last executing test programs: 12m19.115229478s ago: executing program 0 (id=27): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000"]) r4 = syz_open_dev$sndctrl(&(0x7f0000000800), 0x1, 0x500) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000000)=ANY=[]) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x20000400) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000100), 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002181, &(0x7f0000000700)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007b40)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/118, 0x76}, {&(0x7f0000000400)=""/185, 0xb9}], 0x2, &(0x7f0000000500)=""/22, 0x16}, 0x5}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f0000000840)=""/132, 0x84}, {&(0x7f0000000900)=""/154, 0x9a}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000019c0)=""/129, 0x81}], 0x6, &(0x7f00000006c0)=""/29, 0x1d}, 0x2}, {{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000004e80)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/245, 0xf5}, {&(0x7f0000004c80)=""/126, 0x7e}, {&(0x7f0000000740)=""/20, 0x14}, {&(0x7f00000007c0)=""/29, 0x1d}, {&(0x7f0000004d00)=""/139, 0x8b}], 0x8, &(0x7f0000004f40)=""/191, 0xbf}, 0xfffffba0}, {{&(0x7f00000054c0)=@nl, 0x80, &(0x7f0000005600)=[{&(0x7f0000005540)=""/41, 0x29}, {&(0x7f0000005740)=""/106, 0x6a}], 0x2, &(0x7f0000005640)=""/65, 0x41}, 0x1}, {{&(0x7f00000056c0)=@qipcrtr, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005fc0)=""/170, 0xaa}, {0x0}, {&(0x7f0000005940)=""/63, 0x3f}, {&(0x7f0000005980)=""/58, 0x3a}, {&(0x7f00000059c0)=""/237, 0xed}, {&(0x7f0000005ac0)=""/34, 0x22}, {&(0x7f0000005b00)=""/76, 0x4c}, {&(0x7f0000005b80)=""/10, 0xa}, {&(0x7f0000005580)=""/43, 0x2b}], 0x9, &(0x7f0000005100)=""/253, 0xfd}, 0xb9f}, {{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000005380)=""/41, 0x29}], 0x1, &(0x7f0000005f00)=""/173, 0xad}, 0xa}, {{&(0x7f0000006200)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000005200), 0x0, &(0x7f0000006480)=""/191, 0xbf}, 0x1}, {{&(0x7f0000006540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000007a80)=[{&(0x7f00000065c0)=""/87, 0x57}, {&(0x7f0000005000)=""/243, 0xf3}, {&(0x7f00000067c0)=""/4096, 0x1000}, {0xfffffffffffffffd}, {&(0x7f00000077c0)=""/242, 0xf2}, {&(0x7f00000078c0)}, {&(0x7f0000007900)=""/230, 0xe6}, {&(0x7f0000007a00)=""/70, 0x46}], 0x8}}], 0x8, 0x2, &(0x7f00000061c0)={0x77359400}) socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x124, 0x7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x17}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 12m17.011433565s ago: executing program 0 (id=33): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80801) ioctl$EVIOCSKEYCODE_V2(r7, 0x5450, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r8, 0xe7d4c009da6c1985}, {r8, 0x201}], 0x2, 0x4) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r9, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) 12m15.181814041s ago: executing program 0 (id=36): prctl$PR_SET_NAME(0x4, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000080)='4\x00', 0x2) kcmp(r0, r0, 0x0, r1, r1) 12m14.89662495s ago: executing program 0 (id=37): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) sendto$inet(r1, &(0x7f0000000080)="29d19c91d7b85761e6801316612eb2da3c253567904329df5f729b4e31f91fd1ccf65146c7dca7fffe7f1e8b463e67f1ff382438a02a8709f4", 0x39, 0x4000041, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x24}}, 0x8) 12m14.657264293s ago: executing program 0 (id=39): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) r5 = io_uring_setup(0x6576, &(0x7f0000000680)={0x0, 0x41f43, 0x1, 0x2, 0x3bd}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000040)) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x15f1, 0xff98, 0x69, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) dup(r8) 12m14.360186313s ago: executing program 0 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800030002000000080008"], 0x58}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) io_setup(0x8, &(0x7f0000000000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 12m13.249311075s ago: executing program 32 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800030002000000080008"], 0x58}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) io_setup(0x8, &(0x7f0000000000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 6m40.269074725s ago: executing program 3 (id=1218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f0000000100)={0xd4, 0x0, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ad1c0000002200010846"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) io_uring_enter(r8, 0x80002219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m39.083380169s ago: executing program 3 (id=1224): socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) (async) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m38.344500353s ago: executing program 3 (id=1229): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) dup(r0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x63}) syz_usb_control_io$hid(r2, 0x0, 0x0) 6m36.910366892s ago: executing program 3 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r3, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x2c020400) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) 6m36.632162944s ago: executing program 3 (id=1239): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = memfd_secret(0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x7, r1, 0x0, 0x1, 0x0, 0x4, 0x39f8de, 0x1bf22c}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x15c, &(0x7f00000008c0)={[{0xcf, 0x4e00, "6f0b7fbe71229c4a4eeeec19d80a407244d2db520a79c85d26f815857501e8ab156e0c3ee061ecc9ef53d9229d6bd2c6abc9db46400618075a5eea56ffb5eee3fd61e2558d9e38e0f67cb66c0f54614b58b20d77518d614fcc11a6f94b8beec8c3d28a664c2f92a46fa1a440da4c67672c48898a9fd341311df4ab162e941e8f0ad245b1e7590876f5cdbb44440c26e5cc0e0c84ed4c541c270b13d91b71cf94a5f8bfef17e3858d98bc8a954db84d96ff215e5c527fd4014a71d0e3e7591c179f7e0c2efc015bb3ce1e1dd6be1a51"}, {0x64, 0x4e00, "1219f24188720a8242f7717ee6c83bc1f213e1962c42a6785687968ea131e4040cb0c5888fc0605da27764286d4cf4056c9a8bca14b8a0923ee750f778c9b56f9f59b5ca75bb9a23339988c907ffacc405f3abb8dc137b2b5f647e9f8129df2ba592509d"}, {0x1b, 0x4e00, "3128d5643bf51b1add298b7aa946b0c209145cc282eb0dc2e6b172"}]}) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000c40)={0x2c, &(0x7f0000000740)={0x20, 0x7, 0x62, {0x62, 0x24, "a00c40eeb10fe57711149a02bb8e0f7e59cb78494ca12e4285b32af2bbce5e832c5534219e09849e5ef0c79433571d8bf1201082278cacb34c823ab80d1d9194146a3f7aa6f955e9327d07721f685db97275e90d3cc17e6913d85264dc2c1227"}}, &(0x7f0000000a40)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "08c4ccf2704e13b664d296aef4e120f436ce2c3634cc1f475001d566b0e01e2a0ef5b24d21c9d77940f03f6875e497c1db8a7e67a07b498f9838357de048a0df434d9a16f5f5890527cf4e77e412a737a0303b7379cfb1a4bab145f6dc32f13131adc9cb49120fe9dc95957911a6692d80a6f085ed23e74a0191ec3a197ead751737e503513aeb7b38ce945688547aac96321152e58ef4b7fc15b9d2c54743d123421263a70f51b93d05f5ebec64f3fb28"}}, &(0x7f0000000b00)={0x0, 0xf, 0xd0, {0x5, 0xf, 0xd0, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "6c218e4bd4b3ed5ed52a22cb97fca9aa"}, @generic={0xb7, 0x10, 0x4, "e08f0dbb3f4986b2aa802ae2c7d97405bcc377077352629ebbf9374d862be6a13d4fa41285f884cf89061be2cd2bd961eea0700fee717aca7460af49d9c35a44a1f4bbc0e3994b2bb2c693602d2333cf87e903eb3d1d0f1c275215f3381d507d2558a30ccfebbfd608a437d6aba372b7c10d19d2d02626da6761e55550a4cbdc5a775298006a503d9b6cea7e42c26b44f4130c0d99f4b1290eab4cd14be6fb2285656d46a871a59d9526d6ac5cd8398304011982"}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x0, 0xe, "b1dff556", "5bf9ebb7"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0x0, 0x9, 0xff, 0x2, 0x9}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x60, 0x21, 0x77, "d1432e68fb8c6ff9973b043a1e90c648fe15dc02aafce7e85d6ca3f8b6d85160a19476dd9b02506783fc6e5f1419932bdd4cf4a620a9814e525d62b9346988ee1701253c4bc348baecd9d67f52c2a21008ceb2238766cdbcec8d0683fa2dcbc2752da5314bf1b27398290c858f1371f5ffe34df08a8fdc"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000dc0)={0x20, 0x0, 0x8, {0x10, 0x40, [0xf]}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x297d}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "cc2d"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0xc7}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000f40)={0x40, 0x17, 0x6}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "0d9d"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001080)={0x40, 0x21, 0x1}}) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0xe, 0x64, {0x64, 0x0, "78fe0fecaccc31772cbc5bf12bc7f9566ccd9669e21d8925fee99118e9e13f32ccba47af0b9e21ac00cb7c2cfbb038d2ec7587d634ba1b718f119c520d29e5bf956ff7b3eeb93254cd7a06a5edef11ead475e768c81f86d60139723c74d07db45e27"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f0000000100)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x0, 0xd, 0x3, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x7, 0xfe, "0d0cf7ce", "00000100"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x77, 0x1, 0x4, 0x9d0, 0x1}}}, &(0x7f0000000680)={0x84, &(0x7f0000001180)=ANY=[@ANYBLOB="0014330000002159cdb3b5c25fc4e22e79dfbfcb8cdc29e6455b001909e401d8f224c845e69483fca43d59a9b5a7a86f536ed0a4652312d3ee91afe15d58804261805a0080c7e3594771cc54d6f4a7161169a0c7b56c1bdf39a3262c77fab66b13b1e6fd002e43cf411dda4d67e12de27f86040bc8ee0fefe311bede7c5a9783f9167a2fe3ff294e"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000340)=ANY=[@ANYRES8=r2], &(0x7f0000000380)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x78}, &(0x7f0000000440)={0x40, 0xb, 0x2, 'Z2'}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @random="111a856f3817"}, &(0x7f0000000540)={0x40, 0x19, 0x2, "fd83"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x3}}) 6m35.151666367s ago: executing program 3 (id=1250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getgroups(0x0, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r2, 0x0, 0x0, 0x162, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9", 0x3e4}], 0x2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 6m34.528510477s ago: executing program 33 (id=1250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getgroups(0x0, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r2, 0x0, 0x0, 0x162, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3e4}], 0x2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 9.308320164s ago: executing program 5 (id=2718): r0 = syz_io_uring_setup(0x237, &(0x7f0000000780)={0x0, 0x8900, 0x0, 0x2, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r6 = msgget$private(0x0, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmfde=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000004c0)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x2002004}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="c800000000000000ffffffffffffffff050000000000000000000000000000000700000000000000ffffffffffffffff000000000400000005000000000000000100010000000000060000000000000006000000000000000000000000000000040000000000000000001000000000000000000000a0000009000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="f20b0000040000000000000000ae3195be93d04fbe900000000000000000000100000000001c000000ff0100002e9e5edfcb975e495cff4e01581c8027e225e2a34fad19"], 0x0, 0x0, 0x0}) r10 = fcntl$getown(0xffffffffffffffff, 0x9) r11 = fcntl$getown(r0, 0x9) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000300)={{0x1, r9, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c9, 0x1000}, 0x0, 0x0, 0xc93, 0x6df, 0x8, 0x8, 0x8, 0x1, 0xfffe, 0x3, r10, r11}) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x40200, 0x0) syz_io_uring_setup(0x7688, &(0x7f0000000540)={0x0, 0xb601, 0x7140, 0x5, 0x258, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r12, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) r15 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r15, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r15, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xfffffffffffffdd0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) 8.13374609s ago: executing program 5 (id=2720): move_pages(0x0, 0x0, 0x0, &(0x7f0000002640), &(0x7f0000000000), 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x40000c4) keyctl$set_reqkey_keyring(0xe, 0x1) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 8.079017387s ago: executing program 5 (id=2721): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005800000000002f9078ac1414bbe0000001248086dd0000000010000800000086dd080088be00000000100000000100000000000000080022eb00000000000000000100000000000000000000000800655800000000"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x100, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) syz_emit_ethernet(0x46, &(0x7f0000005a40)=ANY=[@ANYRES16], 0x0) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000059c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005740)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, &(0x7f0000001480)=""/149, 0x95}, 0xc756}, {{&(0x7f0000001540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000001840)=[{&(0x7f00000015c0)=""/171, 0xab}, {&(0x7f0000001680)=""/26, 0x1a}, {&(0x7f00000016c0)=""/188, 0xbc}, {&(0x7f0000001780)=""/141, 0x8d}], 0x4}}, {{&(0x7f0000001880)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001900)}, {&(0x7f0000001940)=""/187, 0xbb}, {&(0x7f0000001a00)=""/40, 0x28}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001a80)=""/217, 0xd9}, {&(0x7f0000001b80)=""/232, 0xe8}, {&(0x7f0000001c80)=""/138, 0x8a}], 0x7, &(0x7f0000001dc0)=""/118, 0x76}, 0x200}, {{&(0x7f0000001e40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001ec0)=""/228, 0xe4}, {&(0x7f0000001fc0)=""/249, 0xf9}, {&(0x7f00000020c0)=""/50, 0x32}], 0x3}, 0x7}, {{&(0x7f0000002140)=@caif=@dgm, 0x80, &(0x7f0000003740)=[{&(0x7f00000021c0)=""/68, 0x44}, {&(0x7f0000002240)=""/139, 0x8b}, {&(0x7f0000002300)=""/221, 0xdd}, {&(0x7f0000002400)=""/122, 0x7a}, {&(0x7f0000002480)=""/124, 0x7c}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/198, 0xc6}, {&(0x7f0000002640)=""/245, 0xf5}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x9, &(0x7f0000003800)=""/4096, 0x1000}, 0xffffff7f}, {{&(0x7f0000004800)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004880)=""/191, 0xbf}], 0x1, &(0x7f0000004980)=""/55, 0x37}, 0x2}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f00000049c0)=""/99, 0x63}], 0x1, &(0x7f0000004a80)=""/224, 0xe0}, 0x9}, {{&(0x7f0000004b80)=@generic, 0x80, &(0x7f0000005280)=[{&(0x7f0000004c00)=""/250, 0xfa}, {&(0x7f0000004d00)=""/224, 0xe0}, {&(0x7f0000004e00)=""/145, 0x91}, {&(0x7f0000004ec0)=""/221, 0xdd}, {&(0x7f0000004fc0)=""/232, 0xe8}, {&(0x7f00000050c0)=""/235, 0xeb}, {&(0x7f00000051c0)=""/82, 0x52}, {&(0x7f0000005240)=""/53, 0x35}], 0x8, &(0x7f0000005300)=""/60, 0x3c}, 0x3}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/72, 0x48}], 0x1, &(0x7f0000005400)=""/58, 0x3a}, 0x3}, {{&(0x7f0000005440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000054c0)=""/177, 0xb1}, {&(0x7f0000005580)}, {&(0x7f00000055c0)=""/57, 0x39}, {&(0x7f0000005600)=""/62, 0x3e}], 0x4, &(0x7f0000005680)=""/161, 0xa1}, 0x7}], 0xa, 0x0, &(0x7f0000005a00)={r5, r6+10000000}) openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0xfffffffffffffe7d}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x404c081}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.835912562s ago: executing program 6 (id=2723): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800030002000000080008"], 0x58}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) io_setup(0x8, &(0x7f0000000000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 7.642251665s ago: executing program 1 (id=2725): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = userfaultfd(0x80801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500000000000000000000000000000000000000fbb3363ca265edf25999ac53d3c4397804b88a6f09271af7a890d766f2c191350eb0e3"], 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0xe, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x4a}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @alu={0x3, 0x0, 0xc, 0x0, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x6, 0x4, 0xa, 0x1, 0xfffffffffffffffc}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0xa, 0x6, 0x6, 0x10, 0x10}], &(0x7f0000000080)='syzkaller\x00', 0x21, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xd, 0x3, 0xc}, 0x10, 0x13662, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000340)=[{0x3, 0x1, 0xc, 0x1}, {0x4, 0x5, 0x7, 0x2}, {0x5, 0x1, 0x2, 0xc}, {0x1, 0x2, 0x0, 0x9efe64d3928f04db}, {0x2, 0x4, 0xf, 0xa}, {0x4, 0x5, 0x5, 0xb}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000000), &(0x7f0000000540)=r4}, 0x20) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x3f00, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 6.183988342s ago: executing program 2 (id=2728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c00014000000000000002000c0002"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1a, 0x2, 0x0, 0x4d, 0x8010, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) 5.856558147s ago: executing program 2 (id=2729): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003e007d3629bd7000fedbdf2f4284b100"], 0x14}}, 0x240400c0) 5.541402314s ago: executing program 6 (id=2732): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbee9, 0x8031, r2, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x38e4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x5, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r0, 0x5452, &(0x7f0000002480)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) close(0x3) 5.300535391s ago: executing program 6 (id=2733): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socket$xdp(0x2c, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 5.234551123s ago: executing