last executing test programs: 11.768832237s ago: executing program 3 (id=2054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0x0, 0x0, 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xdb) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000202010300000000000000000a000004440002"], 0x58}, 0x1, 0x0, 0x0, 0xc881}, 0x80800) 9.304621429s ago: executing program 3 (id=2067): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e080083"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x40000000, 0x34402) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x14fe}, 0x1ff, 0x5, 0x7, 0x0, 0x8000000000000002, 0x2, 0x8abd, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 8.408531603s ago: executing program 1 (id=2073): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000052000/0x4000)=nil, 0x4000, 0x4000001, 0x11, r0, 0x0) r1 = socket(0x10, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a80)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x200488c0}, 0x20000840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000180)=0xf) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa8e81) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000001a00)=[{{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x3}, 0x800}, {{&(0x7f0000001800)=@nfc_llcp, 0x80, &(0x7f0000001980)=[{&(0x7f0000001880)=""/247, 0xf7}], 0x1, &(0x7f00000019c0)=""/41, 0x29}, 0x7fff}], 0x2, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000001ac0)=[@out_dx={0x6a, 0x28, {0x69aa, 0x6, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x2c}}, @wr_crn={0x67, 0x20, {0x4, 0x6}}, @cpuid={0x64, 0x18, {0x2, 0x1000}}, @rdmsr={0x66, 0x18, {0xad7}}, @nested_load_code={0x12e, 0x4a, {0x0, "0f2285440f09430f01c50f680ded3300003016b805000000b98e3f68b20f01c1410f2225c4027d0eb295000000430f350f07"}}, @rdmsr={0x66, 0x18, {0x26d}}, @wr_drn={0x68, 0x20, {0x2, 0x4}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x5}, @wr_drn={0x68, 0x20, {0x3, 0x4}}, @wr_crn={0x67, 0x20, {0x2, 0x8ae6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x62, 0x4, 0x2, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x6c, 0x2}}, @out_dx={0x6a, 0x28, {0xd254}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x65b, 0x3, 0x5, 0x9}}, @set_irq_handler={0xc8, 0x20, {0x9d, 0x2}}], 0x262}) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000600)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) rmdir(&(0x7f0000001a80)='./file0\x00') r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r2, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c245451686164eff751e4df8995", 0xb9, 0x0, &(0x7f0000000280)=@caif, 0x80) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) 7.345009752s ago: executing program 1 (id=2078): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@delqdisc={0x128, 0x25, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0x7, 0xfff1}, {0xfff1, 0xb}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x4, 0x7aad, 0x8c, 0x1, 0x9, 0x8000, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xe7, 0x1, 0x9, 0x7, 0x2, 0x3, 0x401, 0x5}}, {0xe, 0x2, [0x5, 0x6, 0x80, 0x7f, 0x8001]}}, {{0x1c, 0x1, {0x4, 0x3, 0x1, 0xc2, 0x0, 0xe2, 0x0, 0x3}}, {0xa, 0x2, [0x2, 0x81, 0x9]}}, {{0x1c, 0x1, {0x20, 0x5, 0x6, 0x2, 0x1, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x55, 0x4, 0x3, 0x7, 0x2, 0x1000, 0x6}}, {0x4}}]}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x6, 0x5, 0x0, 0x1, 0x9fea}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xfd, 0xcbe, 0x3, 0x5, 0x0, 0x4}}, {0x4}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x4044850) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000001008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) 7.179347968s ago: executing program 1 (id=2080): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x100, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x1, 0x3e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) 7.029253118s ago: executing program 1 (id=2082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x400, 0x101, 0x1, 0xfffffffd, 0xffffff00}) ptrace(0x10, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0xa, 0x3a, {0x3a, 0x21, "97aa815508d6a9df01f37c5ed36fedbbcdb3aa0f79ac8404481d606ff502a261953f5969b1f91bd21a23a62b6b46a5901781304db9553ea1"}}, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2f}}) io_uring_enter(r3, 0x2def, 0x0, 