [ 468.410813][ T5930] usb usb6-port1: attempt power cycle [ 468.587054][T10894] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 468.630858][T10894] usb 5-1: Using ep0 maxpacket: 8 [ 468.647030][T10894] usb 5-1: no configurations [ 468.655188][T10894] usb 5-1: can't read configurations, error -22 [ 468.768177][ T5930] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 468.801237][T10894] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 468.821603][ T5930] usb 6-1: Invalid ep0 maxpacket: 64 [ 468.850269][T10894] usb 5-1: Using ep0 maxpacket: 8 [ 468.863029][T10894] usb 5-1: no configurations [ 468.883837][T10894] usb 5-1: can't read configurations, error -22 [ 468.998920][T10894] usb usb5-port1: unable to enumerate USB device [ 469.017904][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1450'. [ 469.046845][ T5930] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 469.073308][ T5930] usb 6-1: Invalid ep0 maxpacket: 64 [ 469.082431][ T5930] usb usb6-port1: unable to enumerate USB device [ 469.210877][ T5931] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 469.376649][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 469.399019][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.410800][ T5931] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 469.420861][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.452884][ T5931] usb 2-1: config 0 descriptor?? [ 469.685490][ T5931] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 470.547049][ T5914] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 470.768613][ T5914] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 470.780138][ T5914] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 470.841733][ T5914] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.001178][T12085] vti0: entered promiscuous mode [ 471.018985][T12085] vti0: entered allmulticast mode [ 471.019954][ T5914] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 471.034100][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.065087][ T5914] usb 1-1: Product: syz [ 471.074398][ T5914] usb 1-1: Manufacturer: syz [ 471.080192][ T5914] usb 1-1: SerialNumber: syz [ 471.091609][ T5914] hub 1-1:1.0: bad descriptor, ignoring hub [ 471.107396][ T5914] hub 1-1:1.0: probe with driver hub failed with error -5 [ 471.226596][ T923] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 471.265063][T12093] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 471.333619][ T5914] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 471.406576][ T923] usb 6-1: Using ep0 maxpacket: 16 [ 471.423687][ T923] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 471.482706][ T5914] usb 1-1: USB disconnect, device number 83 [ 471.482702][ T923] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 471.482743][ T923] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.543903][ T5914] usblp1: removed [ 471.586679][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 471.586698][ T30] audit: type=1326 audit(1751739879.359:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 471.669327][ T923] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.680921][ T30] audit: type=1326 audit(1751739879.359:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 471.703641][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.711444][ T923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.752576][ T30] audit: type=1326 audit(1751739879.359:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 471.793056][ T923] usb 6-1: Product: syz [ 471.845681][ T923] usb 6-1: Manufacturer: syz [ 471.855233][ T923] usb 6-1: SerialNumber: syz [ 471.979380][ T30] audit: type=1326 audit(1751739879.359:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 472.071312][ T30] audit: type=1326 audit(1751739879.359:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 472.326953][ T923] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 472.412751][ T30] audit: type=1326 audit(1751739879.359:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 472.563084][ T30] audit: type=1326 audit(1751739879.359:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 472.684285][ T30] audit: type=1326 audit(1751739879.359:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 472.707288][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.766799][ T30] audit: type=1326 audit(1751739879.359:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 472.789332][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.795647][ T30] audit: type=1326 audit(1751739879.359:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.3.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4937b8e929 code=0x7ffc0000 [ 472.984470][ T923] usb 2-1: USB disconnect, device number 90 [ 473.060839][T12131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.182774][T12140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.269217][T12140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.506690][ T923] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 473.700717][ T923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 473.716999][ T923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 473.756547][ T923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 473.798870][ T923] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 473.875004][ T923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.908695][ T923] usb 2-1: Product: syz [ 473.942937][ T923] usb 2-1: Manufacturer: syz [ 473.968100][ T923] usb 2-1: SerialNumber: syz [ 474.012364][ T923] usb 2-1: config 0 descriptor?? [ 474.051643][T12137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.064389][T12137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.089967][ T923] usb 2-1: ucan: probing device on interface #0 [ 474.337132][ T5930] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 474.429765][T12169] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1470'. [ 474.484413][ T5914] usb 6-1: USB disconnect, device number 12 [ 474.611706][ T923] ucan 2-1:0.0 can0: registered device [ 474.652814][ T923] ucan 2-1:0.0 can0: firmware string: unknown [ 474.809382][ T923] usb 2-1: USB disconnect, device number 91 [ 475.666895][ T5914] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 475.826652][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 475.842248][ T5914] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 475.852170][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.861256][ T5914] usb 4-1: Product: syz [ 475.875766][ T5914] usb 4-1: Manufacturer: syz [ 475.898483][ T5914] usb 4-1: SerialNumber: syz [ 475.942062][ T5914] usb 4-1: config 0 descriptor?? [ 476.172104][ T923] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 476.173261][ T5914] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 476.336659][ T923] usb 2-1: Using ep0 maxpacket: 16 [ 476.346623][ T923] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.371473][ T923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 476.399306][ T923] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 476.426480][ T923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.447733][ T923] usb 2-1: config 0 descriptor?? [ 476.619143][T12192] syz_tun: entered allmulticast mode [ 476.783529][ T5914] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 476.788513][ T5914] usb 4-1: USB disconnect, device number 96 [ 476.918537][ T923] microsoft 0003:045E:009D.0018: hidraw0: USB HID v0.07 Device [HID 045e:009d] on usb-dummy_hcd.1-1/input0 [ 476.918569][ T923] microsoft 0003:045E:009D.0018: no inputs found [ 476.918583][ T923] microsoft 0003:045E:009D.0018: could not initialize ff, continuing anyway [ 477.092556][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.092935][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.107688][ T5914] usb 2-1: USB disconnect, device number 92 [ 477.175546][T12205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.278323][T12191] syz_tun: left allmulticast mode [ 477.415170][T12214] Cannot find add_set index 1 as target [ 477.770308][T12224] misc userio: The device must be registered before sending interrupts [ 478.182533][ T978] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 478.193106][T12229] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 67108897, id = 0 [ 478.366721][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 478.408646][ T978] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 478.465938][ T978] usb 4-1: config 0 has no interface number 0 [ 478.478551][ T978] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.486656][T12231] tipc: Started in network mode [ 478.495215][ T978] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 478.495811][T12231] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 478.509793][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.523315][ T978] usb 4-1: Product: syz [ 478.527873][ T978] usb 4-1: Manufacturer: syz [ 478.533194][ T978] usb 4-1: SerialNumber: syz [ 478.547118][ T978] usb 4-1: config 0 descriptor?? [ 478.573070][ T978] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 478.588106][T12231] tipc: Enabling of bearer rejected, failed to enable media [ 478.775343][ T923] usb 4-1: USB disconnect, device number 97 [ 478.784691][ T1096] usb 4-1: Failed to submit usb control message: -71 [ 478.808198][ T1096] usb 4-1: unable to send the bmi data to the device: -71 [ 478.825071][ T1096] usb 4-1: unable to get target info from device [ 478.840904][ T1096] usb 4-1: could not get target info (-71) [ 478.854921][ T1096] usb 4-1: could not probe fw (-71) [ 479.325035][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 479.449771][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 479.458826][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1490'. [ 479.473285][T12247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.654127][T12256] fuse: Unknown parameter 'roup_id' [ 481.176860][ T923] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 481.248518][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 481.312340][T12293] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 481.361293][ T923] usb 6-1: Using ep0 maxpacket: 16 [ 481.365346][ T923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.365397][ T923] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.365417][ T923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 481.372178][ T923] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 481.372206][ T923] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 481.372225][ T923] usb 6-1: Manufacturer: syz [ 481.374765][ T923] usb 6-1: config 0 descriptor?? [ 481.486730][T12293] tty tty28: ldisc open failed (-12), clearing slot 27 [ 481.996963][ T978] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 482.153306][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 482.162023][ T978] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 482.178795][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.235922][ T978] usb 4-1: config 0 descriptor?? [ 482.246293][T12306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.566312][ T978] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 