program 6 (id=2734): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000440)={0x0, 0x1328000, 0x800}, 0x20) syz_clone(0x0, 0x0, 0x24, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) read$hidraw(r2, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000140)='g') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 4.636531658s ago: executing program 1 (id=2736): r0 = socket$netlink(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 4.370752409s ago: executing program 1 (id=2738): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0xfffffffffffffff7, 0x4, 0x5, 0x51c0000000000000, 0x7fff]}, &(0x7f0000000280)=0x78) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x808, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x800312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x1, 0x5, 0x8, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x80000003, 0x9, 0x3e7, 0x9, 0xede0, 0x2, 0x2, 0xf38, 0x80000008, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x5, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x40ffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x5, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x81f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r6 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r7, &(0x7f0000000300)={0x7, 0x47, 0x2}, 0x7) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0}) 4.335695913s ago: executing program 6 (id=2739): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4008044) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000600000000000000000000000000000005000000000000000200000000000000000000000000000000000000000000000100010000000000000800000000000000000000000000000002000000000000000001000000000084010500ac1414aa000000000000000000000000000004d3330000000000000064010100000000000000000000000000000000000000f200000000000000000040000000fe8000000000000000000000000000bb000020003c00"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000004c0)={@private2, r4}, 0x14) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000200)={0x3, 0xfffffffa, 0x9, 0x1, 0x2, 0x10000}) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2641) ioctl$LOOP_SET_FD(r10, 0x4c00, r9) dup2(r9, r0) 4.191408589s ago: executing program 5 (id=2741): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) timer_create(0x2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.174885657s ago: executing program 2 (id=2742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) fcntl$notify(r1, 0x402, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x5a1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000003c0)=0x9c) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x10001}, &(0x7f0000000140)=0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = signalfd(r6, &(0x7f00000001c0), 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r10, 0x901, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}}, 0x4008005) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 3.727276632s ago: executing program 4 (id=2744): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socket$xdp(0x2c, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 3.535173737s ago: executing program 4 (id=2745): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x2280}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00"/28, @ANYRES8=r1], 0x30}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000100)=0x18) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8180, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000140)={0xa, {0x5, 0x9, 0x6}}, 0xa) close_range(0xffffffffffffffff, r0, 0x0) ioctl$KVM_CAP_XEN_HVM(r4, 0x4068aea3, &(0x7f0000000200)={0x26, 0x0, 0x44}) 3.404722438s ago: executing program 4 (id=2746): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.404022386s ago: executing program 2 (id=2747): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = userfaultfd(0x80801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500000000000000000000000000000000000000fbb3363ca265edf25999ac53d3c4397804b88a6f09271af7a890d766f2c191350eb0e3"], 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0xe, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x4a}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @alu={0x3, 0x0, 0xc, 0x0, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x6, 0x4, 0xa, 0x1, 0xfffffffffffffffc}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0xa, 0x6, 0x6, 0x10, 0x10}], &(0x7f0000000080)='syzkaller\x00', 0x21, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xd, 0x3, 0xc}, 0x10, 0x13662, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000340)=[{0x3, 0x1, 0xc, 0x1}, {0x4, 0x5, 0x7, 0x2}, {0x5, 0x1, 0x2, 0xc}, {0x1, 0x2, 0x0, 0x9efe64d3928f04db}, {0x2, 0x4, 0xf, 0xa}, {0x4, 0x5, 0x5, 0xb}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000000), &(0x7f0000000540)=r4}, 0x20) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xa1ff, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 3.259866544s ago: executing program 4 (id=2748): fsopen(&(0x7f0000000540)='vxfs\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000540)='vxfs\x00', 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/117, 0x75}, {0x0}], 0x2) (async) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/117, 0x75}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x42, 0x0, 0x2}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) close(r7) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000000)=0x6ab7, 0x4) (async) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000000)=0x6ab7, 0x4) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYRES16=r3, @ANYRESHEX=r9], 0x5c}}, 0x40000) 2.905754474s ago: executing program 4 (id=2749): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000001c0)={0x4, {0x6, 0x10001, 0x1, 0x2}, {0x7, 0xcf, 0x5, 0xfe}, {0xcc}}) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000005c0)=""/4122, 0x101a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x40002717, 0x0, &(0x7f0000000000)=0xfffffffffffffeeb) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) futex(0xfffffffffffffffe, 0x4, 0x81, 0x0, 0x0, 0x1) fspick(0xffffffffffffffff, 0x0, 0x17ef38cc6d5bba7c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) stat(0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000001"], 0xa) 2.572476737s ago: executing program 4 (id=2750): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 2.33037289s ago: executing program 5 (id=2751): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200c0ff00004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800030002000000080008"], 0x58}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) io_setup(0x8, &(0x7f0000000000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 1.075028496s ago: executing program 6 (id=2752): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005800000000002f9078ac1414bbe0000001248086dd0000000010000800000086dd080088be00000000100000000100000000000000080022eb00000000000000000100000000000000000000000800655800000000"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x100, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) syz_emit_ethernet(0x46, &(0x7f0000005a40)=ANY=[@ANYRES16], 0x0) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000059c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005740)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, &(0x7f0000001480)=""/149, 0x95}, 0xc756}, {{&(0x7f0000001540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000001840)=[{&(0x7f00000015c0)=""/171, 0xab}, {&(0x7f0000001680)=""/26, 0x1a}, {&(0x7f00000016c0)=""/188, 0xbc}, {&(0x7f0000001780)=""/141, 0x8d}], 0x4}}, {{&(0x7f0000001880)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001900)}, {&(0x7f0000001940)=""/187, 0xbb}, {&(0x7f0000001a00)=""/40, 0x28}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001a80)=""/217, 0xd9}, {&(0x7f0000001b80)=""/232, 0xe8}, {&(0x7f0000001c80)=""/138, 0x8a}], 0x7, &(0x7f0000001dc0)=""/118, 0x76}, 0x200}, {{&(0x7f0000001e40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001ec0)=""/228, 0xe4}, {&(0x7f0000001fc0)=""/249, 0xf9}, {&(0x7f00000020c0)=""/50, 0x32}], 0x3}, 0x7}, {{&(0x7f0000002140)=@caif=@dgm, 0x80, &(0x7f0000003740)=[{&(0x7f00000021c0)=""/68, 0x44}, {&(0x7f0000002240)=""/139, 0x8b}, {&(0x7f0000002300)=""/221, 0xdd}, {&(0x7f0000002400)=""/122, 0x7a}, {&(0x7f0000002480)=""/124, 0x7c}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/198, 0xc6}, {&(0x7f0000002640)=""/245, 0xf5}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x9, &(0x7f0000003800)=""/4096, 0x1000}, 0xffffff7f}, {{&(0x7f0000004800)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004880)=""/191, 0xbf}], 0x1, &(0x7f0000004980)=""/55, 0x37}, 0x2}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f00000049c0)=""/99, 0x63}], 0x1, &(0x7f0000004a80)=""/224, 0xe0}, 0x9}, {{&(0x7f0000004b80)=@generic, 0x80, &(0x7f0000005280)=[{&(0x7f0000004c00)=""/250, 0xfa}, {&(0x7f0000004d00)=""/224, 0xe0}, {&(0x7f0000004e00)=""/145, 0x91}, {&(0x7f0000004ec0)=""/221, 0xdd}, {&(0x7f0000004fc0)=""/232, 0xe8}, {&(0x7f00000050c0)=""/235, 0xeb}, {&(0x7f00000051c0)=""/82, 0x52}, {&(0x7f0000005240)=""/53, 0x35}], 0x8, &(0x7f0000005300)=""/60, 0x3c}, 0x3}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/72, 0x48}], 0x1, &(0x7f0000005400)=""/58, 0x3a}, 0x3}, {{&(0x7f0000005440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000054c0)=""/177, 0xb1}, {&(0x7f0000005580)}, {&(0x7f00000055c0)=""/57, 0x39}, {&(0x7f0000005600)=""/62, 0x3e}], 0x4, &(0x7f0000005680)=""/161, 0xa1}, 0x7}], 0xa, 0x0, &(0x7f0000005a00)={r5, r6+10000000}) openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0xfffffffffffffe7d}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x404c081}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 607.637362ms ago: executing program 5 (id=2753): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00009ab000/0x2000)=nil, 0x2000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0xc81c1, 0x0) listen(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x7) io_setup(0x5, &(0x7f0000000140)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) ppoll(&(0x7f0000000040)=[{r1, 0x6712}, {r7, 0xec5f}], 0x2, 0x0, 0x0, 0x0) shutdown(r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 604.357791ms ago: executing program 1 (id=2754): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 260.542658ms ago: executing program 1 (id=2755): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socket$xdp(0x2c, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) close_range(r3, 0xffffffffffffffff, 0x0) 259.722256ms ago: executing program 2 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r4, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r3, 0x0, 0x0, 0xa00000000000000}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f00000006c0)="5810235a8c132d765b", 0x9, 0x1}]) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x7}) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000500)={0xa, @pix_mp={0x9, 0x4, 0x41225f5f, 0x3, 0x5, [{0xa}, {0xffffffff, 0x5}, {0x6}, {0x7fffffff, 0x3}, {0x9, 0x9}, {0x8, 0x2}, {0x7, 0x8}, {0x7}], 0x7, 0x6, 0x2, 0x3, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x158) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 84.150647ms ago: executing program 1 (id=2757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x104}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, r1, 0x0) 0s ago: executing program 2 (id=2758): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) close(r4) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd(0x80000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) kernel console output (not intermixed with test programs): attempt power cycle [ 651.727758][T15807] loop6: detected capacity change from 0 to 7 [ 651.741348][T15807] Dev loop6: unable to read RDB block 7 [ 651.783370][T15807] loop6: unable to read partition table [ 651.789352][T15807] loop6: partition table beyond EOD, truncated [ 651.795759][T15807] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 651.913193][ T5949] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 651.997455][ T5949] usb 7-1: device descriptor read/8, error -71 [ 652.283146][ T5949] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 652.309062][ T5949] usb 7-1: device descriptor read/8, error -71 [ 652.423432][ T5949] usb usb7-port1: unable to enumerate USB device [ 652.821144][ T43] usb 3-1: USB disconnect, device number 4 [ 653.203125][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 653.365536][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 653.376240][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'. [ 653.385375][T15825] netlink: 'syz.1.2149': attribute type 18 has an invalid length. [ 653.398677][ T43] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 653.409360][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.424000][ T43] usb 3-1: Product: syz [ 653.430039][ T43] usb 3-1: Manufacturer: syz [ 653.434720][ T43] usb 3-1: SerialNumber: syz [ 653.449010][ T43] usb 3-1: config 0 descriptor?? [ 653.613772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.622474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.630807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.662215][T15830] trusted_key: encrypted_key: key user:syz not found [ 653.798213][ T43] usb 3-1: USB disconnect, device number 5 [ 653.918526][T15835] netlink: 'syz.6.2152': attribute type 1 has an invalid length. [ 654.813770][ T5949] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 655.008998][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 655.019536][T15856] loop3: detected capacity change from 0 to 1 [ 655.027031][T15856] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 655.035827][T15856] loop3: p1 size 16 extends beyond EOD, truncated [ 655.046274][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.058950][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.203361][T15858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2158'. [ 655.216735][T15858] fuse: Unknown parameter '&d' [ 655.304791][T15856] loop3: p2 start 915031469 is beyond EOD, truncated [ 655.311809][T15856] loop3: p3 start 2932641740 is beyond EOD, truncated [ 655.319330][T15856] loop3: p4 start 3710920044 is beyond EOD, truncated [ 655.347125][T15856] loop3: p5 start 1815049829 is beyond EOD, truncated [ 655.362725][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 655.398208][ T5949] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 655.431552][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.465461][ T5949] usb 3-1: config 0 descriptor?? [ 656.142422][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 656.152966][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 656.168388][ T10] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 656.219350][ T10] hid-generic 0003:0004:0000.001F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 656.326279][ T5949] usbhid 3-1:0.0: can't add hid device: -71 [ 656.332238][ T5949] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 656.347040][ T5949] usb 3-1: USB disconnect, device number 6 [ 656.470899][T15863] fido_id[15863]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 656.555048][T15867] VFS: Mount too revealing [ 656.684751][ T30] audit: type=1326 audit(1758269932.472:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15865 comm="syz.4.2160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f3df8eba9 code=0x0 [ 657.638288][T15889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.723674][ T5949] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 657.917083][ T5949] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 657.932958][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.953450][ T5949] usb 7-1: Product: syz [ 657.961674][ T5949] usb 7-1: Manufacturer: syz [ 657.973097][ T5949] usb 7-1: SerialNumber: syz [ 657.987621][ T5949] usb 7-1: config 0 descriptor?? [ 658.311480][ T5949] usb 7-1: USB disconnect, device number 51 [ 658.421812][T15899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2170'. [ 658.487941][ T7259] udevd[7259]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.495444][T15897] fuse: Unknown parameter '&d' [ 658.733231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.741613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.749937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.941747][T15903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.051729][T15903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.321955][T15910] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 659.724323][ T5949] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 659.926394][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 659.936997][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.058101][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.429157][T15922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.459187][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.473511][T15922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.490224][ T5949] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 660.506497][T15922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.517199][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.526412][T15925] netlink: 'syz.2.2179': attribute type 16 has an invalid length. [ 660.531287][T15922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.568879][ T5949] usb 5-1: config 0 descriptor?? [ 660.583293][T15925] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2179'. [ 660.632039][T15926] input: syz1 as /devices/virtual/input/input54 [ 660.683798][T15926] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.060065][ T10] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 661.068585][ T10] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 661.079335][ T10] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 