0x20, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00O', @ANYRES16=r9, @ANYBLOB="010828bd7000fedbdf250c0000001800058088000100756470000600028008000400810000000000078000000400040000000000000000000780000003000b00000000000000000004001a00000000000000000004009a06000000000000000004000900000000000000000002000500000000000200be0000000000040064000000000000000000010002000000000002ff7f00000000000400be5b000000000000ea4b1a4d030aa5a7bafd91ddf7c1735d1a7b40e41a7751e93670a51ae0c58c944dcfc2b8c39ff3afd77f2312dce75febb1e76c1247f9bdb99b5de683a5508357604b7a55d46d38a80b9af345682e56cc52"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffc, 0x9b}, 0x1, 0x0, 0x0, 0x8000}, 0x8048800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7800, 0x80, 0x3, 0x6, {{0xe, 0x4, 0x3, 0x1c, 0x38, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@generic={0x44, 0x4, '$\\'}, @timestamp={0x44, 0x20, 0xad, 0x0, 0x8, [0x0, 0xffffffff, 0x9, 0x2, 0x4, 0x940, 0xfc2b]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000003c0)={'ip_vti0\x00', r10, 0x40, 0x7, 0xfffffb60, 0x1, {{0xd, 0x4, 0x0, 0xe, 0x34, 0x67, 0x0, 0x5, 0x4, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x9d, [@broadcast, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) 6.968008518s ago: executing program 4 (id=2083): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad69c9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb024687", 0x38}, {&(0x7f00000014c0)="4569d7f8db46e8f2b09d61a56d8e173367e721b701e44f3ba4805cfbb916f78f2da02c538c6cae96b71eedb4d90036eaf39526833502ba3cf6c82f3b70c0574d80eaa8b4d13d300b82cb6f5cfc2e261fe1f467df75254a6a86829583f507d65c1235d25684cef8948ac22faab6fae6b5da4dc4e7c5d455841ddc8258187ee9272b662cd3748d838bda1a2d7094f045d176d854214dd8e094b5025b91caebe468021f7a66d75d8224eebc8f45cc8a2969dace8cfb2c4605ddbca6dd5dbf777bd39bcecd56ed32e1478786763061f1a5b6e3f997edb2b10696bfd6a69bc97179ccdeade338a1a0b41fa309be82b3565ee10f462168b41783f5ec790335f7b716e3137f59d130f9d6988c6e44b1c4ad9d01272f7e58757370ea24c9cd4d1a9f7d4c8fd30b778b2d3ce5fd66072b04ecdae10b920d432dd52952d52b94e757624f457fa4669e181bc32c09ae936def46966920085cb9679b6a423a3fd214cb2b654ea44f51ff60bc84a8e15cb10fb92173faed54d9722065a7dca63c82dc1480e249cb217726913d1029e2fbbca13a9f17a12dbfa3db8000dabead908ce0edbdff785f4a8d9985dc8bcefa48b8bd7ccd316c02d157f7195fa5c74f796824917b312ad4ab995f2ca14e8cd413cb6d94fa08d0070b59134de68b99be3a4b7a50f85e9f535c0af78187b1374a52da970ef97fb80f169177375fb55ab115e0aece7767ac000c968f9a8ed39188c61b426a8e1d0cdb8e375fa2fdfff1f840b5a082d80e531c3c0bd14607b1151bad29f9d93d6e8dd64e0f69c70ee0beab7bb08b5db020fc9a40fd911646181198452830812c3a2537bcacd8bec24ce4e7aa4cfa0ca47bdcd2f80138ff508e1adf9ce43fa3e35ecd35c60753e4aff829293e586b26b0b0a09a1aa865dfcefc5efb93f15cdc4a6bd6dff2a5ad294b7906f112362c6292ed978cd5747518b00c5c8a1dec890f13dde16dc62903bfd047125190ccadc4532a44a1d527dcc612f4308a7e241f1f78310b7798925f3381266b69566be3eb7d22333634dfcea1d07166b4ebaadf6b96cad578a77d58cf611b6739a5e3a582f36282d88a7c68d4ba84a416415aad38f7e1427b8c07c3d69f6c8f386523dab9e561b9daa8e52492834486776e711792278ef14db42abe834d9e71ebc249f36b530a4d3ab986b1097b2e83c769fd63e1bc923042bca8b1a99a3b058b9b7b1fe8970f4ea5918eddd1955ad8522c5c11a7aaa5a20b515176ac703ab3e4ace9fedf2030eea0403d92802095f68f30695c580191bc33a75ed53b0921d289907b49bf2c90eb7b4691bdc9ed7783b585802672f9fb0ea0e98fdc1182f2469b5c31b8b474628130bfc589c04378286f039f85cf384d17987b4747416dee9b6d0d5a38a001c2fd2defbf239c44ab096725f8a683031e50f3da0f5fce7b8f1ff641cc989d6a0e291f054103345b3016b0f1636072b35f6453308195c87a82d31e7e66ec296a21b5ed14ec3465242b40a203d3b7d5c2b669c534bb320a1d1d03c1c3e9c110f1c7e14d58acab453484e8c3c65957ecea0c1a63cc31be11bfd6e098a817ccda4968923cd94b42407c2bc3cba6dee5ad05a4eadddcf131dad086531808cddee9b5fec2df1722977e5d8555600da6c33c4ead063cafa905a160df40723fbbc70d78fd2cfc3139741b541ab918b1c0fc75f952c7a8271e508015d15f2d017f8ccaeed5cd06a1218f2c9f9dd2e27f9cd49c134198483812a939b96da167c76ec63580d8e83241e127163dcbe92e5e6a37820bd8a1efd29de86f154a9c1b9d525a38709aaa25674f2810dbd81a3ce3cadbac7a4b7cef490900d37b6d82a67c9f27b39cf7013a7b0c48a8bdaa0d52429d85655b76994d7f7320b68b9095960ee6bf34f7f6ec9da4025d037c83d2ef6ca25457dac63f88cab07c0d619cbd8ea76bdb4a4e6de4a4df3505799563ec21f35650c3bb8be31e449c22e1ac0c6329ee8098cb0fbf7e93c20183b51e57fdc18a1f5f0577a74b7709d6a5e51cce7117a9001116479be8c0c361b380d0e3a6a970a29d839fa83fe8a5e2e30e5759a55593d1a8948448f7583704efe5daee248b8a1227377090e11e5718cdff6652817ecc7e7bf5cc02e1d985cb92caceaffcd2d124c6c7c73c0c9090161c30374f5579a9a7296412f753e7809066d6e799ff219cc3c453337e3a5ee023adfa0b3bbd88cefe82e7091fd9faa605312d3fe7bddbae59bffbe808dda0131f7de4f495f76a9005ebfdd88fa120e65c9cfff463ca30accee8839a29a5ff1451f48070fa7df5700ba9977e7bd561577c08ac8085634121889dbf8be605cfa92d7c5e4ab088d27c6d1cb802e7dbd5e106c47741c35e31", 