482.596719][ T978] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 482.616177][ T978] asix 4-1:0.0: probe with driver asix failed with error -71 [ 482.627994][ T978] usb 4-1: USB disconnect, device number 98 [ 483.133586][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1514'. [ 483.269955][ T5930] usb 6-1: USB disconnect, device number 13 [ 483.495218][T12348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.641271][T12353] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1519'. [ 483.654240][T12352] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'. [ 483.664182][T12352] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'. [ 483.674504][T12352] netlink: 492 bytes leftover after parsing attributes in process `syz.5.1519'. [ 484.826652][ T923] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 485.029664][ T978] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 485.141399][ T923] usb 6-1: config 0 has no interfaces? [ 485.170596][ T923] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 485.182770][ T923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.191219][ T923] usb 6-1: Product: syz [ 485.195438][ T923] usb 6-1: Manufacturer: syz [ 485.202599][ T923] usb 6-1: SerialNumber: syz [ 485.248094][ T923] usb 6-1: config 0 descriptor?? [ 485.311194][ T978] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 485.362966][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.393475][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.426489][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.480127][ T978] usb 4-1: Product: syz [ 485.494583][ T978] usb 4-1: Manufacturer: syz [ 485.521249][ T978] usb 4-1: SerialNumber: syz [ 485.824979][ T978] usb 4-1: 0:2 : does not exist [ 485.849865][ T978] usb 4-1: USB disconnect, device number 99 [ 486.015443][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.416609][ T5914] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 486.431830][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'. [ 486.565902][T12380] netlink: 'syz.1.1527': attribute type 11 has an invalid length. [ 486.586059][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.620181][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.644003][ T5914] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 486.654098][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 486.679389][ T5914] usb 5-1: SerialNumber: syz [ 486.904949][T12387] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1529'. [ 487.027722][ T923] usb 6-1: USB disconnect, device number 14 [ 487.363618][T12399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1534'. [ 487.957006][T10894] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 488.116499][ T923] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 488.270019][T10894] usb 6-1: config 0 has no interfaces? [ 488.277382][ T923] usb 4-1: Using ep0 maxpacket: 16 [ 488.291095][ T923] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 488.302259][ T923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.456384][ T923] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.513217][ T923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.587282][ T923] usb 4-1: Product: syz [ 488.593591][ T923] usb 4-1: Manufacturer: syz [ 488.616573][ T923] usb 4-1: SerialNumber: syz [ 488.906197][ T923] usb 4-1: 0:2 : does not exist [ 489.120593][T10894] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 489.224903][T10894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.245835][ T5914] usb 5-1: 0:2 : does not exist [ 489.253020][ T923] usb 4-1: USB disconnect, device number 100 [ 489.262412][T10894] usb 6-1: Product: syz [ 489.287996][T10894] usb 6-1: Manufacturer: syz [ 489.307866][T10894] usb 6-1: SerialNumber: syz [ 489.314904][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.337871][T10894] usb 6-1: config 0 descriptor?? [ 489.387840][ T5914] usb 5-1: USB disconnect, device number 105 [ 489.657731][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.413640][T12440] loop2: detected capacity change from 0 to 6 [ 490.424363][T12440] Dev loop2: unable to read RDB block 6 [ 490.435592][T12440] loop2: unable to read partition table [ 490.469804][T12440] loop2: partition table beyond EOD, truncated [ 490.496162][T12440] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 490.986573][ T978] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 491.227708][ T978] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 491.235995][ T978] usb 4-1: config 0 has no interface number 0 [ 491.260007][ T978] usb 4-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 491.274758][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.284334][ T978] usb 4-1: Product: syz [ 491.290566][ T978] usb 4-1: Manufacturer: syz [ 491.413055][ T978] usb 4-1: SerialNumber: syz [ 491.430156][ T978] usb 4-1: config 0 descriptor?? [ 491.693195][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.717437][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.792037][ T978] pl2303 4-1:0.161: required interrupt-in endpoint missing [ 491.835683][ T5931] usb 6-1: USB disconnect, device number 15 [ 491.852453][ T978] usb 4-1: USB disconnect, device number 101 [ 491.944951][T12456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1547'. [ 492.666272][ T5931] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 492.909550][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 492.913096][ T5931] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 492.913124][ T5931] usb 4-1: config 0 has no interface number 0 [ 492.913153][ T5931] usb 4-1: config 0 interface 6 has no altsetting 0 [ 492.917771][ T5931] usb 4-1: New USB device found, idVendor=b633, idProduct=571a, bcdDevice=7f.a6 [ 492.917799][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.917820][ T5931] usb 4-1: Product: syz [ 492.917834][ T5931] usb 4-1: Manufacturer: syz [ 492.917849][ T5931] usb 4-1: SerialNumber: syz [ 492.921689][ T5931] usb 4-1: config 0 descriptor?? [ 492.924712][ T5931] usb-storage 4-1:0.6: USB Mass Storage device detected [ 493.527059][ T5931] usb 4-1: USB disconnect, device number 102 [ 494.047110][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1556'. [ 494.265299][T12498] loop2: detected capacity change from 0 to 6 [ 494.302380][T12498] Dev loop2: unable to read RDB block 6 [ 494.330419][T12498] loop2: unable to read partition table [ 494.348848][T12498] loop2: partition table beyond EOD, truncated [ 494.357002][T10894] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 494.456602][T12498] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 494.530309][T10894] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 494.581734][T10894] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 494.640318][T10894] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 494.661847][T10894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.704644][ T5931] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 494.788845][T10894] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.950783][T10894] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 495.030634][ T5931] usb 6-1: config 0 has no interfaces? [ 495.125441][ T5931] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 495.137155][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.145300][ T5931] usb 6-1: Product: syz [ 495.153575][T12494] delete_channel: no stack [ 495.159571][ T5931] usb 6-1: Manufacturer: syz [ 495.162038][ T9] usb 4-1: USB disconnect, device number 103 [ 495.166251][ T5931] usb 6-1: SerialNumber: syz [ 495.183445][T12494] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 495.227919][ T5931] usb 6-1: config 0 descriptor?? [ 495.608424][T10894] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 495.681671][T12513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1561'. [ 495.786680][T10894] usb 5-1: Using ep0 maxpacket: 32 [ 495.795441][T10894] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 495.805039][T10894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.831630][T10894] usb 5-1: config 0 has no interface number 0 [ 495.857454][T10894] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 495.876539][T10894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.896969][T10894] usb 5-1: Product: syz [ 495.901707][T10894] usb 5-1: Manufacturer: syz [ 495.915058][T10894] usb 5-1: SerialNumber: syz [ 495.936193][T10894] usb 5-1: config 0 descriptor?? [ 495.952557][T10894] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 495.973395][T10894] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 496.116890][ T978] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 496.160731][ T9] usb 5-1: USB disconnect, device number 106 [ 496.348151][ T978] usb 2-1: device descriptor read/64, error -71 [ 496.597028][ T978] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 496.746735][ T978] usb 2-1: device descriptor read/64, error -71 [ 496.792792][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 496.792812][ T30] audit: type=1326 audit(1751739904.589:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479818e929 code=0x7ffc0000 [ 496.857421][ T978] usb usb2-port1: attempt power cycle [ 496.881460][ T30] audit: type=1326 audit(1751739904.589:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479818e929 code=0x7ffc0000 [ 496.904833][ T30] audit: type=1326 audit(1751739904.589:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f479818e929 code=0x7ffc0000 [ 497.095633][ T30] audit: type=1326 audit(1751739904.629:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479818e929 code=0x7ffc0000 [ 497.126730][ T30] audit: type=1326 audit(1751739904.629:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47981c11e5 code=0x7ffc0000 [ 497.150150][ T30] audit: type=1326 audit(1751739904.629:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479818e929 code=0x7ffc0000 [ 497.204029][ T30] audit: type=1326 audit(1751739904.629:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f479818e929 code=0x7ffc0000 [ 497.227435][ T978] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 497.233931][T12534] netlink: 'syz.0.1567': attribute type 12 has an invalid length. [ 497.275272][ T978] usb 2-1: device descriptor read/8, error -71 [ 497.286843][ T30] audit: type=1326 audit(1751739904.629:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479818e929 code=0x7ffc0000 [ 497.395730][ T30] audit: type=1326 audit(1751739904.629:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479818e929 code=0x7ffc0000 [ 497.407401][ T5914] usb 6-1: USB disconnect, device number 16 [ 497.501019][T12538] netlink: 'syz.5.1568': attribute type 1 has an invalid length. [ 497.506530][ T30] audit: type=1326 audit(1751739904.629:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f479818e929 code=0x7ffc0000 [ 497.546528][ T978] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 497.564022][T12538] bond1: entered promiscuous mode [ 497.569778][ T978] usb 2-1: device descriptor read/8, error -71 [ 497.579477][T12538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.610306][T12542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.620323][T12542] bond1: (slave bond2): making interface the new active one [ 497.629255][T12542] bond2: entered promiscuous mode [ 497.634906][T12542] bond1: (slave bond2): Enslaving as an active interface with an up link [ 497.687597][ T978] usb usb2-port1: unable to enumerate USB device [ 497.867536][T12548] kvm: pic: non byte write [ 497.997507][ T978] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 498.044770][T12553] netlink: 'syz.4.1572': attribute type 21 has an invalid length. [ 498.054057][T12553] netlink: 'syz.4.1572': attribute type 1 has an invalid length. [ 498.063570][T12553] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1572'. [ 498.136617][ T978] usb 6-1: device descriptor read/64, error -71 [ 498.376671][ T978] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 498.526791][ T978] usb 6-1: device descriptor read/64, error -71 [ 498.651263][ T978] usb usb6-port1: attempt power cycle [ 499.016529][ T978] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 499.037237][ T978] usb 6-1: device descriptor read/8, error -71 [ 499.257190][ T5915] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 499.286901][ T978] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 499.308297][ T978] usb 6-1: device descriptor read/8, error -71 [ 499.406773][ T5915] usb 2-1: device descriptor read/64, error -71 [ 499.417453][ T978] usb usb6-port1: unable to enumerate USB device [ 499.647054][ T5915] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 499.787376][ T5915] usb 2-1: device descriptor read/64, error -71 [ 499.806655][T10894] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 499.906958][ T5915] usb usb2-port1: attempt power cycle [ 499.966534][T10894] usb 4-1: Using ep0 maxpacket: 32 [ 499.975413][T10894] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 499.985926][T10894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.994307][T10894] usb 4-1: Product: syz [ 499.998792][T10894] usb 4-1: Manufacturer: syz [ 500.003407][T10894] usb 4-1: SerialNumber: syz [ 500.010398][T10894] usb 4-1: config 0 descriptor?? [ 500.020145][T10894] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 500.235846][ T978] usb 4-1: USB disconnect, device number 104 [ 500.258329][ T5915] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 500.289653][ T5915] usb 2-1: device descriptor read/8, error -71 [ 500.617806][ T5915] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 500.642380][T12581] loop2: detected capacity change from 0 to 7 [ 500.666339][ T5846] Dev loop2: unable to read RDB block 7 [ 500.673382][ T5846] loop2: unable to read partition table [ 500.693342][ T5846] loop2: partition table beyond EOD, truncated [ 500.702595][ T5915] usb 2-1: device descriptor read/8, error -71 [ 500.714272][T12581] Dev loop2: unable to read RDB block 7 [ 500.732846][T12581] loop2: unable to read partition table [ 500.758479][T12581] loop2: partition table beyond EOD, truncated [ 500.792100][T12581] loop_reread_partitions: partition scan of loop2 (被) failed (rc=-5) [ 500.839802][ T5915] usb usb2-port1: unable to enumerate USB device [ 500.878642][ T5914] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 501.091556][ T5914] usb 1-1: config 0 has no interfaces? [ 501.117431][ T5914] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 501.140474][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.183631][ T5914] usb 1-1: Product: syz [ 501.211314][ T5914] usb 1-1: Manufacturer: syz [ 501.228480][ T5914] usb 1-1: SerialNumber: syz [ 501.284898][ T5914] usb 1-1: config 0 descriptor?? [ 501.389242][T12594] netlink: 'syz.4.1584': attribute type 1 has an invalid length. [ 501.551528][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.560834][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.706566][ T5914] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 501.891635][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.931074][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.944002][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 501.956905][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.988290][ T5914] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.012232][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.025994][ T5914] usb 5-1: config 0 descriptor?? [ 502.438804][T12614] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=768 (1536 ns) > initial count (16 ns). Using initial count to start timer. [ 502.458040][ T5914] plantronics 0003:047F:FFFF.0019: unbalanced collection at end of report description [ 502.471685][ T5914] plantronics 0003:047F:FFFF.0019: parse failed [ 502.478183][ T5914] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22 [ 502.510514][T12615] sctp: [Deprecated]: syz.1.1587 (pid 12615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.510514][T12615] Use struct sctp_sack_info instead [ 502.645704][ T5914] usb 5-1: USB disconnect, device number 107 [ 503.772192][T12646] sctp: [Deprecated]: syz.1.1593 (pid 12646) Use of int in max_burst socket option deprecated. [ 503.772192][T12646] Use struct sctp_assoc_value instead [ 503.886521][ T5914] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 504.028433][ T5931] usb 1-1: USB disconnect, device number 84 [ 504.066522][ T5930] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 504.086750][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 504.201891][ T5914] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 504.228122][ T5914] usb 5-1: config 0 has an invalid interface number: 49 but max is 2 [ 504.237305][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 504.275420][ T5914] usb 5-1: config 0 has no interface number 1 [ 504.279432][ T5930] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 504.303614][ T5914] usb 5-1: config 0 has no interface number 2 [ 504.313576][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.349851][ T5914] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 504.362365][ T5930] usb 2-1: Product: syz [ 504.381206][ T5930] usb 2-1: Manufacturer: syz [ 504.385868][ T5930] usb 2-1: SerialNumber: syz [ 504.411289][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.446845][ T5914] usb 5-1: config 0 descriptor?? [ 504.467478][ T5914] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 504.508431][ T5930] usb 2-1: config 0 descriptor?? [ 504.759244][ T5930] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 505.207593][ T5915] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 505.490802][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 505.552938][ T5915] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 505.583269][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.605135][ T5915] usb 4-1: Product: syz [ 505.614870][ T5915] usb 4-1: Manufacturer: syz [ 505.636496][ T5915] usb 4-1: SerialNumber: syz [ 505.692571][ T5915] r8152-cfgselector 4-1: Unknown version 0x0000 [ 505.854995][ T5915] r8152-cfgselector 4-1: config 0 descriptor?? [ 506.015904][ T5930] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 506.054535][ T5930] usb 2-1: USB disconnect, device number 101 [ 506.997038][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 507.646818][ T9] usb 6-1: device descriptor read/64, error -71 [ 507.916877][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 507.932975][ T5914] usb 5-1: Could not set interface, error -71 [ 508.009573][ T5914] usb 5-1: USB disconnect, device number 108 [ 508.056847][ T9] usb 6-1: device descriptor read/64, error -71 [ 508.220605][ T9] usb usb6-port1: attempt power cycle [ 508.323946][ T5915] r8152-cfgselector 4-1: Unknown version 0x0000 [ 508.362106][ T5915] r8152-cfgselector 4-1: bad CDC descriptors [ 508.415575][ T5915] r8152-cfgselector 4-1: USB disconnect, device number 105 [ 508.567637][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 508.676851][T10894] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 508.877176][ T9] usb 6-1: device descriptor read/8, error -71 [ 508.877440][T10894] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 508.902807][T10894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.918397][T10894] usb 2-1: Product: syz [ 509.002623][T12729] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=768 (1536 ns) > initial count (16 ns). Using initial count to start timer. [ 509.031977][T10894] usb 2-1: Manufacturer: syz [ 509.048100][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'. [ 509.064625][T10894] usb 2-1: SerialNumber: syz [ 509.081993][T10894] usb 2-1: config 0 descriptor?? [ 509.104863][T12733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.156835][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 509.221076][ T9] usb 6-1: device descriptor read/8, error -71 [ 509.399735][ T9] usb usb6-port1: unable to enumerate USB device [ 509.436786][T12714] loop6: detected capacity change from 0 to 524287999 [ 509.447864][T12741] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1609'. [ 509.668583][ T5930] usb 2-1: USB disconnect, device number 102 [ 509.867114][ T5914] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 510.017968][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 510.029343][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.066694][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.126470][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 510.197224][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 510.266519][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.329809][ T5914] usb 1-1: config 0 descriptor?? [ 510.581818][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 510.696206][T12763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 510.752177][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 510.779573][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 510.800183][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 510.853443][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 510.886307][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 510.896754][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 510.904358][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 510.918829][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 510.999708][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 511.007074][ T5931] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 511.040685][ T5914] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 511.074125][ T5914] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 511.100326][ T5914] microsoft 0003:045E:07DA.001A: no inputs found [ 511.109131][ T5914] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 511.158573][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 511.171863][ T5914] usb 1-1: USB disconnect, device number 85 [ 511.181958][ T5931] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 511.223612][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 511.260464][ T5931] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 511.321733][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.347047][T12781] fido_id[12781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 511.394724][ T5931] usb 2-1: config 0 descriptor?? [ 511.666579][ T5930] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 511.818112][ T5931] waltop 0003:172F:0034.001B: item fetching failed at offset 1/3 [ 511.837437][ T5931] waltop 0003:172F:0034.001B: probe with driver waltop failed with error -22 [ 511.848167][T12794] input: syz0 as /devices/virtual/input/input30 [ 511.894875][ T5930] usb 4-1: config 0 has no interfaces? [ 511.914000][ T5930] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 511.959127][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.993268][ T5930] usb 4-1: Product: syz [ 512.013635][ T5930] usb 4-1: Manufacturer: syz [ 512.029202][ T5931] usb 2-1: USB disconnect, device number 103 [ 512.063065][ T5930] usb 4-1: SerialNumber: syz [ 512.174778][ T5930] usb 4-1: config 0 descriptor?? [ 513.096642][T10894] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 513.266656][T10894] usb 1-1: Using ep0 maxpacket: 8 [ 513.278292][T10894] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 513.372437][ T5914] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 513.393241][T10894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.410693][T10894] usb 1-1: Product: syz [ 513.421018][T10894] usb 1-1: Manufacturer: syz [ 513.445198][T10894] usb 1-1: SerialNumber: syz [ 513.469515][T10894] usb 1-1: config 0 descriptor?? [ 513.542344][T10894] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 513.558935][ T5914] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 513.591356][T10894] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 513.593820][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.666555][ T5914] usb 2-1: config 0 has no interface number 0 [ 513.684964][ T5914] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 513.701178][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.715975][ T5914] usb 2-1: Product: syz [ 513.722941][ T5914] usb 2-1: Manufacturer: syz [ 513.728064][ T5914] usb 2-1: SerialNumber: syz [ 513.750631][ T5914] usb 2-1: config 0 descriptor?? [ 513.784981][ T5914] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 513.799210][T10894] usb 1-1: USB disconnect, device number 86 [ 513.803877][ T5914] usb 2-1: No valid video chain found. [ 513.986926][ T5914] usb 2-1: USB disconnect, device number 104 [ 514.503644][T10894] usb 4-1: USB disconnect, device number 106 [ 514.661595][T12839] loop5: detected capacity change from 0 to 63 [ 514.811819][T12847] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1628'. [ 514.821732][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 515.055072][T12845] kvm: kvm [12844]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffcf00000000 [ 515.082676][T12845] kvm: kvm [12844]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 515.601831][ T5931] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 515.857920][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 515.867941][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.989097][ T5931] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 516.044709][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.194605][ T5931] usb 5-1: config 0 descriptor?? [ 516.283653][T12870] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1637'. [ 516.470577][T11828] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.641164][T11828] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.816030][T11828] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.053635][T11828] vlan2 (unregistering): left allmulticast mode [ 517.090451][T11828] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 517.118883][T11828] vlan2 (unregistering): left promiscuous mode [ 517.138812][T11828] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 517.179833][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.193939][T11828] bridge0: port 3(vlan2) entered disabled state [ 517.206251][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.313013][T11828] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.416573][ T5930] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 517.591093][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.639575][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 517.672522][ T5930] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 517.719982][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.753022][ T5930] usb 6-1: Product: syz [ 517.845651][ T5930] usb 6-1: Manufacturer: syz [ 517.850999][ T5930] usb 6-1: SerialNumber: syz [ 517.867259][ T5930] usb 6-1: config 0 descriptor?? [ 517.874817][ T5930] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 517.895828][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.912762][T11828] bridge_slave_1: left promiscuous mode [ 517.922326][T11828] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.933737][ T5930] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 517.961423][T11828] bridge_slave_0: left allmulticast mode [ 517.971521][ T5930] usb 6-1: media controller created [ 517.977918][T11828] bridge_slave_0: left promiscuous mode [ 517.987864][T11828] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.085515][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.109309][ T5931] usbhid 5-1:0.0: can't add hid device: -71 [ 518.128697][ T5931] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 518.216385][ T5931] usb 5-1: USB disconnect, device number 109 [ 518.245052][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 518.256271][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 518.266832][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 518.283184][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 518.294613][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 518.417521][ T5930] DVB: Unable to find symbol tda10046_attach() [ 518.458115][ T5930] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 518.470574][ T5930] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 518.481033][ T5930] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 518.501053][ T5930] usb 6-1: USB disconnect, device number 25 [ 518.864601][T12917] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 519.435300][T11828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.452430][T11828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.463633][T11828] bond0 (unregistering): Released all slaves [ 519.550495][T12900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.729398][T12938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1651'. [ 519.799886][T11828] tipc: Disabling bearer [ 519.810064][T11828] tipc: Disabling bearer [ 519.907490][T11828] tipc: Left network mode [ 520.416731][ T5848] Bluetooth: hci0: command tx timeout [ 520.621758][T11828] hsr_slave_0: left promiscuous mode [ 520.644699][T11828] hsr_slave_1: left promiscuous mode [ 520.675478][T11828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.790982][T11828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.884492][T11828] veth1_vlan: left promiscuous mode [ 520.914030][T11828] veth0_vlan: left promiscuous mode [ 521.761005][ T9] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 521.948651][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 521.956280][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 521.972416][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 521.984695][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 522.022591][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 522.107443][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.145118][ T9] usb 5-1: config 0 descriptor?? [ 522.162116][T12986] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 522.179386][ T9] hub 5-1:0.0: USB hub found [ 522.300893][T11828] team0 (unregistering): Port device team_slave_1 removed [ 522.356050][T11828] team0 (unregistering): Port device team_slave_0 removed [ 522.390766][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 522.506622][ T5930] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 522.514558][ T5848] Bluetooth: hci0: command tx timeout [ 522.591989][T12986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.625690][T12986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.640697][T12986] syz.4.1659: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 522.656298][T12986] CPU: 0 UID: 0 PID: 12986 Comm: syz.4.1659 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 522.656324][T12986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.656336][T12986] Call Trace: [ 522.656343][T12986] [ 522.656352][T12986] dump_stack_lvl+0x189/0x250 [ 522.656381][T12986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.656405][T12986] ? __pfx__printk+0x10/0x10 [ 522.656439][T12986] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 522.656464][T12986] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 522.656490][T12986] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 522.656516][T12986] warn_alloc+0x214/0x310 [ 522.656540][T12986] ? stack_depot_save_flags+0x40/0x900 [ 522.656570][T12986] ? __pfx_warn_alloc+0x10/0x10 [ 522.656595][T12986] ? kasan_save_track+0x4f/0x80 [ 522.656615][T12986] ? xskq_create+0x56/0x170 [ 522.656630][T12986] ? xsk_init_queue+0xb0/0x110 [ 522.656652][T12986] ? xsk_setsockopt+0x43f/0x710 [ 522.656673][T12986] ? do_sock_setsockopt+0x25a/0x3e0 [ 522.656693][T12986] ? __x64_sys_setsockopt+0x18b/0x220 [ 522.656711][T12986] ? do_syscall_64+0xfa/0x3b0 [ 522.656728][T12986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.656754][T12986] __vmalloc_node_range_noprof+0x125/0x12f0 [ 522.656809][T12986] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 522.656838][T12986] ? __kasan_kmalloc+0x93/0xb0 [ 522.656863][T12986] vmalloc_user_noprof+0xad/0xf0 [ 522.656885][T12986] ? xskq_create+0xbf/0x170 [ 522.656902][T12986] xskq_create+0xbf/0x170 [ 522.656919][T12986] xsk_init_queue+0xb0/0x110 [ 522.656941][T12986] xsk_setsockopt+0x43f/0x710 [ 522.656963][T12986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 522.656983][T12986] ? __lock_acquire+0xab9/0xd20 [ 522.657008][T12986] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 522.657024][T12986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 522.657047][T12986] do_sock_setsockopt+0x25a/0x3e0 [ 522.657069][T12986] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 522.657094][T12986] ? __fget_files+0x2a/0x420 [ 522.657123][T12986] __x64_sys_setsockopt+0x18b/0x220 [ 522.657148][T12986] do_syscall_64+0xfa/0x3b0 [ 522.657163][T12986] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.657179][T12986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.657194][T12986] ? clear_bhb_loop+0x60/0xb0 [ 522.657214][T12986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.657230][T12986] RIP: 0033:0x7f479818e929 [ 522.657248][T12986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.657263][T12986] RSP: 002b:00007f4795ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 522.657282][T12986] RAX: ffffffffffffffda RBX: 00007f47983b5fa0 RCX: 00007f479818e929 [ 522.657294][T12986] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 522.657305][T12986] RBP: 00007f4798210b39 R08: 0000000000000004 R09: 0000000000000000 [ 