661.087133][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2180'. [ 661.102118][ T10] hid-generic 0003:0004:0000.0020: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 661.627765][ T5949] usbhid 5-1:0.0: can't add hid device: -71 [ 661.634111][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 661.719333][ T5949] usb 5-1: USB disconnect, device number 117 [ 661.832692][T15935] fido_id[15935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 662.103218][ T10] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 662.480156][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 662.517817][ T10] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 662.537246][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.652644][ T10] usb 7-1: Product: syz [ 662.664421][ T10] usb 7-1: Manufacturer: syz [ 662.669083][ T10] usb 7-1: SerialNumber: syz [ 662.696696][ T10] usb 7-1: config 0 descriptor?? [ 662.794821][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 663.118677][T15959] loop3: detected capacity change from 0 to 1 [ 663.153638][ T10] gspca_se401: ExtraFeatures: 79 [ 663.159075][T15959] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 663.173131][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 663.273791][T15959] loop3: p1 size 16 extends beyond EOD, truncated [ 663.312632][T15959] loop3: p2 start 915031469 is beyond EOD, truncated [ 663.319690][T15959] loop3: p3 start 2932641740 is beyond EOD, truncated [ 663.391625][T15944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.413709][T15944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.428826][T15959] loop3: p4 start 3710920044 is beyond EOD, truncated [ 663.451136][T15944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.512120][T15959] loop3: p5 start 1815049829 is beyond EOD, truncated [ 663.598790][T15944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.079101][T15973] fuse: Bad value for 'fd' [ 664.274785][ T10] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input55 [ 664.363186][ T5902] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 664.653170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.661406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.669641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.860753][T15977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.889871][T15977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.993126][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 665.013181][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 665.086778][ T5902] usb 3-1: config 0 has no interfaces? [ 665.173572][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 665.221247][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 665.267664][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 665.479912][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 665.557719][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 665.578434][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 665.596933][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 665.611810][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 665.666689][ T9] usb 5-1: Product: syz [ 665.689804][ T9] usb 5-1: Manufacturer: syz [ 665.729749][ T9] usb 5-1: SerialNumber: syz [ 665.747562][ T9] usb 5-1: config 0 descriptor?? [ 665.794854][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 665.892793][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 666.887734][ T5934] usb 7-1: USB disconnect, device number 52 [ 667.277819][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2197'. [ 667.783846][ T10] usb 5-1: USB disconnect, device number 118 [ 667.789906][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 667.798762][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 668.177928][ T979] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 668.196171][T16006] loop2: detected capacity change from 0 to 7 [ 668.263594][ T6014] Dev loop2: unable to read RDB block 7 [ 668.269519][ T6014] loop2: unable to read partition table [ 668.280947][ T6014] loop2: partition table beyond EOD, truncated [ 668.316796][T16006] Dev loop2: unable to read RDB block 7 [ 668.345429][T16006] loop2: unable to read partition table [ 668.513312][ T979] usb 7-1: Using ep0 maxpacket: 16 [ 668.523803][T16006] loop2: partition table beyond EOD, truncated [ 668.553170][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.580869][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.590774][T16006] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 668.611292][ T979] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 668.667050][ T5902] usb 3-1: string descriptor 0 read error: -71 [ 668.679284][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 668.700365][ T979] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 668.713263][ T10] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 668.761361][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.778009][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.829065][ T5902] usb 3-1: config 0 descriptor?? [ 668.846367][ T979] usb 7-1: config 0 descriptor?? [ 668.868524][T15235] tipc: Subscription rejected, illegal request [ 668.878722][ T10] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 668.910590][T16016] tipc: Cannot configure node identity twice [ 668.913663][ T10] usb 5-1: config 0 has no interface number 0 [ 668.917228][ T5902] usb 3-1: can't set config #0, error -71 [ 668.952761][ T10] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 668.974668][ T5902] usb 3-1: USB disconnect, device number 7 [ 669.078633][ T10] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 669.138900][ T10] usb 5-1: config 0 interface 113 has no altsetting 0 [ 669.199499][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 669.209545][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.218303][ T10] usb 5-1: Product: syz [ 669.222791][ T10] usb 5-1: Manufacturer: syz [ 669.228132][ T10] usb 5-1: SerialNumber: syz [ 669.240383][ T10] usb 5-1: config 0 descriptor?? [ 669.253879][ T10] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 669.395899][ T10] hid-generic 0003:0004:0000.0021: unknown main item tag 0x0 [ 669.407817][ T10] hid-generic 0003:0004:0000.0021: unknown main item tag 0x0 [ 669.416517][ T10] hid-generic 0003:0004:0000.0021: unknown main item tag 0x0 [ 669.439985][ T10] hid-generic 0003:0004:0000.0021: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 669.642015][T16021] fido_id[16021]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 669.819405][ T979] usbhid 7-1:0.0: can't add hid device: -71 [ 669.841153][ T979] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 669.867187][ T979] usb 7-1: USB disconnect, device number 53 [ 670.040257][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.052883][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.263213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.271596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.279945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.690683][T16037] loop3: detected capacity change from 0 to 1 [ 670.707181][T16037] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 670.713363][T16037] loop3: p1 size 16 extends beyond EOD, truncated [ 670.765003][T16037] loop3: p2 start 915031469 is beyond EOD, truncated [ 670.772081][T16037] loop3: p3 start 2932641740 is beyond EOD, truncated [ 670.779770][T16037] loop3: p4 start 3710920044 is beyond EOD, truncated [ 670.786762][T16037] loop3: p5 start 1815049829 is beyond EOD, truncated [ 671.615489][ T5902] usb 5-1: USB disconnect, device number 119 [ 671.983170][ T5934] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 672.330543][ T5902] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 672.364825][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 672.383408][ T5934] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 672.392470][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.410020][ T5934] usb 3-1: config 0 descriptor?? [ 672.493178][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 672.499633][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 672.529885][ T5902] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 672.541704][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.550481][ T5902] usb 5-1: Product: syz [ 672.556892][ T5902] usb 5-1: Manufacturer: syz [ 672.562380][ T5902] usb 5-1: SerialNumber: syz [ 672.578088][ T5902] usb 5-1: config 0 descriptor?? [ 672.592934][ T5902] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 672.835910][ T5934] playstation 0003:054C:0BA0.0022: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 672.924824][ T5902] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 672.953221][ T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 672.965091][ T5902] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 673.051007][ T5934] playstation 0003:054C:0BA0.0022: Failed to retrieve feature with reportID 18: -71 [ 673.079268][ T5934] playstation 0003:054C:0BA0.0022: Failed to retrieve DualShock4 pairing info: -71 [ 673.108709][ T5934] playstation 0003:054C:0BA0.0022: Failed to get MAC address from DualShock4 [ 673.122252][ T5934] playstation 0003:054C:0BA0.0022: Failed to create dualshock4. [ 673.157988][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 673.158475][ T5934] playstation 0003:054C:0BA0.0022: probe with driver playstation failed with error -71 [ 673.204772][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 673.221156][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 673.253209][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 673.276637][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 673.286668][ T5934] usb 3-1: USB disconnect, device number 8 [ 673.316395][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 673.336746][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 673.346871][ T9] usb 7-1: Product: syz [ 673.357733][ T9] usb 7-1: Manufacturer: syz [ 673.388793][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 673.395577][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 673.405727][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 673.411829][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 673.613152][ T5934] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 673.646133][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 673.646361][ T9] usb 7-1: USB disconnect, device number 54 [ 673.652999][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 673.664755][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 673.743214][ T5934] usb 3-1: device descriptor read/64, error -71 [ 673.859069][T16063] loop2: detected capacity change from 0 to 7 [ 673.868407][ T6014] Dev loop2: unable to read RDB block 7 [ 673.877759][ T6014] loop2: unable to read partition table [ 673.883914][ T6014] loop2: partition table beyond EOD, truncated [ 673.891047][T16063] Dev loop2: unable to read RDB block 7 [ 673.901169][T16063] loop2: unable to read partition table [ 673.909771][T16063] loop2: partition table beyond EOD, truncated [ 673.916812][T16063] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 673.998019][ T5934] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 674.049833][T16065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.082708][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.084450][T16065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.108776][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.138059][ T9] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 674.148213][ T9] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 674.162206][ T9] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 674.163209][ T5934] usb 3-1: device descriptor read/64, error -71 [ 674.192280][ T9] hid-generic 0003:0004:0000.0023: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 674.297373][ T5934] usb usb3-port1: attempt power cycle [ 674.361176][T16072] fido_id[16072]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 674.498743][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'. [ 674.510071][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'. [ 674.643265][ T5934] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 674.665443][ T5934] usb 3-1: device descriptor read/8, error -71 [ 674.903844][ T5934] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 674.924466][ T5934] usb 3-1: device descriptor read/8, error -71 [ 675.033523][ T5934] usb usb3-port1: unable to enumerate USB device [ 675.424103][T16084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2219'. [ 675.446456][ T5902] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 675.499077][ T5902] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 675.832798][T16094] gre2: entered promiscuous mode [ 676.013201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.021458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.029657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.784912][T16116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.809210][T16116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.913117][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 679.028159][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.041279][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.065757][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 679.073393][ T5902] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 679.080384][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.092532][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.106903][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 679.120892][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 679.135178][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.149158][ T9] usb 3-1: config 0 descriptor?? [ 679.223111][ T5902] usb 7-1: Using ep0 maxpacket: 8 [ 679.229800][ T5902] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 679.238172][ T5902] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 679.246278][ T5902] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 679.255494][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 679.267334][ T5902] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 679.276442][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.284625][ T5902] usb 7-1: Product: syz [ 679.288785][ T5902] usb 7-1: Manufacturer: syz [ 679.293575][ T5902] usb 7-1: SerialNumber: syz [ 679.301520][ T5902] usb 7-1: config 0 descriptor?? [ 679.308785][ T5902] hub 7-1:0.0: bad descriptor, ignoring hub [ 679.316212][ T5902] hub 7-1:0.0: probe with driver hub failed with error -5 [ 679.517078][T16128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.527797][T16128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.568592][ T5902] hid-generic 0003:0004:0000.0025: unknown main item tag 0x0 [ 679.579782][ T5902] hid-generic 0003:0004:0000.0025: unknown main item tag 0x0 [ 679.589129][ T5902] hid-generic 0003:0004:0000.0025: unknown main item tag 0x0 [ 679.621865][ T5902] hid-generic 0003:0004:0000.0025: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 679.643860][ T5949] usb 7-1: USB disconnect, device number 55 [ 679.652659][T16134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.683422][T16134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.736025][T16134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2233'. [ 679.778855][T16133] fido_id[16133]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 679.835426][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 679.849911][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 679.870708][ T9] usb 3-1: USB disconnect, device number 13 [ 680.403341][T16147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.423357][T16148] syzkaller1: entered promiscuous mode [ 680.436207][T16147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.466535][T16148] syzkaller1: entered allmulticast mode [ 680.519951][ T30] audit: type=1326 audit(1758269956.422:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16146 comm="syz.5.2237" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe50f98eba9 code=0x0 [ 681.060073][T16159] bond0: (slave syz_tun): Releasing backup interface [ 681.183663][T16160] netlink: 'syz.6.2239': attribute type 10 has an invalid length. [ 681.278416][T16159] batman_adv: batadv0: Interface deactivated: dummy0 [ 681.286056][T16159] batman_adv: batadv0: Removing interface: dummy0 [ 681.462040][T16159] bridge_slave_0: left allmulticast mode [ 681.477422][T16159] bridge_slave_0: left promiscuous mode [ 681.488753][ T30] audit: type=1326 audit(1758269957.372:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed4b8eba9 code=0x7ffc0000 [ 681.572034][T16159] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.583090][ T30] audit: type=1326 audit(1758269957.372:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed4b8eba9 code=0x7ffc0000 [ 681.773233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.781564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.789921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.261257][T16159] bridge_slave_1: left allmulticast mode [ 682.291133][T16159] bridge_slave_1: left promiscuous mode [ 682.300967][ T30] audit: type=1326 audit(1758269957.392:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ed4b8eba9 code=0x7ffc0000 [ 682.317434][T16159] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.382733][ T30] audit: type=1326 audit(1758269957.392:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed4b8eba9 code=0x7ffc0000 [ 682.484655][T16172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.504137][T16172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.529180][ T30] audit: type=1326 audit(1758269957.392:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7ed4b8eba9 code=0x7ffc0000 [ 682.590267][T16159] bond0: (slave bond_slave_0): Releasing backup interface [ 682.613816][ T30] audit: type=1326 