0x689}, {&(0x7f0000000940)}, {0x0}, {0x0}, {&(0x7f0000000c00)}], 0x6}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80, 0x300}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) getdents64(r3, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) 5.859229491s ago: executing program 3 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0x0, 0x0, 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xdb) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000202010300000000000000000a000004440002"], 0x58}, 0x1, 0x0, 0x0, 0xc881}, 0x80800) 5.436764516s ago: executing program 0 (id=2089): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005001f00000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 4.88928356s ago: executing program 0 (id=2090): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x21, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x7000000, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@loopback, 0xfffffffe, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 4.54836436s ago: executing program 0 (id=2091): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000040)={{r0}, "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"}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001040), 0x40000, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001080), 0x7fffffffffffffff, 0x404500) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000010c0)={0x1, r3}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001100), 0x4) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001100), 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@gettfilter={0x2c, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0x7}, {0xfff4, 0xffe0}, {0x1, 0x8}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001240)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x100}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x8001}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x4, @private1, 0x10000}], 0xbc) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001240)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x100}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x8001}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x4, @private1, 0x10000}], 0xbc) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000001300)={@loopback, @loopback}, &(0x7f0000001340)=0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) sendfile(r3, r3, &(0x7f00000013c0)=0xff, 0x9) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001400)={'\x00', 0x1, 0x2, 0x80000001, 0x2, 0x100}) (async) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001400)={'\x00', 0x1, 0x2, 0x80000001, 0x2, 0x100, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001480)=0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f00000014c0)={r2, r2, 0xfc2}) (async) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f00000014c0)={r2, r2, 0xfc2}) io_setup(0x9, &(0x7f0000001500)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000001540)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000001540)={0x0, 0x80000, 0xffffffffffffffff}) fcntl$lock(r7, 0x24, &(0x7f0000001580)={0x2, 0x6, 0x9, 0x8000000000000000, r5}) r8 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f00000019c0)={0x4, 0x2c0, 0x300, &(0x7f00000015c0)=[0x9, 0xffffffffffff84da, 0x2, 0x7, 0x7, 0x401, 0x1, 0x1, 0xd21, 0x5d5, 0x40, 0x4, 0x4, 0x2, 0x1, 0x400, 0x8, 0x0, 0xf, 0x1, 0x477, 0x0, 0x9, 0x6, 0xd0000, 0x4, 0x2c0a08cb, 0xfffffffffffffbff, 0x9, 0x401, 0x7, 0xffffffff, 0x4, 0x6, 0x2, 0x200, 0x8, 0x80000001, 0x0, 0x7f, 0x7f, 0xa3d1, 0x5, 0x4, 0x7af06107, 0x480, 0x2, 0x3, 0x2, 0x101, 0x0, 0x0, 0x6, 0x5, 0x8001, 0x100000000000000, 0xfffffffffffff051, 0x7, 0x10000, 0x0, 0x5, 0x6, 0x2400000, 0x3ff, 0x8001, 0x2, 0xfffffffffffffff7, 0x5, 0x2, 0x400, 0x8000000000000001, 0x7, 0x0, 0x5, 0xffffffffffffffff, 0xaf, 0x2, 0x7b3f, 0xe02, 0x0, 0x0, 0x1, 0xfff, 0x7, 0xe, 0x8, 0x8000, 0x3, 0x6, 0x601, 0x1000, 0x6c85a1c1, 0x4, 0x5, 0x3ff, 0x10001, 0x8, 0x800, 0x0, 0x9, 0x1, 0x77, 0xff, 0x80000000, 0x1, 0x7ff, 0x7, 0xf, 0x2, 0x0, 0x0, 0x101, 0x8, 0x4, 0x0, 0xf, 0x3, 0xfff, 0x1, 0x0, 0xffff, 0x1, 0x7, 0x9, 0x2, 0x8831, 0x3, 0x8000000000000000]}) fsopen(&(0x7f0000001a00)='esdfs\x00', 0x1) (async) fsopen(&(0x7f0000001a00)='esdfs\x00', 