522.657315][T12986] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.657326][T12986] R13: 0000000000000000 R14: 00007f47983b5fa0 R15: 00007f47984dfa28 [ 522.657351][T12986] [ 522.669530][ T5930] usb 4-1: device descriptor read/64, error -71 [ 522.683675][T12986] Mem-Info: [ 522.928865][ T5930] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 522.948873][T12986] active_anon:13710 inactive_anon:0 isolated_anon:0 [ 522.948873][T12986] active_file:15224 inactive_file:40079 isolated_file:0 [ 522.948873][T12986] unevictable:768 dirty:232 writeback:0 [ 522.948873][T12986] slab_reclaimable:9048 slab_unreclaimable:101535 [ 522.948873][T12986] mapped:35848 shmem:7117 pagetables:1409 [ 522.948873][T12986] sec_pagetables:0 bounce:0 [ 522.948873][T12986] kernel_misc_reclaimable:0 [ 522.948873][T12986] free:1297007 free_pcp:16910 free_cma:0 [ 523.028287][T12986] Node 0 active_anon:54868kB inactive_anon:0kB active_file:60896kB inactive_file:160112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143424kB dirty:928kB writeback:0kB shmem:26940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12432kB pagetables:5536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.062374][T12986] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.097984][T12986] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 523.127353][T12986] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 523.133211][T12986] Node 0 DMA32 free:1277120kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54820kB inactive_anon:0kB active_file:60896kB inactive_file:158548kB unevictable:1536kB writepending:924kB present:3129332kB managed:2558392kB mlocked:0kB bounce:0kB free_pcp:42324kB local_pcp:16172kB free_cma:0kB [ 523.144547][ T5930] usb 4-1: device descriptor read/64, error -71 [ 523.166658][T12986] lowmem_reserve[]: 0 0 1 1 1 [ 523.177879][T12986] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 523.207888][T12986] lowmem_reserve[]: 0 0 0 0 0 [ 523.210155][T11828] dummy0 (unregistering): left allmulticast mode [ 523.212679][T12986] Node 1 Normal free:3896468kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24768kB local_pcp:11488kB free_cma:0kB [ 523.252277][T12986] lowmem_reserve[]: 0 0 0 0 0 [ 523.257231][T12986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 523.270727][T12986] Node 0 DMA32: 276*4kB (UME) 98*8kB (UE) 64*16kB (UE) 321*32kB (UME) 321*64kB (UME) 72*128kB (UME) 37*256kB (UME) 32*512kB (UM) 18*1024kB (U) 3*2048kB (U) 289*4096kB (UM) = 1277120kB [ 523.289943][T12986] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 523.303065][ T5930] usb usb4-port1: attempt power cycle [ 523.303332][T12986] Node 1 Normal: 141*4kB (UE) 48*8kB (UME) 32*16kB (UME) 129*32kB (UME) 45*64kB (UME) 9*128kB (UME) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (M) 947*4096kB (M) = 3896468kB [ 523.327501][T12986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.337802][T12986] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.347629][T12986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.357539][T12986] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.367070][T12986] 62418 total pagecache pages [ 523.371885][T12986] 0 pages in swap cache [ 523.376222][T12986] Free swap = 124996kB [ 523.380668][T12986] Total swap = 124996kB [ 523.384906][T12986] 2097051 pages RAM [ 523.389089][T12986] 0 pages HighMem/MovableOnly [ 523.393815][T12986] 425411 pages reserved [ 523.398154][T12986] 0 pages cma reserved [ 523.426110][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 523.432725][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 523.481146][ T9] usb 5-1: USB disconnect, device number 110 [ 523.678681][ T5930] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 523.780410][ T5930] usb 4-1: device descriptor read/8, error -71 [ 523.872082][T12903] chnl_net:caif_netlink_parms(): no params data found [ 524.048834][ T5930] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 524.103304][T13002] fuse: Unknown parameter 'rootZjA00r_id' [ 524.117693][ T5930] usb 4-1: device descriptor read/8, error -71 [ 524.271520][ T5930] usb usb4-port1: unable to enumerate USB device [ 524.380253][T11828] IPVS: stop unused estimator thread 0... [ 524.427246][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1664'. [ 524.576891][ T5848] Bluetooth: hci0: command tx timeout [ 524.656981][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.664151][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.837858][T12903] bridge_slave_0: entered allmulticast mode [ 524.849239][T12903] bridge_slave_0: entered promiscuous mode [ 525.041736][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 525.274700][T13026] syzkaller0: entered promiscuous mode [ 525.293495][T13026] syzkaller0: entered allmulticast mode [ 525.606877][ T923] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 525.857188][ T923] usb 6-1: Using ep0 maxpacket: 16 [ 525.890519][ T923] usb 6-1: config 0 has no interfaces? [ 525.906369][ T923] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 525.916008][ T923] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 526.009370][ T923] usb 6-1: Manufacturer: syz [ 526.107467][ T923] usb 6-1: config 0 descriptor?? [ 526.658426][ T5848] Bluetooth: hci0: command tx timeout [ 528.036783][ T978] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 528.217470][ T978] usb 4-1: config 0 has no interfaces? [ 528.229500][ T978] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 528.253422][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.297895][ T978] usb 4-1: Product: syz [ 528.302183][ T978] usb 4-1: Manufacturer: syz [ 528.306913][ T978] usb 4-1: SerialNumber: syz [ 528.325000][ T978] usb 4-1: config 0 descriptor?? [ 528.722204][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.725733][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.729611][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.746150][T12903] bridge_slave_1: entered allmulticast mode [ 528.748106][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.755138][T12903] bridge_slave_1: entered promiscuous mode [ 528.948870][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.977973][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.230052][T12903] team0: Port device team_slave_0 added [ 529.250922][T12903] team0: Port device team_slave_1 added [ 529.415173][T13074] usb usb8: usbfs: process 13074 (syz.4.1673) did not claim interface 0 before use [ 529.695613][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.703234][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.748996][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.816664][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.823856][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.851034][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.925651][ T978] usb 4-1: USB disconnect, device number 111 [ 530.933995][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 531.162680][T12903] hsr_slave_0: entered promiscuous mode [ 531.177531][T12903] hsr_slave_1: entered promiscuous mode [ 531.208375][T12903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.256046][T12903] Cannot create hsr debugfs directory [ 531.351707][T13100] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1679'. [ 531.532440][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1679'. [ 531.567777][T13100] tipc: Started in network mode [ 531.572684][T13100] tipc: Node identity a, cluster identity 4711 [ 531.611363][ T5931] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 531.659818][T13100] tipc: Node number set to 10 [ 531.665229][T13100] tipc: Cannot configure node identity twice [ 531.673452][ T923] usb 6-1: USB disconnect, device number 26 [ 531.698239][ T978] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 531.877258][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 531.890849][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.906085][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.922956][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.933960][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.966794][ T978] usb 4-1: Product: syz [ 531.971025][ T978] usb 4-1: Manufacturer: syz [ 531.975817][ T978] usb 4-1: SerialNumber: syz [ 532.033221][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1685'. [ 532.084174][T13116] syzkaller0: entered promiscuous mode [ 532.098381][T13116] syzkaller0: entered allmulticast mode [ 532.135514][T13120] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 532.151597][T13120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 532.233712][ T978] usb 4-1: 0:2 : does not exist [ 532.252887][ T978] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 532.327163][ T978] usb 4-1: USB disconnect, device number 112 [ 532.409433][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.484316][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 533.217221][ T5931] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 533.225084][T13140] loop2: detected capacity change from 0 to 6 [ 533.291518][T13140] Dev loop2: unable to read RDB block 6 [ 533.306712][T13140] loop2: unable to read partition table [ 533.316909][T13140] loop2: partition table beyond EOD, truncated [ 533.350776][T13140] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 533.473956][ T5931] usb 4-1: config 0 has no interfaces? [ 533.498172][ T5931] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 533.507612][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.515713][ T5931] usb 4-1: Product: syz [ 533.522665][ T5931] usb 4-1: Manufacturer: syz [ 533.527657][ T5931] usb 4-1: SerialNumber: syz [ 533.539350][ T5931] usb 4-1: config 0 descriptor?? [ 535.613934][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1697'. [ 535.746919][ T5914] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 535.899978][ T9] usb 4-1: USB disconnect, device number 113 [ 535.950808][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 535.976047][ T5914] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 536.001419][ T5914] usb 5-1: config 0 has no interface number 0 [ 536.027829][ T5914] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 536.062559][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.107285][ T5914] usb 5-1: Product: syz [ 536.116669][ T5914] usb 5-1: Manufacturer: syz [ 536.134701][ T5914] usb 5-1: SerialNumber: syz [ 536.143079][T13180] ALSA: mixer_oss: invalid OSS volume 'ZyM/jb-))Wu' [ 536.158412][ T5914] usb 5-1: config 0 descriptor?? [ 536.169181][ T5914] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 536.198574][T13180] ALSA: mixer_oss: invalid OSS volume '?