audit(1758269957.392:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed4b8eba9 code=0x7ffc0000 [ 682.749641][T16159] bond0: (slave bond_slave_1): Releasing backup interface [ 682.807005][T16159] team0: Port device team_slave_0 removed [ 682.850232][ T30] audit: type=1326 audit(1758269957.392:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ed4b8eba9 code=0x7ffc0000 [ 682.909282][T16159] team0: Port device team_slave_1 removed [ 682.945407][T16159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.968086][ T30] audit: type=1326 audit(1758269957.392:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed4b8eba9 code=0x7ffc0000 [ 683.016621][T16159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.074011][ T30] audit: type=1326 audit(1758269957.392:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed4b8eba9 code=0x7ffc0000 [ 683.099237][T16159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.110846][T16159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.532075][T16160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.545175][T16160] team0: Port device bond0 added [ 683.783486][ T5918] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 683.937016][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 683.943893][ T5918] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 683.952130][ T5918] usb 3-1: config 0 has no interface number 0 [ 683.963744][ T5918] usb 3-1: config 0 interface 161 has no altsetting 0 [ 683.985750][ T5918] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 683.996737][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.012468][ T5918] usb 3-1: Product: syz [ 684.037690][ T5918] usb 3-1: Manufacturer: syz [ 684.042280][ T5918] usb 3-1: SerialNumber: syz [ 684.070487][ T5918] usb 3-1: config 0 descriptor?? [ 684.109599][ T5918] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 684.271122][ T5918] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 684.356316][ T5918] usb 3-1: USB disconnect, device number 14 [ 684.702741][T16193] tipc: Enabled bearer , priority 0 [ 684.711599][T16193] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 684.725078][T16193] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 684.757234][T16193] tipc: Resetting bearer [ 685.179204][T16207] loop3: detected capacity change from 0 to 1 [ 685.223298][T16207] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 685.230292][T16207] loop3: p1 size 16 extends beyond EOD, truncated [ 685.243252][ T5902] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 685.269355][T16207] loop3: p2 start 915031469 is beyond EOD, truncated [ 685.278007][T16207] loop3: p3 start 2932641740 is beyond EOD, truncated [ 685.287566][T16207] loop3: p4 start 3710920044 is beyond EOD, truncated [ 685.312132][T16207] loop3: p5 start 1815049829 is beyond EOD, truncated [ 685.404219][ T5902] usb 7-1: Using ep0 maxpacket: 32 [ 685.412483][T16209] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 685.420294][T16209] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 685.457551][ T5902] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.520099][ T5902] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 685.545167][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.569154][ T5902] usb 7-1: Product: syz [ 685.578661][ T5902] usb 7-1: Manufacturer: syz [ 685.583451][ T5902] usb 7-1: SerialNumber: syz [ 685.599158][ T5902] usb 7-1: config 0 descriptor?? [ 685.627507][ T5902] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 685.701448][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.709838][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.745334][ T9] tipc: Node number set to 2723784987 [ 685.835006][ T5902] gspca_sunplus: reg_r err -32 [ 686.893336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.901594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.909799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.990527][ T5902] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 687.113159][ T5934] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 687.120647][T16227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.140140][T16227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.293165][ T5934] usb 3-1: device descriptor read/64, error -71 [ 687.400123][T16229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.411377][T16229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.563364][ T5934] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 687.713771][ T5934] usb 3-1: device descriptor read/64, error -71 [ 687.833503][ T5934] usb usb3-port1: attempt power cycle [ 688.158581][ T43] usb 7-1: USB disconnect, device number 56 [ 688.193156][ T5934] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 688.237123][T16241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.263905][ T5934] usb 3-1: device descriptor read/8, error -71 [ 688.313636][T16241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.525427][ T5934] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 688.567562][ T5934] usb 3-1: device descriptor read/8, error -71 [ 688.607469][T16250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.625466][T16250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.703812][ T5934] usb usb3-port1: unable to enumerate USB device [ 689.252408][T16255] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 689.607721][ T43] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 689.763173][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 689.770510][ T43] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 689.779317][ T43] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 689.792806][ T43] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 689.804414][ T43] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 689.908450][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 689.929719][ T43] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 689.939442][ T43] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 689.955942][ T43] usb 7-1: Product: syz [ 689.965377][ T43] usb 7-1: Manufacturer: syz [ 689.977883][ T43] usb 7-1: SerialNumber: syz [ 690.004361][ T43] usb 7-1: config 0 descriptor?? [ 690.016407][ T43] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 690.041066][ T43] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 690.672136][T16280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.718667][T16280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.776923][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.867399][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.959748][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.059290][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.100959][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.120863][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.485405][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 691.645487][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 691.658035][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 691.668748][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 691.678782][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 691.690362][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 691.730359][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 691.740797][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 691.831666][ T9] usb 3-1: Product: syz [ 691.855387][ T9] usb 3-1: Manufacturer: syz [ 691.884297][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 691.909033][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 691.929107][ T9] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 691.936844][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 692.157608][ T9] usb 3-1: USB disconnect, device number 19 [ 692.302521][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 692.320732][ T43] usb 7-1: USB disconnect, device number 57 [ 692.380491][ T43] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 692.650966][T16297] block nbd0: Attempted send on invalid socket [ 692.658814][T16297] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 692.813201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.821415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.829604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.031890][T16305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2275'. [ 694.804411][T16325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.856969][T16325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.014385][T16330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.057563][T16330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.074118][T16330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.084599][T16330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.143123][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 696.309115][T16351] binder: 16350:16351 ioctl 400c620e 200000000280 returned -22 [ 696.319167][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 696.331131][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.349106][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.361268][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 696.385239][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 696.395248][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.451318][ T43] usb 3-1: config 0 descriptor?? [ 696.795961][T16356] pim6reg: entered allmulticast mode [ 696.883820][ T5902] hid-generic 0003:0004:0000.0026: unknown main item tag 0x0 [ 696.892793][ T5902] hid-generic 0003:0004:0000.0026: unknown main item tag 0x0 [ 697.043205][ T5902] hid-generic 0003:0004:0000.0026: unknown main item tag 0x0 [ 697.080983][ T5902] hid-generic 0003:0004:0000.0026: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 697.428591][T16363] fido_id[16363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 697.881032][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 697.893185][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 697.935619][ T43] usb 3-1: USB disconnect, device number 20 [ 698.423202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.431546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.589506][T16382] netlink: 'syz.4.2294': attribute type 29 has an invalid length. [ 699.913160][T16419] netlink: 'syz.4.2305': attribute type 1 has an invalid length. [ 700.185204][T16427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.270793][T16427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.328130][ T43] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 700.335721][ T43] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 700.362304][ T43] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 700.434837][ T43] hid-generic 0003:0004:0000.0027: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 700.693361][T16434] fido_id[16434]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 700.813145][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 700.975118][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.986234][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.996484][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.010791][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.026841][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.049172][ T43] usb 3-1: config 0 descriptor?? [ 701.243407][T16442] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 701.250889][T16442] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 701.566386][ T43] plantronics 0003:047F:FFFF.0028: ignoring exceeding usage max [ 701.596918][ T43] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 701.944450][ C0] plantronics 0003:047F:FFFF.0028: hid_field_extract() called with n (132) > 32! (kworker/u8:5) [ 702.105844][T16451] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2311'. [ 702.855117][T16455] ptrace attach of "./syz-executor exec"[16456] was attempted by "./syz-executor exec"[16455] [ 702.871366][T16455] netlink: 'syz.5.2312': attribute type 12 has an invalid length. [ 702.967161][T16458] gtp0: entered promiscuous mode [ 702.980053][T16458] gtp0: entered allmulticast mode [ 703.010531][T16458] bond0: option xmit_hash_policy: invalid value (255) [ 703.064154][ T5949] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 703.335381][T16455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.344233][T16455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.533327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.541571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.593496][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 703.723573][ T9] usb 7-1: device descriptor read/64, error -71 [ 703.973367][ T9] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 704.113287][ T9] usb 7-1: device descriptor read/64, error -71 [ 704.203437][ T5949] usb 3-1: device descriptor read/64, error -71 [ 704.223477][ T9] usb usb7-port1: attempt power cycle [ 704.443276][ T5949] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 704.573775][ T9] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 704.594444][ T5949] usb 3-1: device firmware changed [ 704.603278][ T5918] usb 3-1: USB disconnect, device number 21 [ 704.614704][ T9] usb 7-1: device descriptor read/8, error -71 [ 704.763390][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 704.863481][ T9] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 704.883993][ T9] usb 7-1: device descriptor read/8, error -71 [ 704.914552][ T5918] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 704.925146][ T5918] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 704.934479][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.954227][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 704.993354][ T9] usb usb7-port1: unable to enumerate USB device [ 705.001840][ T5918] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 705.179228][ T5902] usb 3-1: USB disconnect, device number 22 [ 705.186378][T16470] delete_channel: no stack [ 706.583344][ T5918] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 706.729829][T16486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.760128][T16486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.773096][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 706.782023][T16484] kvm: user requested TSC rate below hardware speed [ 706.782080][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.811968][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.827496][ T5918] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 706.840344][ T5918] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 706.850060][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.860212][ T5918] usb 7-1: config 0 descriptor?? [ 706.935202][T16490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2323'. [ 707.280422][ T5949] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 707.288100][ T5949] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 707.301877][ T5949] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 707.321593][ T5949] hid-generic 0003:0004:0000.0029: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 707.373420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.381771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.390081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.407110][ T5918] usbhid 7-1:0.0: can't add hid device: -71 [ 707.416640][ T5918] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 707.454468][ T5918] usb 7-1: USB disconnect, device number 62 [ 707.489472][T16492] fido_id[16492]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 707.568225][T16497] bridge_slave_0: invalid flags given to default FDB implementation [ 707.701732][T16503] sctp: [Deprecated]: syz.4.2326 (pid 16503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 707.701732][T16503] Use struct sctp_sack_info instead [ 709.019192][ T5902] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 709.197026][T16526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.211832][T16526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.224975][ T5902] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 709.246776][ T5902] usb 7-1: config 0 has no interface number 0 [ 709.253294][ T5902] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 709.266303][ T5902] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 709.286971][T16526] vxcan1: entered allmulticast mode [ 709.303067][ T5902] usb 7-1: config 0 interface 113 has no altsetting 0 [ 709.312760][ T5902] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 709.333491][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.345786][ T5902] usb 7-1: Product: syz [ 709.350174][ T5902] usb 7-1: Manufacturer: syz [ 709.366168][ T5902] usb 7-1: SerialNumber: syz [ 709.393749][ T5902] usb 7-1: config 0 descriptor?? [ 709.407528][ T5902] pn533_usb 7-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 709.716351][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 709.956870][T16541] sctp: [Deprecated]: syz.5.2336 (pid 16541) Use of int in max_burst socket option. [ 709.956870][T16541] Use struct sctp_assoc_value instead [ 710.059686][T16543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.076722][T16543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.794573][T16546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.810565][T16546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.831753][ T5949] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 710.845664][ T5949] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 710.853508][ T5949] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 710.879839][ T5949] hid-generic 0003:0004:0000.002A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 710.960794][T16549] fido_id[16549]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 710.979563][T16552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2340'. [ 