0x1) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000001a40)={{r7}, "1fad6497909ea89c116940acefcc8095cd4abb162d2d1c3752a29c1b5c0b88543822401d672d29d1e6536e5be13a2da0e4c2df40b71917e91008b459420d770b35673cdbf5f8910aef64af449280ed6e64af62bd7bd7951feaec6ec397b6a5d1a0b5d65a9e7194637de9a6d77884a256e449ea6ef260dfa419d9c96319f302dfde45dd9ea2c6dbd5f52da1b81a02257108f2926e99a636df08f7bd487653c5340614e28c2051d4c99a59f6ab333ef6cb6c950c4082fcc36dfbe3d2228f6f27ed39b7b84d3b37f215467c1e268aa397543097c9e5352871aad5e6aea38af55bb038867cbc26e5d42d4175c16560c7d00cb231f54a81b413f35d3be9af0eb573a1f461e73139711a711e14a78c97a3ae7a0fc094d9bb11dcacb2a63bd921b4f1b10d408bb6a3c6684abbedb05af856975fb5b41c328e46f14a05e8b40ca574a1886e4cedad24cb617a2451f0ab7dc0c6546b8cfa54ba96851df0591cb46a791bab76add68cbfab1119c099854fce02ec50289604f1db792697b24669ca9373ad6f193be783610ed448e38dbe39b8679e2378729f852eb0f594c319063a15f3a459797213d8a4c495259d5779fdb4b095fb9182d5d9e177f84fba98d9217f0464ac2d3ca9ec56630a0e9bc891e19717db755749b831d85c1e1899fefa5a1bddd873d1a105f690b8f10174d4d4aac07435ad7850ed75d27a4ee099600937ffd45814b7d13139c41ffdbd3a46798a22ed3c35ac8dc89576a4eb63a3e6ee0bffd3a1ebdf4bf028dea0c89a2320853a6322b25a5a3f6031585a30fd5fd7b4b469505c1827f3e098594af88dd669ee42137009d33d07ab0ee4d0a09a430e573f5e4e73e601d0238bf36332978631060c80eb0ee9f632c404badbe264bb5cb4e15a5656247269b36c1f044b0dea21a24a05c1149132f87b9e9c79f7e45198e701472f72d38ab54d957dbfbbe4f8725e98bb02620809dc308eb03ae480120c1b10b45a8136b167dd744b76da7539607051a6215b49f617aa9c4d360723e8642baad599f7baba34e85bf7b43213463ab7155c404ee16663109f9cc698faf8311c4bfd86a83cc25bdc0dc7a643e93a8f0b3c76f6a0c5a9c312b335888cf9a00d6809f949da75ed64da04cd69ba31dfc10c79af9727d283a83126504f4a9d81d2c31030bfd2ebe1d6fb86162d887172203c157b3a5c0e4a1c3e614d6d3d56c8c019fcf78612fe352539e57ffe41bfafea9aefe20dc882a696aadf9dcf0fe53dc10b28c1729c1b2a82e867ca23269e526cb7ac37f2b60cd98f9c42b2104f51f69e2d48bfa74a82dd20a69f6afef31b35414465c10e84de5f8509072b02dcab3e1527c812d7aed9b6df69ef3ac253a419975ce912a1aaaaccb559b8ed720d8dbca32b04c553917484dd9a0cab217eebb1a79ee31173bd6f2c5ab9160bec48f52d4d75cd09009ac753793cb46432ec3551712fd1fb92813abe9835be84bff6fe8113b18b41daa3cd0153b06917409727c231eeff20d5bf31bfa596b260eb825330da1b2756870bf973889fc1de4250bf72557c8485656d4b3bce4bcd01650e21d17c583cead44e13e07b5602804b2a789c424a3ce933bcbf8bfebab0896a62e4a59ef69ac284f8a8cd97be8880656a3305c3fc6f4a74cdf65a8ab341c2fa208575072021fd930add00b928f58dab9e25bbe4e140b9c87a8789892e8a6f0b9937298d81a2b334f485af8311fc6b5d9963dd4522a8b320c0a40b7ae323cb1c270f01ce79b64068c61d14802178bd397ff7ae5fee31c6d9e5c36d007c3785a206cf8499a8e5138446472579f037d5c6d141688be630cf6b09a3a38308ecee48b3fe426d82e42c7dc933a29b0c80345f35305ff26557ac9c2499e5acf0fe9f1e64808ceddcc499178f7a66a7018d6792ffc88ee8ef7868a568715d83283b88763c49f08fa0790a2ea12fa718db1274454e48b1ddb8ce328a99f8d7f32e8c8a0d44cb85054c4486c4a9aa2366028719449c42a6b118a531ea567c51febd0fd8cb03eb05c9d32c2f1d5fafcd5511c96e4a6b93a6b21c9c5b59a254fa3e1b7563ca0267e5d4e0d9c7cbc7b0acc36ead89b1ca4922c47c63af7bb79b1c5a63aecc7a43d725e86de31b503ceb27f3e2ae47f1ba797bb97bb1a9f6759fadb0c2d4890c8a7696dca7aed8105bc3e3139fe73679be3c11c8fe6af49863a6cd2e811b3ab27210568f54f8087e45c0830d7342ae41edcc969e569485d72895e8fc54faf242ecf1d38bf62aab3e10a87780b89b201e0a15272ad1ee385687bcd520bd0c7aaf882c1504b5f879036dbbeb99388c6e74ac8dbb20619c0c8c6860c8dcd760d26a44d05b6368f9a8d6589b4c875c45cc213506fd74056c1a45f5684fba1963739b97cc1cc1d96f2c3ce3ca04f0c09b51298a7641824d58929c689b7d1823122f7c6c3d0ffeee0770aa6c83d050409cc08e439eaa3011ca0d848a52ae6773f818eb9670e8185e3fe7a8248532dae3e41436ae489a2157b857e9479675da34a4a8687730819cda7845b3d47559d5a64f802831455a781d60775398e54d129e0ff3d0b0e8ca926bb19fe81e132ade2bec79d4154f5679380819c923503b67303e5ed651ee9b105597fd4bf43c150a751133723a9b50c2bcbd0391017ea8f4b83e3e27ee8eafd010e5727e9eac36c55893d34cf0f0b8fc35856482a7113ff38626d52173effa3d048d19d5bf0bfcd45d0cbf079aa3c2c0ba1596cd6f3e473c86fc6431a2c1f4da389e84a9c05c0f504780f5736426b50c3a421495ad404e2d2c48128d737b05e2fb578733cc0fb4592b97587dc41d1ac8cc21910aa34476ffddcba90559c8a4f674978eb62eaeb9b1ef8c3cb42d3c2200be8f293e247584efe9bcb01722b3126e4d86d5b79814ec87a4a3ee14fb1ee29e3836d1e708ceb3754a091a8290171a3b51e52c3e0345a8bcbf27c1bd19d3ac47f61a2d57833a6d8e8df867bcab3a38c35d535855b44a441d157830194fcca816c1fe8e72eba1edd8dffe1dbee8d177f87095cd5f55e59148dbefb7fc630057ad3b047ed6256bdbb7e09246465c47800cf43d03a9432a1eb3353468c2ee0a8d51d28a64416ba80750ce504eacf96e2fb9eb6653a775e7bfffd8a61b6f46c9ecc6c871f50c66967dcd5dc2307e9f7a2a6a04b345815199d986b99abdbf1b2e9c667e08e4ef9494ec8bbafd029c4d208083c275f7eaa5efcbd344aaeddf0c573da9638edd841e7e68d3146228d4814afefb6febcb0c092965448b3ae53a8d63355fc6df233d52162