Թ痈Y{UD' [ 536.222849][T13180] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 536.231764][ T5914] usb 5-1: selecting invalid altsetting 1 [ 536.258170][ T5914] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 536.276840][T13180] ALSA: mixer_oss: invalid OSS volume 'lg' [ 536.312095][ T5914] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 536.323018][T13180] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 536.368127][ T5914] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 536.368456][T12903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 536.424434][T13180] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 536.431744][T12903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 536.445090][ T5914] usb 5-1: media controller created [ 536.472024][T12903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 536.490915][T13180] ALSA: mixer_oss: invalid OSS volume '' [ 536.502698][T12903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 536.521688][T13180] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 536.556715][T13180] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 536.569147][T13180] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 536.572761][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.597797][T13180] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 536.666566][T13180] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 536.696506][ T978] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 536.697133][T13180] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 536.800921][T13180] ALSA: mixer_oss: invalid OSS volume 'x\E79@ar4b2]jG' [ 536.885805][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.903112][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 536.928987][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 536.954636][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.984519][ T978] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 536.999175][ T5914] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 537.008356][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.015506][T11833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.026548][ T5914] zl10353_read_register: readreg error (reg=127, ret==-71) [ 537.042894][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.068198][ T978] usb 2-1: Product: syz [ 537.072638][ T5914] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 537.083065][ T978] usb 2-1: Manufacturer: syz [ 537.085027][T11833] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.090277][ T978] usb 2-1: SerialNumber: syz [ 537.094831][T11833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.132293][T13199] loop2: detected capacity change from 0 to 6 [ 537.149774][ T978] usb 2-1: config 0 descriptor?? [ 537.172865][ T978] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 537.183470][T13199] Dev loop2: unable to read RDB block 6 [ 537.193045][T13199] loop2: unable to read partition table [ 537.215247][ T5914] usb 5-1: USB disconnect, device number 112 [ 537.234985][T13199] loop2: partition table beyond EOD, truncated [ 537.246502][ T978] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 537.257312][T13199] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 537.491212][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.541087][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.572855][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.832425][T12903] veth0_vlan: entered promiscuous mode [ 537.933237][T12903] veth1_vlan: entered promiscuous mode [ 538.024208][ T978] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 538.084821][T12903] veth0_macvtap: entered promiscuous mode [ 538.444521][T13215] syzkaller0: entered promiscuous mode [ 538.458261][T13215] syzkaller0: entered allmulticast mode [ 538.478434][T12903] veth1_macvtap: entered promiscuous mode [ 538.506941][ T5914] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 538.516776][ T5931] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 538.686597][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 538.723476][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 538.735673][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 538.782970][ T5914] usb 6-1: config 0 has no interfaces? [ 538.800217][ T5931] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 538.812516][ T5931] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 538.822624][ T5931] usb 4-1: Product: syz [ 538.830137][ T5931] usb 4-1: Manufacturer: syz [ 538.835110][ T5931] usb 4-1: SerialNumber: syz [ 538.835242][ T5914] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 538.943626][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.020376][ T5914] usb 6-1: config 0 descriptor?? [ 539.085169][ T5931] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 539.105232][ T978] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 539.117034][ T978] em28xx 2-1:0.0: board has no eeprom [ 539.126814][ T5931] visor 4-1:1.0: probe with driver visor failed with error -71 [ 539.163538][ T5931] usb 4-1: USB disconnect, device number 114 [ 539.212053][ T978] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 539.223176][ T978] em28xx 2-1:0.0: dvb set to bulk mode. [ 539.229748][ T5914] em28xx 2-1:0.0: Binding DVB extension [ 539.296497][ T978] usb 2-1: USB disconnect, device number 105 [ 539.308915][ T978] em28xx 2-1:0.0: Disconnecting em28xx [ 539.339648][ T5914] em28xx 2-1:0.0: Registering input extension [ 539.347336][ T978] em28xx 2-1:0.0: Closing input extension [ 539.470759][ T978] em28xx 2-1:0.0: Freeing device [ 540.066762][ T5931] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 540.114391][T13237] kvm: kvm [13236]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 540.144344][T13237] kvm: kvm [13236]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x800 [ 540.176760][T13237] kvm: kvm [13236]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 540.201609][T13237] kvm: kvm [13236]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x0 [ 540.232012][T13237] kvm: kvm [13236]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 540.249028][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 540.278521][ T5931] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 540.305904][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.326493][ T5931] usb 4-1: Product: syz [ 540.332450][ T5931] usb 4-1: Manufacturer: syz [ 540.340918][ T5931] usb 4-1: SerialNumber: syz [ 540.362667][ T5931] usb 4-1: config 0 descriptor?? [ 540.380611][ T5931] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 540.987761][T13235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.001832][T13235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.102719][ T978] usb 6-1: USB disconnect, device number 27 [ 541.446248][ T5931] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 541.473691][ T5931] usb 4-1: USB disconnect, device number 115 [ 542.172582][T13285] program syz.3.1713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 542.426927][ T978] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 542.579687][ T978] usb 6-1: device descriptor read/64, error -71 [ 542.817142][ T978] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 542.956744][ T978] usb 6-1: device descriptor read/64, error -71 [ 543.077256][ T978] usb usb6-port1: attempt power cycle [ 543.440271][ T978] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 543.478266][ T978] usb 6-1: device descriptor read/8, error -71 [ 543.746683][ T978] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 543.781295][ T978] usb 6-1: device descriptor read/8, error -71 [ 543.873201][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.899430][ T978] usb usb6-port1: unable to enumerate USB device [ 543.911524][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.963600][T12903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.979148][T12903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.989291][T12903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.008846][T12903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.093955][T13333] loop2: detected capacity change from 0 to 6 [ 544.135176][ T5846] Dev loop2: unable to read RDB block 6 [ 544.165310][ T5846] loop2: unable to read partition table [ 544.179675][ T5846] loop2: partition table beyond EOD, truncated [ 544.215483][T13333] Dev loop2: unable to read RDB block 6 [ 544.246188][T13333] loop2: unable to read partition table [ 544.264484][T13333] loop2: partition table beyond EOD, truncated [ 544.276802][T13333] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 544.323975][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.349705][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.395462][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.404353][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.089662][T13383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.099650][T13383] binder: 13369:13383 ioctl c0306201 2000000003c0 returned -14 [ 546.256839][ T978] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 546.296787][ T5931] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 546.379948][T13387] syzkaller0: entered promiscuous mode [ 546.385669][T13387] syzkaller0: entered allmulticast mode [ 546.410070][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 546.417993][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 546.445862][ T978] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 546.462489][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 546.479262][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.502130][ T5931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 546.512643][ T978] usb 1-1: Product: syz [ 546.525057][ T978] usb 1-1: Manufacturer: syz [ 546.535536][ T978] usb 1-1: SerialNumber: syz [ 546.540163][ T5931] usb 2-1: config 0 has no interface number 0 [ 546.540210][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 546.540249][ T5931] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 546.540269][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.575110][ T5931] usb 2-1: config 0 descriptor?? [ 546.630587][ T978] usb 1-1: config 0 descriptor?? [ 546.663151][ T5931] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 546.678595][ T978] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 546.701705][T13395] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1729'. [ 546.743187][ T978] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 546.950688][ T978] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 547.057010][ T978] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 547.079738][T13409] loop2: detected capacity change from 0 to 6 [ 547.083155][T13373] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 547.099602][T13409] Dev loop2: unable to read RDB block 6 [ 547.101678][ T978] em28xx 1-1:0.0: board has no eeprom [ 547.121121][T13409] loop2: unable to read partition table [ 547.145792][T13409] loop2: partition table beyond EOD, truncated [ 547.188566][T13409] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 547.206960][ T978] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 547.233070][ T978] em28xx 1-1:0.0: dvb set to bulk mode. [ 547.258842][ T5915] em28xx 1-1:0.0: Binding DVB extension [ 547.291012][ T978] usb 1-1: USB disconnect, device number 87 [ 547.296775][ T923] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 547.312741][ T978] em28xx 1-1:0.0: Disconnecting em28xx [ 547.398835][ T5915] em28xx 1-1:0.0: Registering input extension [ 547.407686][ T978] em28xx 1-1:0.0: Closing input extension [ 547.475504][ T923] usb 4-1: Using ep0 maxpacket: 8 [ 547.483049][ T923] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.496995][ T978] em28xx 1-1:0.0: Freeing device [ 547.497971][ T923] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.549575][ T923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 547.573782][ T923] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 547.584357][ T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.624540][ T923] usb 4-1: config 0 descriptor?? [ 548.081495][ T923] chicony 0003:04F2:1421.001C: unbalanced delimiter at end of report description [ 548.093962][ T923] chicony 0003:04F2:1421.001C: Chicony hid parse failed: -22 [ 548.104195][ T923] chicony 0003:04F2:1421.001C: probe with driver chicony failed with error -22 [ 548.321101][ T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 548.390066][ T923] usb 4-1: USB disconnect, device number 116 [ 548.495938][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 548.504484][ T9] usb 5-1: can't read configurations, error -22 [ 548.640176][ T9] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 548.840929][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 548.849041][ T9] usb 5-1: can't read configurations, error -22 [ 548.855791][ T9] usb usb5-port1: attempt power cycle [ 549.216649][ T9] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 549.253861][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 549.262261][ T9] usb 5-1: can't read configurations, error -22 [ 549.386880][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 549.423475][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 549.434509][ T9] usb 5-1: can't read configurations, error -22 [ 549.441893][ T9] usb usb5-port1: unable to enumerate USB device [ 549.619036][ T923] usb 2-1: USB disconnect, device number 106 [ 549.777039][T13425] bridge2: entered promiscuous mode [ 550.025248][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 550.025265][ T30] audit: type=1326 audit(1751739957.819:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13442 comm="syz.3.1741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4937b8e929 code=0x0 [ 550.295258][ T30] audit: type=1326 audit(1751739957.819:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13442 comm="syz.3.1741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4937b8e929 code=0x0 [ 550.588788][T13454] loop2: detected capacity change from 0 to 6 [ 550.597076][T13454] Dev loop2: unable to read RDB block 6 [ 550.602899][T13454] loop2: unable to read partition table [ 550.613516][T13454] loop2: partition table beyond EOD, truncated [ 550.641301][T13454] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 551.446681][ T923] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 551.646692][ T923] usb 5-1: device descriptor read/64, error -71 [ 551.906505][ T923] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 551.976762][T10894] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 552.036785][ T923] usb 5-1: device descriptor read/64, error -71 [ 552.096908][ T978] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 552.139741][T10894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.149589][ T923] usb usb5-port1: attempt power cycle [ 552.165241][T10894] usb 1-1: config 1 has no interface number 0 [ 552.172621][T10894] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.186898][T10894] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 552.197321][T10894] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 256, setting to 64 [ 552.211749][T10894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.231282][T10894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.246556][T10894] usb 1-1: Product: syz [ 552.250869][T10894] usb 1-1: Manufacturer: syz [ 552.259987][T10894] usb 1-1: SerialNumber: syz [ 552.280347][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 552.288283][ T978] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 552.301519][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.329818][ T978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 552.346819][ T978] pvrusb2: ********** [ 552.351038][ T978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 552.382337][ T978] pvrusb2: Important functionality might not be entirely working. [ 552.404429][ T978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 552.472029][ T978] pvrusb2: ********** [ 552.516628][ T923] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 552.573807][ T923] usb 5-1: device descriptor read/8, error -71 [ 552.686528][ T2343] pvrusb2: Invalid write control endpoint [ 552.720964][T13484] netlink: 3284 bytes leftover after parsing attributes in process `syz.3.1750'. [ 552.730556][T13484] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1750'. [ 552.816524][ T923] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 552.838501][ T923] usb 5-1: device descriptor read/8, error -71 [ 552.945819][ T2343] pvrusb2: Invalid write control endpoint [ 552.979862][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 552.979910][ T923] usb usb5-port1: unable to enumerate USB device [ 553.093958][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 553.105604][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 553.114169][T10894] cdc_ncm 1-1:1.1: bind() failure [ 553.119036][ T2343] pvrusb2: Device being rendered inoperable [ 553.134110][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 553.141591][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 553.165620][ T2343] pvrusb2: Attached sub-driver cx25840 [ 553.180467][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 553.193991][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 554.339366][T13493] vlan2: entered allmulticast mode [ 554.351384][T13493] macsec0: entered allmulticast mode [ 554.384523][T10894] usb 2-1: USB disconnect, device number 107 [ 554.625170][T10894] usb 1-1: USB disconnect, device number 88 [ 554.636699][ T9] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 554.811290][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 554.829009][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 554.842337][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 554.854212][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.877728][ T9] usb 4-1: Product: syz [ 554.884561][ T9] usb 4-1: Manufacturer: syz [ 554.894545][ T9] usb 4-1: SerialNumber: syz [ 554.917109][ T9] usb 4-1: config 0 descriptor?? [ 555.156172][T13508] syzkaller1: entered promiscuous mode [ 555.162890][ T9] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 555.177587][T13508] syzkaller1: entered allmulticast mode [ 555.189579][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 555.229463][ T9] usb 4-1: USB disconnect, device number 117 [ 555.430868][T13511] bond_slave_1: entered promiscuous mode [ 555.441738][T13511] bond_slave_1: left promiscuous mode [ 555.866158][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 556.056980][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 556.071767][ T9] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 556.099713][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 556.118517][ T9] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 556.130431][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.143604][ T9] usb 2-1: config 0 descriptor?? [ 556.152168][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 556.363347][T10894] usb 2-1: USB disconnect, device number 108 [ 556.446899][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 556.636602][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 556.643539][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 556.681704][ T9] usb 4-1: config 179 has no interface number 0 [ 556.706481][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 556.743614][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 556.769785][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 556.826495][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 556.886590][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 556.940760][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 556.972302][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.039096][T13524] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 557.316801][T13524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 557.323380][T13524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 557.366597][T13524] vhci_hcd vhci_hcd.0: Device attached [ 557.391478][ T9] usb 4-1: USB disconnect, device number 118 [ 557.391557][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 557.391611][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 557.400715][T13552] vhci_hcd: connection closed [ 557.459255][T13528] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 557.491981][T11833] vhci_hcd: stop threads [ 557.496830][T11833] vhci_hcd: release socket [ 557.514714][T11833] vhci_hcd: disconnect device [ 557.743495][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 558.029673][ T5914] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 558.219208][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.231832][ T5914] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 558.279304][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.317443][ T5914] usb 2-1: config 0 descriptor?? [ 558.686559][ T9] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 558.761706][ T5914] logitech-djreceiver 0003:046D:C532.001D: item fetching failed at offset 3/7 [ 558.778128][ T5914] logitech-djreceiver 0003:046D:C532.001D: logi_dj_probe: parse failed [ 558.795007][ T5914] logitech-djreceiver 0003:046D:C532.001D: probe with driver logitech-djreceiver failed with error -22 [ 558.857316][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 558.868381][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 558.877205][ T9] usb 5-1: config 0 has no interface number 0 [ 558.883434][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 558.893680][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 558.908971][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.917435][ T9] usb 5-1: Product: syz [ 558.921703][ T9] usb 5-1: Manufacturer: syz [ 558.926329][ T9] usb 5-1: SerialNumber: syz [ 558.937079][ T9] usb 5-1: config 0 descriptor?? [ 558.945113][ T9] smsc75xx v1.0.0 [ 559.037014][ T978] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 559.109682][T13557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.118570][T13557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.208396][ T978] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 559.221569][ T978] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 559.238667][ T978] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 559.255784][ T978] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 559.268447][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.362482][T13572] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 559.559380][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 559.586722][ T5931] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 559.599883][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 