711.273251][T16560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2341'. [ 711.318691][T16561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.337225][T16561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.418968][ T5918] usb 7-1: USB disconnect, device number 63 [ 713.089458][T16601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.106503][T16601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.125973][ T5918] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 713.133690][ T5918] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 713.143193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.151524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.159817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.173582][ T5918] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 713.238658][ T5918] hid-generic 0003:0004:0000.002B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 713.797190][T16604] fido_id[16604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 713.991187][T16613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.056219][T16613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.846923][T16612] syz.6.2357 (16612) used greatest stack depth: 18264 bytes left [ 714.909134][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2361'. [ 714.951735][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2359'. [ 715.242887][T16633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2362'. [ 715.873332][ T5949] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 716.132171][ T5949] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 716.192327][ T5949] usb 7-1: config 0 has no interface number 0 [ 716.306341][ T5949] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 716.321475][ T5949] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 716.447590][ T5949] usb 7-1: config 0 interface 113 has no altsetting 0 [ 716.522698][ T5949] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 716.532022][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.557243][ T5949] usb 7-1: Product: syz [ 716.566732][ T5949] usb 7-1: Manufacturer: syz [ 716.580479][ T5949] usb 7-1: SerialNumber: syz [ 716.874584][ T5949] usb 7-1: config 0 descriptor?? [ 716.893950][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 716.967462][ T5949] pn533_usb 7-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 717.355990][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 717.377836][ T9] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 717.393141][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.412415][ T9] usb 3-1: Product: syz [ 717.421188][ T9] usb 3-1: Manufacturer: syz [ 717.433277][ T9] usb 3-1: SerialNumber: syz [ 717.458552][ T9] usb 3-1: config 0 descriptor?? [ 717.470123][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 717.478561][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 717.501976][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input57 [ 717.987611][T16654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.999162][T16654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.231620][T16654] team_slave_0: entered promiscuous mode [ 718.237365][T16654] team_slave_1: entered promiscuous mode [ 718.243050][T16654] batadv1: entered promiscuous mode [ 718.271177][T16654] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 718.284004][T16654] team0: Device macvtap0 is already an upper device of the team interface [ 718.295331][T16654] team_slave_0: left promiscuous mode [ 718.300738][T16654] team_slave_1: left promiscuous mode [ 718.306247][T16654] batadv1: left promiscuous mode [ 718.666765][ T9] usb 7-1: USB disconnect, device number 64 [ 718.903454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.912326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.920858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.323579][ T5949] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 719.485075][ T5949] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 719.495298][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.515590][ T5949] usb 7-1: config 0 descriptor?? [ 719.547774][T16680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2375'. [ 719.658321][ T5918] usb 3-1: USB disconnect, device number 23 [ 719.674998][ T5949] cp210x 7-1:0.0: cp210x converter detected [ 719.725243][ T5949] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 719.734650][ T5949] cp210x 7-1:0.0: querying part number failed [ 719.742840][ T5949] usb 7-1: cp210x converter now attached to ttyUSB0 [ 720.498552][T16691] syzkaller1: entered promiscuous mode [ 720.511378][T16691] syzkaller1: entered allmulticast mode [ 720.963695][T16700] netlink: 'syz.4.2381': attribute type 7 has an invalid length. [ 720.985808][T16700] netlink: 'syz.4.2381': attribute type 8 has an invalid length. [ 721.087578][T16701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2381'. [ 721.929757][T16707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.939255][T16707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.956634][T16707] fuse: Unknown parameter 'rootmod' [ 722.050525][ T5949] usb 7-1: USB disconnect, device number 65 [ 722.074122][ T5949] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 722.118168][ T5949] cp210x 7-1:0.0: device disconnected [ 722.121402][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2384'. [ 722.133139][ T5918] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 722.252759][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2384'. [ 722.357597][ T5918] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 722.366557][ T5918] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 722.398616][ T5918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 722.444454][ T5918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 722.481729][T16712] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 722.508994][T16712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.508994][ T5918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 722.549184][ T5918] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 722.585721][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 722.627521][ T5918] usb 3-1: Product: syz [ 722.643807][ T5918] usb 3-1: Manufacturer: syz [ 722.758592][ T5918] cdc_wdm 3-1:1.0: skipping garbage [ 722.805737][ T5918] cdc_wdm 3-1:1.0: skipping garbage [ 722.812139][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.831262][ T5918] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 722.886558][ T5918] cdc_wdm 3-1:1.0: Unknown control protocol [ 722.932287][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.953371][ T5918] usb 3-1: USB disconnect, device number 24 [ 722.970320][ T979] hid-generic 0003:0004:0000.002C: unknown main item tag 0x0 [ 722.985474][ T979] hid-generic 0003:0004:0000.002C: unknown main item tag 0x0 [ 723.010349][ T979] hid-generic 0003:0004:0000.002C: unknown main item tag 0x0 [ 723.051523][ T979] hid-generic 0003:0004:0000.002C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 723.234116][T16724] fido_id[16724]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 724.023220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.031553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.039803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.440098][T16735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2390'. [ 724.693078][ T979] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 724.846473][ T979] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 724.873175][ T979] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 724.908891][ T979] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 724.937910][ T979] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 724.947582][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.957123][ T979] usb 7-1: Product: syz [ 724.961500][ T979] usb 7-1: Manufacturer: syz [ 724.967064][ T979] usb 7-1: SerialNumber: syz [ 724.988644][ T979] hub 7-1:1.0: bad descriptor, ignoring hub [ 724.996957][ T979] hub 7-1:1.0: probe with driver hub failed with error -5 [ 725.066137][T16737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.095220][T16737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.185319][T16739] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2392'. [ 725.198630][ T979] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 725.198970][T16739] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2392'. [ 725.344707][T16741] syzkaller1: entered promiscuous mode [ 725.354333][T16741] syzkaller1: entered allmulticast mode [ 725.503696][ T979] usb 7-1: USB disconnect, device number 66 [ 725.531851][ T979] usblp0: removed [ 725.537789][T16753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.556146][T16753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.572066][T16753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.591059][T16753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.594148][T16756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.614330][T16756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.629331][T16756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.661298][T16756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.813538][ T5918] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 725.975736][ T5918] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 725.985092][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.130611][ T5918] usb 3-1: config 0 descriptor?? [ 726.451278][ T5918] usb 3-1: Cannot read MAC address [ 726.460527][ T5918] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 726.488033][ T5918] usb 3-1: USB disconnect, device number 25 [ 726.558351][T16768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.612316][T16768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.692051][ T979] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 726.704015][ T979] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 726.720858][ T979] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 726.769866][ T979] hid-generic 0003:0004:0000.002D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 727.090651][T16773] fido_id[16773]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 727.115563][T16779] netlink: 'syz.6.2401': attribute type 4 has an invalid length. [ 727.136123][T16779] netlink: 'syz.6.2401': attribute type 17 has an invalid length. [ 728.128499][T16792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.139547][T16792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.773178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.781531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.789901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.240003][T16816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.276630][T16816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.367056][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 730.383011][T16813] netlink: 'syz.1.2410': attribute type 3 has an invalid length. [ 730.439091][T16813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.584852][T16821] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2412'. [ 730.852562][T16830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.913682][T16830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.926535][ T5902] hid-generic 0003:0004:0000.002E: unknown main item tag 0x0 [ 730.934158][ T5902] hid-generic 0003:0004:0000.002E: unknown main item tag 0x0 [ 730.941524][ T5902] hid-generic 0003:0004:0000.002E: unknown main item tag 0x0 [ 731.055773][ T5902] hid-generic 0003:0004:0000.002E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 731.149834][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2416'. [ 731.199228][T16831] netlink: 'syz.2.2413': attribute type 10 has an invalid length. [ 731.218727][T16837] veth0_vlan: left promiscuous mode [ 731.279921][T16831] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.317454][T16831] bond0: (slave team0): Enslaving as an active interface with an up link [ 731.699335][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2423'. [ 731.833893][ T5949] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 732.134631][ T5949] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 732.147889][ T5949] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 732.158466][ T5949] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 732.178272][T16868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.211571][ T5949] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 732.212728][T16868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.242633][ T5949] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 732.267670][ T5949] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 732.279039][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 732.299293][ T5949] usb 7-1: Product: syz [ 732.323256][ T5949] usb 7-1: Manufacturer: syz [ 732.361889][ T5949] cdc_wdm 7-1:1.0: skipping garbage [ 732.377891][ T5949] cdc_wdm 7-1:1.0: skipping garbage [ 732.412449][ T5949] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 732.418847][ T5949] cdc_wdm 7-1:1.0: Unknown control protocol [ 732.613375][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.620036][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.631238][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.637854][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.644396][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.650995][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.657389][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.663993][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.670372][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.676948][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.683494][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.690100][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.696382][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.702959][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.709319][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.715908][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.722151][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.728729][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.735244][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 732.741856][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 732.754129][ T5949] usb 7-1: USB disconnect, device number 67 [ 732.760112][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 732.929729][T16873] loop3: detected capacity change from 0 to 1 [ 732.939338][T16873] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 732.945363][T16873] loop3: p1 size 16 extends beyond EOD, truncated [ 732.958543][T16873] loop3: p2 start 915031469 is beyond EOD, truncated [ 732.982955][T16875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.002447][T16875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.018080][T16873] loop3: p3 start 2932641740 is beyond EOD, truncated [ 733.062635][T16875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.079085][T16873] loop3: p4 start 3710920044 is beyond EOD, truncated [ 733.088548][T16875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.102626][T16873] loop3: p5 start 1815049829 is beyond EOD, truncated [ 733.301976][T16875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.315236][T16875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.868512][T16880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.892961][T16880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.925214][T16880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.945716][T16880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.893213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.901603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.909937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.933159][ T5902] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 735.133109][T16904] random: crng reseeded on system resumption [ 735.223307][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 735.239160][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.256197][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.348092][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.396439][ T5902] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 735.461986][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.548683][ T5902] usb 7-1: config 0 descriptor?? [ 736.060879][ T5949] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 736.072250][ T5949] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 736.090208][ T5949] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 736.115483][ T5949] hid-generic 0003:0004:0000.002F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 736.221678][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 736.221697][ T30] audit: type=1804 audit(1758270012.122:626): pid=16915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2439" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=64623 res=1 errno=0 [ 736.639477][ T30] audit: type=1804 audit(1758270012.182:627): pid=16915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2439" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=64623 res=1 errno=0 [ 736.753803][ T5902] usbhid 7-1:0.0: can't add hid device: -71 [ 736.791792][ T5902] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 736.873911][ T5902] usb 7-1: USB disconnect, device number 68 [ 737.263645][ T5918] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 737.462390][T16937] loop3: detected capacity change from 0 to 1 [ 737.472331][T16937] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 737.490036][T16937] loop3: p1 size 16 extends beyond EOD, truncated [ 737.573960][T16937] loop3: p2 start 915031469 is beyond EOD, truncated [ 737.592626][T16937] loop3: p3 start 2932641740 is beyond EOD, truncated [ 737.626370][T16937] loop3: p4 start 3710920044 