d109ad3205a520b1cd1a5a9e13e6bd81ff3110b985d213a472b055f69b790b2ac1bb5d713572d01ec0b86dec351dcb5145172a12f1505465c907bb43c9feb2a2579c1bee0a74ad168828e06b262e7447793275f274f0343499559e7e86644a2f73058cebf67e52e93c25edbed9cea504a07a45a675b95b2c1b8140d0626f97e924ff1940bb9b1891ae3e9cfd5597e81b27c6102c288474a30eb76eef855251edb783d16cd09fef59afcac3bef93b99c5bd560310e206e587660ef6936ed93918c5fad8ebb31ae166ca1f398dea3fb906849977a049c400fe13b9858426729ed2c51cfa9db8fa000317548e7389de12ecfb0530ad68cfb3656383e8480794d5756918d9ec859b6934631b74e13ef4d077058a7f251e5786cd4e9f237b48482e1d7fcbebb11f226c530bcc3941598654a639ba8f28c41944f02aa9aaf1ce8c660a4fe0d22b951c917b4aa17516cd5b4d8b1c91cb0d3dbc52d6fa1b960eeba309ab9c19d41e1b7661e7e9b7a8525ebabed5fb757198cd93b927589dc8c3270d657ded7ff0c161396ce761e0c6d62ba703e9ca8c721ae5b86599fdbe17742c1fb6b59927b7fc0ab5abf43a080444e4d3ab667b767f412310a55a3d6012a1115ff95543c68a6776a68ef656a9df3127918b144c2941651a93b3c673e2b58d94a4b02e03799e626fe0b6fc9cca2ebffb84ee8ec04f8eb1922598cc7fae73df49f335efb2d728388750626a15beb8406d21227de102c4a5de38752f9c43a9b3da78439922a55aa8e9e05f9f0965fea215a744eb41ca6ac9a1d49636f934ba0183417ce1d77fed1c60d8b924b719566bc26112ca52f38f25d47b5ff777b893a8ebfebe1e84c9d3d0b25e7e2fe144b9a9e59934f8ecbcd359f03f1ae4a83fae43cb69d5708148f6b71badb279dfb67a0dd0e26eba850792e221c59f25ef2d3490d4ee595b75d67a7c9f82cefdc2de293d92a0672ff80f1a2cec3eea3559c8769aa92f032e7bf86275cf85f9d1702b1eec6fb65499cf996cf020d1d29a77978a4190cf7aa0035569fd00233551f500e01b158cbfe7f41395c6f6e483b5b40bb9a4125d72a602a1ac5f51718f3897335d6d1ae3b8f335b5e80a4f7ce7c8690c4217199639f868c9ee87c0cf9f4f3ed5c193f3937ed822aa45a46ceaee63588efa2514a47a1a084c6813b3b1e7bd8b87b843df962e67e7181d45dc143e2cb89f616e0097e68be32ce014b13dafb302fc99d2adcc65b39903eee228492bbccf14bff1f213a6a4b4d87de27c5c9216a0d17107ca20000f3b1061bac060addd137ab8488a46ecae9b673337feb330e9c75433f1ec127975fd40e3a838f269b91958dd04e09c5bf339cc2d35a35e26d3ecf22ac54567f4fe93ed91300978ad427f48ee35e9d5343219b05ade299db9447b4e7db5f8a4a9353c75705fa565cd23101c850c2acc32490fbc0f907c92e8bdbdc8409e87bdc3ee2c81f2df6ff6dbbc98a9e46ecd1438fcb9b02d5eb0ce633e72483d69b894aa7611ba2ef91b74961321f4636638a3b17241c11cb58523e77b2d774ef5ba03334a5986fdfa394c7e575bff6702371575d13f1f50a4a64e8e43db70efce9f2305d78ea7d2be4d366d4c06bcb0745ae1659868e3acd8d277d82522bdb6d5a946fef87f2f921fc712838b5b6ad304493701e78f182cd283899554f679e68ab9ad014fa22a8d07a35eaab8926b0d2fe0aa210e3fd111a606b7124b0dc2f2c29e259538b01d261d64be32cf039b35f62f2ad886478aa4bcddcbe27d08e946bf28588fc949bc927c93c8c39861afef429442001f1ba6f20fe274638001395a17ac81ec2a4819e8ebdf66c832863452f9bd9adc3fe68ef7c25569c84bd7b786442511adf88626a05e209358ead5fc89de392334bddb8bb73f2c40d68b24020f78f2e88bb595e78803aa18d99b86d72b51432ca945fc05d64f7bc885159aa96c71e5e008bb97172990118e16e7501d87f954c92b7e917d2f938dec759c21d840a407c9b99832ae9819c3b0eb20b42ce2cb8a13510744e74345c1aed01f1303aeb2aa67aef8ffac6e08f6c1a64df457e7e7229038e46c823f4e455311bdb52c4daaec465dba021eb339ef3263e16fbdc4f4e644ca5a112e0fa26a06d4e390849300163f2a03a6a935752d7b9905f7c131d0f614f71b207ce4913fd4a29afc9591cb551db80d600f5f2b024c2d7cd8ee4e4ab3f88525f6755f8c4a063ab534a0f9a851b289702d87cf014b02bc3794b5ed70196953c7a8e104d9ebd9d7d42943b27282d26871334beb6ca4e973f6a7a91e3a4525219b61958804a682d68753c775b31f170ac5c7eed5464647751dcf7f1839861eecc26bc475ea6e74cc892f9d87308dff4f4d38c0764b0823ffa780853e7957c94bfb594f641d3dab3c18a7f3229ccebd5daa8e32d17c9240062c1e7a05d5c82048ee1840410447751581bed416771a3867b79c3f408c84a2af186a65a0988c51deb6adbef795b1b7679"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x2000, 0x0) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x2000, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000002a80)={'\x00', 0x3d43, 0x8, 0xffffff29, 0x4, 0x9, r6}) syz_open_dev$dri(&(0x7f0000002b00), 0x5, 0x480000) landlock_create_ruleset(&(0x7f0000002b40)={0x8408, 0x2, 0x3}, 0x18, 0x1) (async) landlock_create_ruleset(&(0x7f0000002b40)={0x8408, 0x2, 0x3}, 0x18, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002b80)={'veth1_to_bond\x00', 0x2000}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002b80)={'veth1_to_bond\x00', 0x2000}) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000002bc0)=""/76) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000002c40)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002c80), 0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002c80), 0x80) 4.449856141s ago: executing program 4 (id=2092): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000005c0)="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", 0xa3f) ptrace(0x10, 0x1) r3 = socket(0x10, 0x80002, 0x0) bind$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x0, 0x2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f00000002c0)=@isdn={0x22, 0x8, 0x9, 0x10, 0x8}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="0b13deb86c0ea3dbb8113785f0225b353523fa22f1bd084b6ac6f984c0518de38366e29081ec7b8d1b18ee795f047f9346bae36ddf6b344a51aa10640ac6f6013ab74f5fc71f0c8b37d9b8a55aa32759e5bac150fe8819d0394f434d85a4202750df62dadc88dfa62bf7f19ff3be1409b5d410b4691fe650478ddfdee85472ce5e9b36987511e9c5e1c4b36468f0f0f52729502d527e696895867782db7d70cba92102688ebea054a0153c737cf43c073b3f5bc6099f988c81900ff52a28fedcb789a35eb3a699f1665dac4f75c8b6187c4f3f7bc66462e193405c9d16cd67969466cad14307ffc5868655c8d70d50aa07218d8d25d95f", 0xf7}, {&(0x7f0000000440)="d73f8e64094407611c8d920b677c8fb4e56998f9184f3bcc39695eb970aade6a157933ceace39e558205c33c31ce3be9b73b3c4a85fcfce7b26b49b4ed3835a82fe5fc0a5edcb8f5d56be5548d140d8ef63b7932049e02d61181a686f3faaf1d56a4d1927a7eb29135a2d2e550dc", 0x6e}], 0x2}, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) io_setup(0x2007, &(0x7f0000000980)=0x0) io_submit(r6, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) 3.819009014s ago: executing program 0 (id=2093): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = io_uring_setup(0x1148, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create1(0x0) r4 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='uid', &(0x7f0000000240)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x18000) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200488d0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003020000402505a1a440000102030109023b00010100400409040001030246000d0524cc0000052400ff010d240f01feffffff8000c30405f8ad251865b203e47d42b283e709058202000d0badced70d84d5d03bf196de8ff9020607b826af257c97c27861770910"], 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\x\xacK-^{', 0x3a, './file1'}, 0x3d) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) syz_open_procfs(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 3.805876568s ago: executing program 3 (id=2094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delqdisc={0x2c, 0x25, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xe}, {0xa, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x2c}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_misc(r4, &(0x7f0000000380)="c6b1eec6c637bf7195a4d0ab8e1d2f50edac9569a2738acb52f1eddffe2983d6f11c833c8222ebe78b999085e50d9927f3ff9e3b9e0fffb9b4b1cff5", 0x3c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000300)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a60f4f3766b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x3, 0x702, 0x40, 0x0, 0x10001, 0x2004cc, 0x2, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x2, 0x6, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x88582) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000005c0)={r9, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927bab22d0000b420a9c81f458dac00000000000000000000003b00000000000008000000000000000000000000001800", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000200)=""/147, 0x130000, 0x1000, 0x0, 0x3}, 0x20) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010100}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20048000) syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0xd00) socket(0x400000000010, 0x3, 0x0) 3.604203852s ago: executing program 1 (id=2095): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 3.343006249s ago: executing program 1 (id=2096): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e080083"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x40000000, 0x34402) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x14fe}, 0x1ff, 0x5, 0x7, 0x0, 0x8000000000000002, 0x2, 0x8abd, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 2.566007822s ago: executing program 3 (id=2097): clock_nanosleep(0x17, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000500)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200801, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r2 = syz_io_uring_setup(0x241d, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0x267}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x1000001, 0x0, 0x1, 0x0, 0x68) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p'], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r5 = add_key$user(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000001c0)='\x00\x00\x00', 