559.746713][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 559.768741][ T5931] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 559.777922][ T5931] usb 6-1: config 179 has no interface number 0 [ 559.785246][ T5931] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 559.806113][ T5931] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 559.823037][ T5931] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.841487][ T5931] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 559.853727][ T5931] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 559.871510][ T5931] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 559.882212][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.923216][T13577] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 560.043555][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 560.055241][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 560.065035][ T5914] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 560.086586][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 560.109607][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 560.196904][ T5914] usb 4-1: device descriptor read/64, error -71 [ 560.478331][ T5914] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 560.637317][ T5914] usb 4-1: device descriptor read/64, error -71 [ 560.656755][ T9] usb 2-1: USB disconnect, device number 109 [ 560.747836][ T5914] usb usb4-port1: attempt power cycle [ 560.806752][ T5931] usb 5-1: USB disconnect, device number 121 [ 561.085161][T13599] team_slave_0: entered promiscuous mode [ 561.091160][T13599] team_slave_1: entered promiscuous mode [ 561.215980][ T5914] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 561.258261][ T5914] usb 4-1: device descriptor read/8, error -71 [ 561.366638][ T5931] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 561.407326][ T978] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 561.421401][ T978] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input34 [ 561.506771][ T5914] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 561.536344][ T5931] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 561.541110][ T5914] usb 4-1: device descriptor read/8, error -71 [ 561.543842][ T5931] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 561.621488][ T978] usb 1-1: USB disconnect, device number 89 [ 561.627756][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 561.674147][ T5931] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 561.677213][ T5914] usb usb4-port1: unable to enumerate USB device [ 561.775439][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.881609][ T5931] usb 5-1: Product: syz [ 561.894934][ T5931] usb 5-1: Manufacturer: syz [ 561.926981][ T5931] usb 5-1: SerialNumber: syz [ 561.950863][ T5931] rndis_host 5-1:7.0: skipping garbage [ 561.963760][ T5931] usb 5-1: bad CDC descriptors [ 561.975185][ T5931] option 5-1:7.0: GSM modem (1-port) converter detected [ 562.286753][T13612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.370153][T13612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.551681][ T978] usb 6-1: USB disconnect, device number 32 [ 562.551712][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 562.576625][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 562.981596][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.988137][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.330743][ T5945] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 563.519505][T13628] syzkaller0: entered promiscuous mode [ 563.525374][T13628] syzkaller0: entered allmulticast mode [ 563.548991][ T5945] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 563.607030][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.631601][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1786'. [ 563.642065][ T5945] usb 1-1: config 0 descriptor?? [ 563.876090][ T5945] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 563.933655][ T5931] usb 5-1: USB disconnect, device number 122 [ 563.942966][ T5931] option 5-1:7.0: device disconnected [ 564.160018][ T5945] [drm:udl_init] *ERROR* Selecting channel failed [ 564.190219][ T5945] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 564.236994][ T5945] [drm] Initialized udl on minor 2 [ 564.323585][ T5945] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 564.388169][ T5945] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 564.429384][ T5914] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 564.469121][ T5945] usb 1-1: USB disconnect, device number 90 [ 564.485774][ T5914] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 564.610792][T13632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.962423][T13647] xt_l2tp: invalid flags combination: 8 [ 564.992693][T13647] xt_l2tp: invalid flags combination: 8 [ 565.349067][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 565.366587][T13660] netlink: 'syz.0.1797': attribute type 2 has an invalid length. [ 565.374356][T13660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1797'. [ 567.658726][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 567.816575][T13652] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 567.828559][T13652] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 567.836966][T13652] CPU: 1 UID: 0 PID: 13652 Comm: syz.4.1794 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 567.849103][T13652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.859758][T13652] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 567.865136][T13652] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 bd 4a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 da 4e 3e f8 85 [ 567.884831][T13652] RSP: 0018:ffffc90003fef070 EFLAGS: 00010206 [ 567.890902][T13652] RAX: ffffffff898213d3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 567.898870][T13652] RDX: ffffc90011d29000 RSI: 000000000000034e RDI: 000000000000034f [ 567.906840][T13652] RBP: dffffc0000000000 R08: ffff888024adda00 R09: 0000000000000002 [ 567.914800][T13652] R10: 00000000ffffffff R11: ffffffff898213b0 R12: dffffc0000000000 [ 567.922935][T13652] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888049b64000 [ 567.930905][T13652] FS: 00007f4795f946c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 567.939826][T13652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.946402][T13652] CR2: 000020000021c030 CR3: 0000000062ec2000 CR4: 00000000003526f0 [ 567.954462][T13652] Call Trace: [ 567.957775][T13652] [ 567.960699][T13652] qdisc_tree_reduce_backlog+0x299/0x480 [ 567.966328][T13652] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 567.972142][T13652] fq_codel_change+0xa96/0xef0 [ 567.976906][T13652] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 567.982452][T13652] ? __pfx_fq_codel_change+0x10/0x10 [ 567.987730][T13652] ? __sock_sendmsg+0x219/0x270 [ 567.992576][T13652] fq_codel_init+0x355/0x960 [ 567.997163][T13652] ? lockdep_rtnl_is_held+0x26/0x40 [ 568.002357][T13652] ? __pfx_fq_codel_init+0x10/0x10 [ 568.007548][T13652] qdisc_create+0x7a9/0xea0 [ 568.012046][T13652] tc_modify_qdisc+0x1426/0x2010 [ 568.016986][T13652] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 568.022287][T13652] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 568.027564][T13652] rtnetlink_rcv_msg+0x77c/0xb70 [ 568.032494][T13652] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 568.037595][T13652] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.043044][T13652] ? ref_tracker_free+0x63a/0x7d0 [ 568.048166][T13652] ? __copy_skb_header+0xa7/0x550 [ 568.053218][T13652] ? __pfx_ref_tracker_free+0x10/0x10 [ 568.058674][T13652] netlink_rcv_skb+0x205/0x470 [ 568.063431][T13652] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.068886][T13652] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.074367][T13652] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.079560][T13652] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.084750][T13652] netlink_unicast+0x758/0x8d0 [ 568.089509][T13652] netlink_sendmsg+0x805/0xb30 [ 568.094269][T13652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.099554][T13652] ? aa_sock_msg_perm+0x94/0x160 [ 568.104493][T13652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 568.109770][T13652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.115052][T13652] __sock_sendmsg+0x219/0x270 [ 568.119721][T13652] ____sys_sendmsg+0x505/0x830 [ 568.124499][T13652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.129797][T13652] ? import_iovec+0x74/0xa0 [ 568.137454][T13652] ___sys_sendmsg+0x21f/0x2a0 [ 568.142229][T13652] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.147446][T13652] ? __fget_files+0x2a/0x420 [ 568.152037][T13652] ? __fget_files+0x3a0/0x420 [ 568.156724][T13652] __x64_sys_sendmsg+0x19b/0x260 [ 568.161671][T13652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.167139][T13652] ? do_user_addr_fault+0xc8a/0x1390 [ 568.172417][T13652] ? do_syscall_64+0xbe/0x3b0 [ 568.177088][T13652] do_syscall_64+0xfa/0x3b0 [ 568.181600][T13652] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.186800][T13652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.192861][T13652] ? clear_bhb_loop+0x60/0xb0 [ 568.197545][T13652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.203515][T13652] RIP: 0033:0x7f479818e929 [ 568.207930][T13652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.227531][T13652] RSP: 002b:00007f4795f94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.236201][T13652] RAX: ffffffffffffffda RBX: 00007f47983b6160 RCX: 00007f479818e929 [ 568.244165][T13652] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004 [ 568.252134][T13652] RBP: 00007f4798210b39 R08: 0000000000000000 R09: 0000000000000000 [ 568.260107][T13652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.268070][T13652] R13: 0000000000000001 R14: 00007f47983b6160 R15: 00007f47984dfa28 [ 568.276036][T13652] [ 568.279072][T13652] Modules linked in: [ 568.283135][T13652] ---[ end trace 0000000000000000 ]--- [ 568.288655][T13652] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 568.294045][T13652] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 bd 4a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 da 4e 3e f8 85 [ 568.313740][T13652] RSP: 0018:ffffc90003fef070 EFLAGS: 00010206 [ 568.319876][T13652] RAX: ffffffff898213d3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 568.327904][T13652] RDX: ffffc90011d29000 RSI: 000000000000034e RDI: 000000000000034f [ 568.335991][T13652] RBP: dffffc0000000000 R08: ffff888024adda00 R09: 0000000000000002 [ 568.344155][T13652] R10: 00000000ffffffff R11: ffffffff898213b0 R12: dffffc0000000000 [ 568.352203][T13652] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888049b64000 [ 568.360323][T13652] FS: 00007f4795f946c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 568.369290][T13652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.375867][T13652] CR2: 000020000021c030 CR3: 0000000062ec2000 CR4: 00000000003526f0 [ 568.383951][T13652] Kernel panic - not syncing: Fatal exception in interrupt [ 568.391505][T13652] Kernel Offset: disabled [ 568.395833][T13652] Rebooting in 86400 seconds..