is beyond EOD, truncated [ 737.640452][ T5918] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 737.654506][ T5918] usb 3-1: config 0 has no interface number 0 [ 737.660590][ T5918] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 737.676549][ T5918] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 737.691384][T16937] loop3: p5 start 1815049829 is beyond EOD, truncated [ 737.700208][ T5918] usb 3-1: config 0 interface 113 has no altsetting 0 [ 737.722322][ T5918] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 737.734901][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.742869][ T5918] usb 3-1: Product: syz [ 737.804642][ T5918] usb 3-1: Manufacturer: syz [ 737.811668][ T5918] usb 3-1: SerialNumber: syz [ 737.828639][ T5918] usb 3-1: config 0 descriptor?? [ 737.886833][ T5918] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 738.377045][ T5902] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 738.568576][ T5902] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 738.599178][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.702459][ T5902] usb 7-1: Product: syz [ 738.713108][ T5902] usb 7-1: Manufacturer: syz [ 738.736013][ T5902] usb 7-1: SerialNumber: syz [ 738.772921][ T5902] usb 7-1: config 0 descriptor?? [ 738.794355][ T5902] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 739.209274][ T5902] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 739.216548][ T5902] sq905c 7-1:0.0: Reading version command failed [ 739.222908][ T5902] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 739.345318][ T5918] usb 3-1: USB disconnect, device number 26 [ 739.650141][ T5902] usb 7-1: USB disconnect, device number 69 [ 739.651771][T16962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.713675][T16962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.013381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.021749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.030092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.302464][ T43] hid (null): unknown global tag 0xc [ 740.313501][ T43] hid (null): unknown global tag 0x29 [ 740.340267][ T43] hid-generic 0001:032F:0005.0030: unknown global tag 0xc [ 740.385168][ T43] hid-generic 0001:032F:0005.0030: item 0 4 1 12 parsing failed [ 740.473246][ T5902] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 740.683530][ T43] hid-generic 0001:032F:0005.0030: probe with driver hid-generic failed with error -22 [ 740.944264][ T5902] usb 7-1: Using ep0 maxpacket: 8 [ 740.962581][ T5902] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.023817][ T5902] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 741.056010][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.174075][ T5902] usb 7-1: Product: syz [ 741.206741][ T5902] usb 7-1: Manufacturer: syz [ 741.229601][ T5902] usb 7-1: SerialNumber: syz [ 741.240713][ T5902] usb 7-1: config 0 descriptor?? [ 741.260446][ T5902] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 741.268954][ T5902] usb 7-1: selecting invalid altsetting 1 [ 741.317527][T16982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.329740][T16982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.369943][T16982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.385530][T16982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.030239][T16990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.069057][T16990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.115294][ T5902] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 742.124538][ T5902] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 742.137682][ T5902] hid-generic 0003:0004:0000.0031: unknown main item tag 0x0 [ 742.167079][ T5902] hid-generic 0003:0004:0000.0031: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 742.740966][T16998] fido_id[16998]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 742.763603][T17004] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 742.771233][T17004] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 743.839881][ T5949] usb 7-1: USB disconnect, device number 70 [ 744.200568][T17023] random: crng reseeded on system resumption [ 745.773163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.781556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.789792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.299099][T17037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.310600][T17037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.273900][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.280248][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.384065][T17060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.407892][T17060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.900140][ T5949] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 748.043307][ T5918] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 748.113737][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 748.134950][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.146337][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.179077][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 748.217545][ T5949] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 748.236445][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.253883][ T5918] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 748.267739][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.282439][ T5949] usb 3-1: config 0 descriptor?? [ 748.314320][ T5918] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 748.428845][ T5918] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 748.444525][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.486921][ T5918] usb 7-1: config 0 descriptor?? [ 748.551300][T17075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.580416][T17075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.598009][T17075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.626689][T17075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.713588][ T9] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 748.721368][ T9] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 748.731858][ T9] hid-generic 0003:0004:0000.0032: unknown main item tag 0x0 [ 748.749954][ T9] hid-generic 0003:0004:0000.0032: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 748.842051][T17079] fido_id[17079]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 748.937115][ T5949] usbhid 3-1:0.0: can't add hid device: -71 [ 748.947253][ T5949] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 748.959381][ T5949] usb 3-1: USB disconnect, device number 27 [ 748.967452][ T5918] holtek_kbd 0003:04D9:A055.0033: unknown main item tag 0x0 [ 748.978236][ T5918] holtek_kbd 0003:04D9:A055.0033: unknown main item tag 0x0 [ 748.995101][ T5918] holtek_kbd 0003:04D9:A055.0033: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.6-1/input0 [ 749.183273][ T5949] usb 7-1: USB disconnect, device number 71 [ 749.230533][T17084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2475'. [ 749.271797][T17087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.280933][T17087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.418494][T17109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.483948][T17109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.557114][T17113] trusted_key: encrypted_key: key trusted:8sX not found [ 750.676912][T17113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 750.741272][T17113] vim2m vim2m.0: vidioc_s_fmt queue busy [ 750.813297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.821687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.830048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.040475][T17117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.159433][T17117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.236152][T17117] IPVS: set_ctl: invalid protocol: 3 224.0.0.1:20001 [ 751.329360][T17125] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2484'. [ 751.993678][T17138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.004560][T17138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.100221][ T9] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 752.258137][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 752.267770][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.275852][ T9] usb 7-1: Product: syz [ 752.324446][ T9] usb 7-1: Manufacturer: syz [ 752.329088][ T9] usb 7-1: SerialNumber: syz [ 752.364688][ T9] usb 7-1: config 0 descriptor?? [ 752.401750][T17145] loop2: detected capacity change from 0 to 7 [ 752.430479][T17145] Dev loop2: unable to read RDB block 7 [ 752.473240][T17145] loop2: unable to read partition table [ 752.595086][T17145] loop2: partition table beyond EOD, truncated [ 752.609822][T17145] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 752.652385][ T9] usb 7-1: USB disconnect, device number 72 [ 755.273313][ T10] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 755.582578][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.599956][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.610379][ T10] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 755.933192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.941800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.950183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.209016][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.235918][ T10] usb 7-1: config 0 descriptor?? [ 757.193610][T17196] fuse: Unknown parameter '&d' [ 757.235853][T17202] netlink: 'syz.5.2503': attribute type 11 has an invalid length. [ 758.398112][T17220] netlink: 'syz.2.2508': attribute type 29 has an invalid length. [ 758.933401][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 758.953353][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 759.051277][ T10] usb 7-1: USB disconnect, device number 73 [ 759.281010][T17229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.361431][T17229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.832687][T17231] netlink: 'syz.5.2511': attribute type 10 has an invalid length. [ 759.866962][T17231] bond0: (slave wlan1): Opening slave failed [ 760.060676][T17239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.119551][T17239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.427823][T17244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.893821][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 760.960836][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.973964][ T5949] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 760.974615][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.053457][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 761.063423][ T10] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 761.077215][ T10] usb 3-1: config 0 has no interface number 0 [ 761.095243][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 761.143177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.151381][ T5949] usb 7-1: Using ep0 maxpacket: 16 [ 761.151569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.298130][ T5949] usb 7-1: config 0 has no interfaces? [ 761.473618][ T5949] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.486716][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.523212][ T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 761.523377][ T5949] usb 7-1: Product: syz [ 761.543741][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 761.553502][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.563957][ T5949] usb 7-1: Manufacturer: syz [ 761.568545][ T5949] usb 7-1: SerialNumber: syz [ 761.573689][ T10] usb 3-1: Product: syz [ 761.583059][ T10] usb 3-1: Manufacturer: syz [ 761.820609][ T5949] usb 7-1: config 0 descriptor?? [ 761.825673][ T10] usb 3-1: SerialNumber: syz [ 761.883723][ T10] usb 3-1: config 0 descriptor?? [ 762.216755][ T10] iowarrior 3-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 763.071852][T17273] input: syz0 as /devices/virtual/input/input58 [ 763.650238][ T5949] usb 3-1: USB disconnect, device number 28 [ 764.150288][ T5934] usb 7-1: USB disconnect, device number 74 [ 764.413233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.421530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.483091][ T5902] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 764.694442][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 764.705153][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.736651][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.790769][T17305] random: crng reseeded on system resumption [ 764.834247][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 764.903210][ T5902] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 764.925950][T17304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.938577][T17304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.946389][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.996086][ T5902] usb 3-1: config 0 descriptor?? [ 765.368874][T17319] loop3: detected capacity change from 0 to 1 [ 765.378910][ T6014] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 765.387266][ T6014] loop3: p1 size 16 extends beyond EOD, truncated [ 765.422371][ T6014] loop3: p2 start 915031469 is beyond EOD, truncated [ 765.462268][ T5949] hid-generic 0003:0004:0000.0034: unknown main item tag 0x0 [ 765.472651][ T5949] hid-generic 0003:0004:0000.0034: unknown main item tag 0x0 [ 765.485560][ T5949] hid-generic 0003:0004:0000.0034: unknown main item tag 0x0 [ 765.495697][ T6014] loop3: p3 start 2932641740 is beyond EOD, truncated [ 765.512182][ T6014] loop3: p4 start 3710920044 is beyond EOD, truncated [ 765.560029][ T5949] hid-generic 0003:0004:0000.0034: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 765.601749][ T6014] loop3: p5 start 1815049829 is beyond EOD, truncated [ 765.809290][T17326] fido_id[17326]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 765.841678][T17319] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 765.847304][T17319] loop3: p1 size 16 extends beyond EOD, truncated [ 765.856205][T17319] loop3: p2 start 915031469 is beyond EOD, truncated [ 765.866059][T17319] loop3: p3 start 2932641740 is beyond EOD, truncated [ 765.873727][T17319] loop3: p4 start 3710920044 is beyond EOD, truncated [ 765.881355][T17319] loop3: p5 start 1815049829 is beyond EOD, truncated [ 765.920487][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 765.927073][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 766.004088][ T5902] usb 3-1: USB disconnect, device number 29 [ 766.714607][T17333] usb usb8: usbfs: process 17333 (syz.2.2535) did not claim interface 0 before use [ 767.423116][ T5949] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 767.575835][ T5949] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 767.585055][ T5949] usb 3-1: config 0 has no interface number 0 [ 767.592091][ T5949] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 767.612140][ T5949] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 767.646758][ T5949] usb 3-1: config 0 interface 113 has no altsetting 0 [ 767.669452][ T5949] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 767.678796][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.699244][ T5949] usb 3-1: Product: syz [ 767.722250][ T5949] usb 3-1: Manufacturer: syz [ 767.743437][ T5949] usb 3-1: SerialNumber: syz [ 767.784079][ T5949] usb 3-1: config 0 descriptor?? [ 767.806714][ T5949] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 768.086276][T17353] input: syz1 as /devices/virtual/input/input59 [ 768.093171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.101496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.272253][T17353] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 770.042197][ T5949] usb 3-1: USB disconnect, device number 30 [ 770.326542][T17389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2546'. [ 770.751366][T17393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.760103][T17393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.777517][T17393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.799727][T17393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.095265][ T30] audit: type=1326 audit(1758270047.002:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.6.2549" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83ba58eba9 code=0x0 [ 771.296506][T17398] sctp: [Deprecated]: syz.5.2550 (pid 17398) Use of int in max_burst socket option deprecated. [ 771.296506][T17398] Use struct sctp_assoc_value instead [ 771.348498][T17400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.358310][T17400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.023113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.031416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.137329][T17411] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 772.191253][T17413] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 772.232193][T17411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.243096][ T5902] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 772.304960][T17411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.329064][T17413] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 772.374803][T17411] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 772.482584][ T5902] usb 3-1: config 0 has no interfaces? [ 772.505430][ T5902] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 772.519133][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.616894][ T5902] usb 3-1: Product: syz [ 772.621166][ T5902] usb 3-1: Manufacturer: syz [ 772.648844][ T5902] usb 3-1: SerialNumber: syz [ 772.712596][ T5902] usb 3-1: config 0 descriptor?? [ 772.772832][T17422] netlink: 'syz.5.2557': attribute type 2 has an invalid length. [ 772.797163][T17422] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2557'. [ 773.267883][T17433] input: syz1 as /devices/virtual/input/input60 [ 