0x3, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, &(0x7f0000000340)={0x4, 0x80000001, 0xe}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001e80)={'erspan0\x00', &(0x7f0000001dc0)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x4, 0xffff, {{0x25, 0x4, 0x1, 0x7, 0x94, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @broadcast, {[@rr={0x7, 0x17, 0x8f, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @remote]}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x17, 0x1d, [@dev={0xac, 0x14, 0x14, 0x40}, @remote, @broadcast, @local, @empty]}, @cipso={0x86, 0x10, 0x2, [{0x7, 0xa, "bb23f8d7c035a1ff"}]}, @generic={0x88, 0x8, "001f8b4054e9"}, @lsrr={0x83, 0x1f, 0x22, [@broadcast, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @rand_addr=0x64010100, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x3, [{@private=0xa010102, 0x3}, {@multicast2, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001f40)={'syztnl2\x00', &(0x7f0000001ec0)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x3, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x1, 0x80, 0x0, 0xe48b}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000002240)={0x11, 0x0, 0x0}, &(0x7f0000002280)=0x14) sendmmsg$inet6(r7, &(0x7f0000002680)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x1a30dfed, @empty, 0x5}, 0x1c, &(0x7f0000001d00)=[{&(0x7f00000006c0)="9ba66c0ceaeaac51145665fe85b25aa5fc2ef93f26d44560c55fb224935f7ea15e32ad685ef7ea1acf5857d9fea88b48115ab285c9cd4ae39ea3ac7707b0d276ab6e83ddf803401be57677e4626740bedffbe42c919201bfd66b42391d9fd5e1d7a0ac73fc1328fcb8f96132c5ab7d7a77abe61dfa481337df6c66a17d95ad92f91620e17b707cf60f804eca39df48d150fa5852576e1701312d21a149565bf6ae3e0e484872d8277e8a8370ef191b36f4a20a3a90c26b92dcb5c2432be9c043f80840fcbadc956023", 0xc9}, {&(0x7f00000007c0)="b90c7a9e7fe695b69201bfe525de6d5257a6bb73c90281cdc000560830b50e769a969ffe561cf05c831f7c527c8d26f3fb93fad1c6298f82f1c040ad3318a7da3d177fa97d268669175214d52da2951bd92b822c1dcbf30d3f40bd393eabe1998ab71c6c37d0b20dee4f3665d7bce89e6d14bae3912f2957c0eeed7559aa547642f844bf3330619e65a51a721d4d3ffe1fae165b0eafe20a", 0x98}, {&(0x7f0000000880)="38858cc4fbd271331b7d847daaebe8be54b798fc904fcfe6d4ac34b58f2c57a496d9edc5d400ba90661196cec030f1c284d5b47cf9f33afd339352a6598194041cdf9ba58cd2c64f901d55429eca51fbdd91939c3cb4912613033538b2bb9b5a7c9da2021696be9e1986b5fa4ea08d2b45ee9fcf188da280709aa8c5d717", 0x7e}, {&(0x7f0000000900)="0c78035b46978822946a573cafadb7b888501d31573158f4ad1bf7d3969b9d84c40b81cb88045ce61aed8a78f8f457a6acd55a96d8af3d6f8551c23013769b7bc6bc06200ea9ee967c2ed9e457cca8af72833af36f6d2fe001d1448067e4c263dd740ee700b0d5069ed7d2fcbe6674b905a4dbc5ed13c2e0669f3c4b8911f72ec9824bc5b17a54128a08ee09dfa5a5449837b1575b5013914d2aecdca1d5038dac0f71fa38da18f82f5fb97f5c773b433a8664cc84d2303cd59574c7c4700da7fb4d99df6034f8dc2e787f37eb8253db8721d4c32ba7a82731cac93eb1f24db4d7f3c662e8310b9ebfea53", 0xeb}, {&(0x7f0000000a00)="d239e9034480ac4350982fa79675be1d843ac63c6a09f8d573d06bf3fb1c462e9cec192d194db2a18d3761a2b3a0ae88d436420bc10c4b72674c97b7558896022d7939874fadb5484755ef5aea44548e547b18b96d14a2534dbc561b075531d25cc059340f5ec7ca1cb899fdfc99e5aed4d96580f9d5890e6c85fdf12ec79fe3373ff00367097afa829b302d5ac3bcff14a7d1ac7f19dc6dbc3f06ec09549e9de724d15e9e24f034a671de7d152e499cdee4ef79d13c0e77bc4a610038db2bd73ada4995aede0ff3bea92859b67a", 0xce}, {&(0x7f0000000b00)="94ed8efca6c4c992636c3633d96cdee32af43a4cb98d7790078c1182de7c6abbd9684b1ca6345fc225acae74b4277047044dd3831532cf06b8d27479808b9f65ac26afd8453a3daa622ffe67c76780a15aef42365e43f5090723124d7cb14b4b7b88bebaec140231ab8ca4407df1aa6566cadf48759e71866a82cf691123f07ecb1c3c9de56c5362ce0ae9a88ad280d4431ae8d2fab622c4e8651bf31eefedbe68385d8f56f550edb023f03aab479d665c2a82b25106e10219a1f5c4c4633d67fb4b72cff00dd7e09c89baa653b814a5c07d2c4258c81add4290c91d1dcb3918aee1d77eaccedfcb22a0b762", 