773.394140][T17428] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 773.728154][T17436] sctp: [Deprecated]: syz.6.2560 (pid 17436) Use of int in maxseg socket option. [ 773.728154][T17436] Use struct sctp_assoc_value instead [ 774.592495][T17442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.664110][T17442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.039293][ T5949] usb 3-1: USB disconnect, device number 31 [ 775.219584][T17461] loop3: detected capacity change from 0 to 1 [ 775.244847][T17461] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 775.272941][T17461] loop3: p1 size 16 extends beyond EOD, truncated [ 775.327793][T17461] loop3: p2 start 915031469 is beyond EOD, truncated [ 775.341984][T17461] loop3: p3 start 2932641740 is beyond EOD, truncated [ 775.352068][T17461] loop3: p4 start 3710920044 is beyond EOD, truncated [ 775.361296][T17461] loop3: p5 start 1815049829 is beyond EOD, truncated [ 775.853189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.861652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.967534][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 775.977351][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 776.562755][T17497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.577470][T17497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.724160][T17500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2579'. [ 776.784342][T17501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.792931][T17501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.609040][T17519] loop2: detected capacity change from 0 to 7 [ 777.897916][T17519] Dev loop2: unable to read RDB block 7 [ 778.016113][T17519] loop2: unable to read partition table [ 778.093811][T17528] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2587'. [ 778.176891][T17519] loop2: partition table beyond EOD, truncated [ 778.206866][T17525] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 778.214581][T17525] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 778.241315][T17519] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 778.839846][T17538] loop3: detected capacity change from 0 to 1 [ 778.847581][T17538] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 778.916587][T17538] loop3: p1 size 16 extends beyond EOD, truncated [ 778.973483][T17538] loop3: p2 start 915031469 is beyond EOD, truncated [ 778.983465][T17538] loop3: p3 start 2932641740 is beyond EOD, truncated [ 778.990441][T17538] loop3: p4 start 3710920044 is beyond EOD, truncated [ 778.997693][T17538] loop3: p5 start 1815049829 is beyond EOD, truncated [ 779.693180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.701600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.709894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.164724][T17546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.219922][T17546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.513042][ T24] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 780.811520][T17567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.836065][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 780.837171][T17567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.883020][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.923006][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 780.960557][ T24] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 780.982654][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.034531][ T24] usb 7-1: config 0 descriptor?? [ 781.726735][ T24] holtek_kbd 0003:04D9:A055.0035: unknown main item tag 0x0 [ 781.743135][ T24] holtek_kbd 0003:04D9:A055.0035: unknown main item tag 0x0 [ 781.762084][ T24] holtek_kbd 0003:04D9:A055.0035: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.6-1/input0 [ 781.805248][ T5918] usb 7-1: USB disconnect, device number 75 [ 782.134101][T17577] fido_id[17577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 782.543448][T17584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.654229][T17584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.746781][T17584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.755904][ T30] audit: type=1326 audit(1758270058.652:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 782.778215][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.785579][T17584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.913299][ T30] audit: type=1326 audit(1758270058.652:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 783.048960][ T30] audit: type=1326 audit(1758270058.652:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 783.132598][ T30] audit: type=1326 audit(1758270058.652:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 783.257923][ T30] audit: type=1326 audit(1758270058.652:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 783.327139][ T30] audit: type=1326 audit(1758270058.652:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 783.424576][T17601] ptrace attach of "./syz-executor exec"[12300] was attempted by " /dev/usbmon#     \x07     /dev/dri/card# GPL     [ 783.460472][ T30] audit: type=1326 audit(1758270058.652:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 783.779181][T17607] i2c i2c-0: Invalid block read size 255 [ 783.785724][ T30] audit: type=1326 audit(1758270058.652:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 783.857176][ T30] audit: type=1326 audit(1758270058.652:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 783.879465][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.900784][ T30] audit: type=1326 audit(1758270058.652:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.5.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50f98eba9 code=0x7ffc0000 [ 785.123366][ T5902] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 785.316341][ T5902] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 785.329049][ T5902] usb 7-1: config 0 has no interface number 0 [ 785.353265][ T5902] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 785.384908][ T5902] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 785.416754][ T5902] usb 7-1: config 0 interface 113 has no altsetting 0 [ 785.433134][ T5902] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 785.442653][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.453127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.461415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.469753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.495042][T17632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2618'. [ 785.506226][ T5902] usb 7-1: Product: syz [ 785.510381][ T5902] usb 7-1: Manufacturer: syz [ 785.527830][ T5902] usb 7-1: SerialNumber: syz [ 785.575011][ T5902] usb 7-1: config 0 descriptor?? [ 785.587579][ T5902] pn533_usb 7-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 785.677894][T17637] fuse: Bad value for 'fd' [ 785.983621][ T5949] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 786.145018][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.156514][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.244567][ T5949] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 786.268180][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.293433][ T5949] usb 3-1: config 0 descriptor?? [ 786.688254][T17658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.697735][T17658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.720750][ T5949] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0 [ 786.725305][T17661] bond0: option xmit_hash_policy: invalid value (255) [ 786.733960][ T5949] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0 [ 786.742483][ T5949] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0 [ 786.750427][ T5949] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0 [ 786.758950][ T5949] playstation 0003:054C:0DF2.0036: unknown main item tag 0x0 [ 786.780923][ T5949] playstation 0003:054C:0DF2.0036: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 786.800960][T17667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.828935][T17667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.036480][T17675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.051794][T17675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.378829][ T5949] playstation 0003:054C:0DF2.0036: Failed to retrieve feature with reportID 5: -71 [ 787.407301][ T5949] playstation 0003:054C:0DF2.0036: Failed to retrieve DualSense calibration info: -71 [ 787.423734][ T5949] playstation 0003:054C:0DF2.0036: Failed to get calibration data from DualSense [ 787.438021][ T5949] playstation 0003:054C:0DF2.0036: Failed to create dualsense. [ 787.456812][ T5949] playstation 0003:054C:0DF2.0036: probe with driver playstation failed with error -71 [ 787.495512][ T5949] usb 3-1: USB disconnect, device number 32 [ 787.678695][ T5902] usb 7-1: USB disconnect, device number 76 [ 787.960482][T17683] kvm: pic: non byte write [ 788.261017][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2631'. [ 788.272902][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2631'. [ 789.466807][T17704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.476033][T17704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.152086][T17728] program syz.4.2640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 791.373145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.381441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.389891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.718707][T17742] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2646'. [ 791.745666][T17738] loop3: detected capacity change from 0 to 1 [ 791.758890][ T6014] Dev loop3: unable to read RDB block 1 [ 791.767544][ T6014] loop3: unable to read partition table [ 791.777167][ T6014] loop3: partition table beyond EOD, truncated [ 791.788083][T17738] Dev loop3: unable to read RDB block 1 [ 791.809972][T17738] loop3: unable to read partition table [ 791.830893][T17738] loop3: partition table beyond EOD, truncated [ 791.859381][T17738] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 792.405843][T17736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 792.406401][T17740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 792.412251][T17736] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 792.419964][T17740] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 792.432887][T17740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 792.435268][T17736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 792.439742][T17740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 792.445446][T17736] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 792.489768][T17736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 792.501399][T17736] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 792.511433][T17736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 792.521902][T17753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.532326][T17736] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 792.534700][T17753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.545765][T17736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 792.559804][T17736] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 792.738989][ T5934] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 792.903345][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 792.910848][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.913532][ T5949] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 792.922087][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.942156][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 792.956623][ T5934] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 792.966503][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.978691][ T5934] usb 7-1: config 0 descriptor?? [ 793.085102][ T5949] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 793.102864][ T5949] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 793.114535][ T5949] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 793.125955][ T5949] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 793.137847][ T5949] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 793.150440][ T5949] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 793.159905][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 793.168827][ T5949] usb 3-1: Product: syz [ 793.182337][T17758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2652'. [ 793.192488][ T5949] usb 3-1: Manufacturer: syz [ 793.215075][ T5949] cdc_wdm 3-1:1.0: skipping garbage [ 793.238548][ T5949] cdc_wdm 3-1:1.0: skipping garbage [ 793.251156][ T5949] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 793.260340][ T5949] cdc_wdm 3-1:1.0: Unknown control protocol [ 793.607993][ T5934] usbhid 7-1:0.0: can't add hid device: -71 [ 793.633179][ T5934] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 793.670649][ T5934] usb 7-1: USB disconnect, device number 77 [ 793.972901][T17766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.982588][T17766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.112304][ T5934] usb 3-1: USB disconnect, device number 33 [ 794.513322][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2657'. [ 794.576433][T17779] blktrace: Concurrent blktraces are not allowed on loop6 [ 794.933363][T17773] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2656'. [ 795.110972][T17789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.145946][T17789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.236517][T17790] trusted_key: encrypted_key: master key parameter 'sbiWlCҠ0bBaޱTgwHX}\hpzc+taGqvb@N%%ay' is invalid [ 796.283085][ T5949] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 796.437772][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.448838][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.469841][ T5949] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 796.515479][ T5949] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 796.540822][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.568457][ T5949] usb 7-1: config 0 descriptor?? [ 797.053304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.061630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.069886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.894400][T17834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.917086][ T5949] usbhid 7-1:0.0: can't add hid device: -71 [ 798.920355][T17834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.935744][ T5949] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 798.983084][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 799.010093][ T5949] usb 7-1: USB disconnect, device number 78 [ 799.073109][T17837] binder: BINDER_SET_CONTEXT_MGR already set [ 799.079319][T17837] binder: 17836:17837 ioctl 4018620d 200000000040 returned -16 [ 799.183541][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 799.204034][ T43] usb 3-1: config 0 has no interfaces? [ 799.234512][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 799.243882][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.262342][ T43] usb 3-1: Product: syz [ 799.266828][ T43] usb 3-1: Manufacturer: syz [ 799.279994][ T43] usb 3-1: SerialNumber: syz [ 799.318544][ T43] usb 3-1: config 0 descriptor?? [ 799.779133][T17850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.786853][T17850] IPv6: NLM_F_CREATE should be set when creating new route [ 801.830564][T17874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.852076][T17874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.533180][ T43] usb 3-1: USB disconnect, device number 34 [ 802.713067][T17879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.729501][T17879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.743151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.751517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.759867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.793105][ T43] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 804.148492][ T43] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 804.159705][ T43] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 804.191499][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 804.277478][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.302588][T17898] input: syz1 as /devices/virtual/input/input62 [ 804.432341][T17884] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 804.477444][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 804.622530][T17901] input input63: cannot allocate more than FF_MAX_EFFECTS effects [ 804.653865][T17884] fuse: Unknown parameter 'rootmod' [ 804.922369][ T43] usb 7-1: USB disconnect, device number 79 [ 805.585853][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 805.805175][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 805.870770][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 806.005366][T17919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.146205][T17919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.187049][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 806.563928][ T24] usb 3-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 806.633686][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.702507][ T24] usb 3-1: Product: syz [ 806.713002][ T24] usb 3-1: Manufacturer: syz [ 806.726153][ T24] usb 3-1: SerialNumber: syz [ 806.763987][ T24] usb 3-1: config 0 descriptor?? [ 807.062736][ T24] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 807.164459][ T24] usb 3-1: USB disconnect, device number 35 [ 807.584239][T17932] netlink: 'syz.6.2692': attribute type 1 has an invalid length. [ 808.433299][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 808.503149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.511405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.519633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.623600][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 808.629186][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.630786][ T10] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 808.635612][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.683979][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.898999][ T10] usb 3-1: config 0 descriptor?? [ 808.949729][T17952] vxcan1: entered promiscuous mode [ 808.955742][T17952] vxcan1: left allmulticast mode [ 808.972322][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 809.176323][T17950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2697'. [ 809.301976][T17955] loop2: detected capacity change from 0 to 7 [ 809.315260][ T6014] Dev loop2: unable to read RDB block 7 [ 809.321096][ T6014] loop2: unable to read partition table [ 809.330210][ T6014] loop2: partition table beyond EOD, truncated [ 809.338847][T17955] Dev loop2: unable to read RDB block 7 [ 809.350372][T17955] loop2: unable to read partition table [ 809.362163][T17955] loop2: partition table beyond EOD, truncated [ 809.413218][T17955] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 809.518406][ T10] gspca_vc032x: reg_r err -110 [ 809.523849][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.547377][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.615282][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.642831][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.666246][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.690766][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.709900][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.721996][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.741439][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.768494][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.788386][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.849343][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.871109][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.887834][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.922385][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.943633][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.966910][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 809.985616][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 810.010083][ T10] gspca_vc032x: Unknown sensor... [ 810.042565][ T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 810.104044][T17965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.114165][T17965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.205849][T17964] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2704'. [ 810.216760][T17967] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2704'. [ 810.818778][T17978] input: syz1 as /devices/virtual/input/input66 [ 810.861011][T17978] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.307325][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057c8d800: rx timeout, send abort [ 811.319365][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057c8d800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 811.552886][ T5949] usb 3-1: USB disconnect, device number 36 [ 811.936173][T17991] loop3: detected capacity change from 0 to 1 [ 811.950046][T17991] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 811.955662][T17991] loop3: p1 size 16 extends beyond EOD, truncated [ 812.026085][T17995] loop2: detected capacity change from 0 to 7 [ 812.064572][T17990] create_pit_timer: 1222 callbacks suppressed [ 812.064590][T17990] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 812.084202][T17997] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 812.091755][T17997] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 812.126505][T17995] Dev loop2: unable to read RDB block 7 [ 812.176659][T17995] loop2: unable to read partition table [ 812.203246][T17995] loop2: partition table beyond EOD, truncated [ 812.250852][T17991] loop3: p2 start 915031469 is beyond EOD, truncated [ 812.271271][T17991] loop3: p3 start 2932641740 is beyond EOD, truncated [ 812.286023][T17995] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 812.331648][T17991] loop3: p4 start 3710920044 is beyond EOD, truncated [ 812.402164][T17991] loop3: p5 start 1815049829 is beyond EOD, truncated [ 812.903291][ T5934] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 813.113528][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 813.195063][ T24] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 813.534852][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.179112][T18024] netlink: 'syz.4.2716': attribute type 10 has an invalid length. [ 814.253149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.261504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.269830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.339089][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 814.345088][ T5934] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 814.403702][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.413772][ T5934] usb 3-1: Product: syz [ 814.424444][ T5934] usb 3-1: Manufacturer: syz [ 814.429261][ T5934] usb 3-1: SerialNumber: syz [ 814.440468][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.463135][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.477083][ T5934] usb 3-1: config 0 descriptor?? [ 814.523961][ T24] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 814.575681][ T5934] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 814.631863][ T5934] usb 3-1: selecting invalid altsetting 1 [ 814.637981][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.649386][ T24] usb 7-1: config 0 descriptor?? [ 814.862567][ T24] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 815.152747][ T5934] gspca_stk014: reg_r err -110 [ 815.161361][ T5934] stk014 3-1:0.0: probe with driver stk014 failed with error -110 [ 816.036844][ T24] usb 7-1: USB disconnect, device number 80 [ 816.368592][T18048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.398456][T18048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.643691][T18055] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2723'. [ 816.724376][ T5918] usb 3-1: USB disconnect, device number 37 [ 817.943794][T18067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'. [ 820.120795][T18114] veth1_to_team: entered promiscuous mode [ 820.293812][T18114] veth1_to_team: left promiscuous mode [ 820.501483][ T24] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 820.669632][T18127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.680324][T18127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.827564][ T24] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 820.887972][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.914243][ T24] usb 7-1: config 0 descriptor?? [ 821.237464][T18139] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2749'. [ 821.293158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.301463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.380738][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 821.380757][ T30] audit: type=1326 audit(1758270097.272:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18138 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3df8eba9 code=0x7ffc0000 [ 821.412424][ T24] hackrf 7-1:0.0: Board ID: 00 [ 821.429554][ T24] hackrf 7-1:0.0: Firmware version: [ 821.460072][ T24] hackrf 7-1:0.0: Registered as swradio24 [ 821.501051][ T24] videodev: could not get a free minor [ 821.531703][ T24] hackrf 7-1:0.0: Failed to register as video device (-23) [ 821.590177][ T24] hackrf 7-1:0.0: probe with driver hackrf failed with error -23 [ 821.654450][ T30] audit: type=1326 audit(1758270097.272:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18138 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f6f3df8eba9 code=0x7ffc0000 [ 821.745757][ T30] audit: type=1326 audit(1758270097.272:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18138 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3df8eba9 code=0x7ffc0000 [ 822.272709][ T30] audit: type=1326 audit(1758270097.272:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18138 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3df8eba9 code=0x7ffc0000 [ 822.299353][ T30] audit: type=1326 audit(1758270097.272:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18138 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6f3df8eba9 code=0x7ffc0000 [ 822.357651][ T30] audit: type=1326 audit(1758270097.272:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18138 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3df8eba9 code=0x7ffc0000 [ 822.401448][T18147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2751'. [ 822.795477][ T30] audit: type=1326 audit(1758270097.272:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18138 comm="syz.4.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3df8eba9 code=0x7ffc0000 [ 822.972385][ T5949] usb 7-1: USB disconnect, device number 81 [ 823.862679][T18160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 824.113699][T18164] ================================================================== [ 824.121804][T18164] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.130410][T18164] Write of size 1024 at addr ffffc90003067c40 by task vivid-000-vid-c/18164 [ 824.139085][T18164] [ 824.141411][T18164] CPU: 1 UID: 0 PID: 18164 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 824.141425][T18164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 824.141433][T18164] Call Trace: [ 824.141437][T18164] [ 824.141443][T18164] dump_stack_lvl+0x189/0x250 [ 824.141458][T18164] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.141469][T18164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.141480][T18164] ? __pfx__printk+0x10/0x10 [ 824.141494][T18164] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 824.141510][T18164] ? __virt_addr_valid+0xdc/0x5c0 [ 824.141522][T18164] ? __virt_addr_valid+0xdc/0x5c0 [ 824.141534][T18164] print_report+0xca/0x240 [ 824.141544][T18164] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.141552][T18164] kasan_report+0x118/0x150 [ 824.141567][T18164] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.141578][T18164] kasan_check_range+0x2b0/0x2c0 [ 824.141591][T18164] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.141601][T18164] __asan_memcpy+0x40/0x70 [ 824.141612][T18164] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.141635][T18164] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 824.141661][T18164] ? ktime_get+0x3e/0x1f0 [ 824.141673][T18164] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 824.141689][T18164] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.141702][T18164] vivid_thread_vid_cap+0x8da/0x10d0 [ 824.141720][T18164] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 824.141734][T18164] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 824.141748][T18164] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 824.141765][T18164] ? __kthread_parkme+0x7b/0x200 [ 824.141775][T18164] ? __kthread_parkme+0x1a1/0x200 [ 824.141786][T18164] kthread+0x70e/0x8a0 [ 824.141798][T18164] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 824.141811][T18164] ? __pfx_kthread+0x10/0x10 [ 824.141822][T18164] ? _raw_spin_unlock_irq+0x23/0x50 [ 824.141837][T18164] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.141845][T18164] ? __pfx_kthread+0x10/0x10 [ 824.141856][T18164] ret_from_fork+0x439/0x7d0 [ 824.141867][T18164] ? __pfx_ret_from_fork+0x10/0x10 [ 824.141877][T18164] ? __switch_to_asm+0x39/0x70 [ 824.141895][T18164] ? __switch_to_asm+0x33/0x70 [ 824.141907][T18164] ? __pfx_kthread+0x10/0x10 [ 824.141918][T18164] ret_from_fork_asm+0x1a/0x30 [ 824.141934][T18164] [ 824.141938][T18164] [ 824.360596][T18164] The buggy address belongs to a 3-page vmalloc region starting at 0xffffc90003065000 allocated at vb2_vmalloc_alloc+0xef/0x340 [ 824.373789][T18164] The buggy address belongs to the physical page: [ 824.380192][T18164] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880328dadc0 pfn:0x328da [ 824.390241][T18164] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 824.397340][T18164] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 824.405913][T18164] raw: ffff8880328dadc0 0000000000000000 00000001ffffffff 0000000000000000 [ 824.414496][T18164] page dumped because: kasan: bad access detected [ 824.420887][T18164] page_owner tracks the page as allocated [ 824.426578][T18164] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 18163, tgid 18162 (syz.1.2757), ts 824103919896, free_ts 824103856987 [ 824.445053][T18164] post_alloc_hook+0x240/0x2a0 [ 824.449816][T18164] get_page_from_freelist+0x21e4/0x22c0 [ 824.455355][T18164] __alloc_frozen_pages_noprof+0x181/0x370 [ 824.461151][T18164] alloc_pages_mpol+0x232/0x4a0 [ 824.465996][T18164] alloc_pages_noprof+0xa9/0x190 [ 824.470928][T18164] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 824.476811][T18164] vmalloc_user_noprof+0xad/0xf0 [ 824.481741][T18164] vb2_vmalloc_alloc+0xef/0x340 [ 824.486586][T18164] __vb2_queue_alloc+0x9c2/0x15a0 [ 824.491603][T18164] vb2_core_reqbufs+0xc31/0x1420 [ 824.496533][T18164] __vb2_init_fileio+0x318/0xff0 [ 824.501489][T18164] vb2_core_poll+0x4c1/0x840 [ 824.506063][T18164] vb2_fop_poll+0x168/0x380 [ 824.510554][T18164] v4l2_poll+0x147/0x2c0 [ 824.514783][T18164] do_sys_poll+0x8c6/0x1070 [ 824.519273][T18164] __se_sys_ppoll+0x1ff/0x260 [ 824.523943][T18164] page last free pid 18163 tgid 18162 stack trace: [ 824.530421][T18164] __free_frozen_pages+0xbc4/0xd30 [ 824.535527][T18164] kasan_populate_vmalloc+0x1db/0x270 [ 824.540884][T18164] alloc_vmap_area+0xd62/0x14a0 [ 824.545718][T18164] __get_vm_area_node+0x1f8/0x300 [ 824.550723][T18164] __vmalloc_node_range_noprof+0x301/0x12f0 [ 824.556599][T18164] vmalloc_user_noprof+0xad/0xf0 [ 824.561522][T18164] vb2_vmalloc_alloc+0xef/0x340 [ 824.566351][T18164] __vb2_queue_alloc+0x9c2/0x15a0 [ 824.571355][T18164] vb2_core_reqbufs+0xc31/0x1420 [ 824.576272][T18164] __vb2_init_fileio+0x318/0xff0 [ 824.581193][T18164] vb2_core_poll+0x4c1/0x840 [ 824.585772][T18164] vb2_fop_poll+0x168/0x380 [ 824.590268][T18164] v4l2_poll+0x147/0x2c0 [ 824.594498][T18164] do_sys_poll+0x8c6/0x1070 [ 824.599028][T18164] __se_sys_ppoll+0x1ff/0x260 [ 824.603690][T18164] do_syscall_64+0xfa/0x3b0 [ 824.608187][T18164] [ 824.610493][T18164] Memory state around the buggy address: [ 824.616103][T18164] ffffc90003067f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.624144][T18164] ffffc90003067f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.632186][T18164] >ffffc90003068000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 824.640223][T18164] ^ [ 824.644295][T18164] ffffc90003068080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 824.652336][T18164] ffffc90003068100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 824.660381][T18164] ================================================================== [ 824.712532][T18164] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 824.719754][T18164] CPU: 0 UID: 0 PID: 18164 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 824.729556][T18164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 824.739605][T18164] Call Trace: [ 824.742896][T18164] [ 824.745820][T18164] dump_stack_lvl+0x99/0x250 [ 824.750392][T18164] ? __asan_memcpy+0x40/0x70 [ 824.754964][T18164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.760142][T18164] ? __pfx__printk+0x10/0x10 [ 824.764726][T18164] vpanic+0x281/0x750 [ 824.768705][T18164] ? rcu_is_watching+0x15/0xb0 [ 824.773457][T18164] ? __pfx_vpanic+0x10/0x10 [ 824.777959][T18164] ? preempt_schedule_irq+0xde/0x150 [ 824.783221][T18164] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 824.788921][T18164] ? preempt_schedule+0xae/0xc0 [ 824.793756][T18164] ? __pfx_preempt_schedule+0x10/0x10 [ 824.799105][T18164] panic+0xb9/0xc0 [ 824.802806][T18164] ? __pfx_panic+0x10/0x10 [ 824.807203][T18164] ? __pfx_panic+0x10/0x10 [ 824.811598][T18164] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.817219][T18164] check_panic_on_warn+0x89/0xb0 [ 824.822163][T18164] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.827793][T18164] end_report+0x78/0x160 [ 824.832021][T18164] kasan_report+0x129/0x150 [ 824.836506][T18164] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.842125][T18164] kasan_check_range+0x2b0/0x2c0 [ 824.847051][T18164] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.852665][T18164] __asan_memcpy+0x40/0x70 [ 824.857059][T18164] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 824.862510][T18164] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 824.868223][T18164] ? ktime_get+0x3e/0x1f0 [ 824.872541][T18164] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 824.878719][T18164] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.883940][T18164] vivid_thread_vid_cap+0x8da/0x10d0 [ 824.889216][T18164] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 824.894917][T18164] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 824.900792][T18164] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 824.907102][T18164] ? __kthread_parkme+0x7b/0x200 [ 824.912017][T18164] ? __kthread_parkme+0x1a1/0x200 [ 824.917023][T18164] kthread+0x70e/0x8a0 [ 824.921083][T18164] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 824.926782][T18164] ? __pfx_kthread+0x10/0x10 [ 824.931351][T18164] ? _raw_spin_unlock_irq+0x23/0x50 [ 824.936539][T18164] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.941717][T18164] ? __pfx_kthread+0x10/0x10 [ 824.946294][T18164] ret_from_fork+0x439/0x7d0 [ 824.950862][T18164] ? __pfx_ret_from_fork+0x10/0x10 [ 824.955959][T18164] ? __switch_to_asm+0x39/0x70 [ 824.960723][T18164] ? __switch_to_asm+0x33/0x70 [ 824.965482][T18164] ? __pfx_kthread+0x10/0x10 [ 824.970054][T18164] ret_from_fork_asm+0x1a/0x30 [ 824.974801][T18164] [ 824.978059][T18164] Kernel Offset: disabled [ 824.982365][T18164] Rebooting in 86400 seconds..