0xec}, {&(0x7f0000000c00)="4c50672a6c40a93e58bd1ca6809fc0ee3b184e577dae8ee4fa5d80fa5574e0e203f239c953eab986a9f803a882bdeb640dacad40fffe33e28a1a0f7b1b618322ae531019a377f648f01050988a168a2afdf314becebcf04ac736178cf3d5f7c6e29f328a7b5d186b797ff7a3c52c3874289da8882197923bd2387fa24939ff0526d29d5c82e693bc29637655e3f2703f5f3c59904230a7a9104555d50364dff62968cf61bc4a29bdec9275a15f67a856bb9a8085f2cad029f32fdc60373a4d8cdad89652aa42f783874f53d791e9331bd3a968eb8ffdc46d2e9ad1f67d5bc791b6a1839a208439542dcff673fffae10d8fbe7aea40e4ab16d6335e981e4ef027f972e2f1354677ea98641f9c51471ccfccb2d161fff54e15c456ae4a6e2083f72d2c1cb660f8a811802a8bdbbe1273f58ad49eb8e2305776c6b0e40cfd205bd389de0b4b65f032d953689824a964fe62069dcce155b2efb29252108874b6eec5054689c29dddafaef3f08fce06611fe45acf2d2e314026aacee6b62b7d320b1b9f1dd7f441af0e22425e490181c6a3bade8e1eba02b64556e1d511ea0a0a62b744ac10dda574ffae62e2bace568e0344a24f17a7a6f788d31f1b90dd68c6e84ab1aaddb6e336bfda30164229dde88598086297503ebf44292f14f39454839399829d89b0612d6f4ad8b0693a07a14b455cd2de21808dd89b2338b89ffed17bb650a9a64ce5f7076fff3c4e51b70e3cae9032cf72472b97649bbc555a4898e5822cf73483b206d7502f654b730fd15deaf3789feba66ecf89ad09e5312e772619b60701e110ab4a34b9567a0129c95a74816ab689f833d0fefcf420fa92a5574bb26ec83922fff04870aff9912734a429dd549e06702cc1a90b74eae443e74322d693998119ebc7d0a2d28e38e8689618c84c5dd7f37592983c52da646304e9510deea8c232f9fe3666316e9c00943460ab586ade9995bec7e47a6faea34e54e6e3d5da9304bf62015216be5609a13b10e75933ff4d75729112afb88b62dcedac6ba5bf1937d27b6d8ca56ad687c5c2f3d6dc2dcbe109d77f902d866d9fe79875ae2b349a6ba94ac42d98da1806a6283650d02f9917b520fa9fdb9c868c049b178626847ab43fae1eb3ef93e6437bb4b82c95e3c480777405eb005cc9ced663148c7613c070dfc3fd58a37de42c1084b5d730f142c5bbc1216817ef985019f053e6635cebd06f1e69621b907242ae7424fd83d0c82f7014b59e1ef967b1aa2bd256fa0afffe193d41d4974fa9f7b7dccef7754c7bb271618d8187df8c59443b20f7d397c3c8254ee601d47684c96266efefdad0fe7421ac918977b9e253ef593aa6341a07bc4844b2b77349760fc332aeb611040cd32a6931e708413b8914bcda2ebf4e74af5c98b5f05cb13a520696cc3b8a60c2d07d285d439e8f75e0e97d069fe6b9d340e1b73a624bfcdcfba32c3bc5c5d3db92f37d69dfbe7642deeff0dae02d8712cfd78f5110e105796f119da37a1e77c33af868dd33a683e869d6153656b54644f1f0c14cb5553b636b1a1cc0e76a97944d487be63511437bb6a7c6d55f7e7dd639cc2bc15db669a6a78dc88185b6d5a41767d3b925b775d90a2730a11b310682ce06c1431bea9209390f951e4bf5e5b16dcea2ea4bb9c87e201dd093d5f8565c26fca51be4fb890955b3b8bc8bad5d90f699244ada21cf082921ad195eb714f2fd656a1c408208e117f718378e453b8b337ef24f27a2588c5e53e509424f921df79bfb0c0476412aa4202d85268c9641ea41f4d407cac1153f3b58a4bbe34c92bbcfb38f8eb13a90091549295f0ac55368ffa89bb4d1f99f2b4f891010a059d79af5f5d0809e1480e41affd733142dd4884169a201c96c68565dbd08493937af95b566f5839e7d0aad2ccaeb138481274dc96f527a3cc2da4b0490caec1b05023e970ca87f0f2a4a22dede17a68e17948c5ac7ca9dfa3cf5ab42a44fa70a318ae3c58687a8b99eb855bfe05d36fef587fa420cac4377b461e09c2322945fb6569131cbfb8ec89df58fa4d3a7c3c73a1c18e81e0d32d394da2246079f20e7992e00140286666b9312b79d45aa9c2e7f4363111a093b3ae9ba8c42ca6f31994439a471c0c6e7774b50433b21dc7f8eca448e59287c93e3039a6ee0402559be4f5f673827f5a97d4f8b77a52b477f8be1c0b468613c0748948d7f634ff05e7912819cadb1600ffd4809625dfe3f2114ac2c010326ddd8c1da9d95a1f42e968289dc3020f659feb203bf6eec29f893a9fb082cbe12aa9313135df42b3269d1cc58c1090403d19d7618bd7d773f5590bff698f6bb01ec66f652083912b9be452da1e66c1cabd8aba274ab0749e51e6d1fcd6b834ca3ba2d2ca1088f6af637127d43e777bb8fc2017fdb207cfc5c0a8c2bf3039e0c17010dd143549d557a3225419e74e944aa7cc49c7a3b67ebc78d55f68cb096d4ce273edc449e3ae83f61dca3b14e4a245535f3ce4423c921611665174ab207475b0b80b0f56b6d13cef7d4d5ebf14134740d781dec584d279dcbd2b74f46f88b830117798678ac24bf89ff937ede261e85a2bf0f2aab85989ade35990445008efcd902678aa65c4867418eb431a3c7fd102b541aec7ebec2261bba2dc3731d25f5fd24c0c842fac791e4dcdf3bb7d7e04ea15ccea31c733e549173971fc1c0b1a0b8a39716430d06884ff5e996908dec8b818a7b76362339eaecd272022928d5beaca1180bca09c5522f57a5ce6321e9422658aa364f34595509bb93a591b1e60e0afec35926240cc74825922e319aabb59711371b66337b6d20c13cd62aceb00e47770192267d0b3a6f97878070761c5b76e1dd95995e1a45765fd22bab9056d199ada72f24bfec44f5751b6ddce3d343e9d41ea5841041bb92be0ff104d96041a7e10cf70f9f54c6bdb36ce54f5afb12e96dab8c3d16f2ce5cb77fd6e1f04127c1dca9c9b6ee5007cc777ad2a9b7c055e4504eb7cde17e24e6cf59f8bffcf07aa40e57b45b5ffee880d9098d2bab451b9f7b734b3fe8250e1070bda0f020381d55eaf05c2380c32fb20b8519bb6e7212afb5eba079a10c45a964a1169894b4c9644264190bd71767816f5b4e334a1f2fbd5fa5d77ab732bde5d853adfb223394d5396c082b7a66c327d61354ae95b4b8ac811781d79e636258081b2a25ed9b971b8d63405479ec3ab24d622342467a88baeaebad996f632aa88e65f303bd1ad689a282e52504545257f3a3b9a2672018d31888c7ac211cf6d021681e0be9fbd451ba187242da8a74e0d35c83da4883dc06445c485efa66e11cb33f1d7b23282351c6b14ac6265553abff69cd200645771b8f21cc92d84f666de3c22cdaf112ccd59446b925e1af76f9bbba4a3af471fdf3c1fbb00282fccaba37294f85b62f47331902ebf764a8af0ea3ee9cc60ea5dbdc65149ce1bc1ba1654b10cb194a6a4b15173f91fdc1094dd45e9545de95a5df1d7e2fe3d7cefe3321af32cf6c58401d537d27e8d24148179ac4140b85db70d5f0a3dd887c6acef837bef5d41560366d5b43975b8fde26b358429eacb711781c2296049a648d63d80d24508c4b1705262ad3f5b5b65ec293824d5dc914edff402f34d9d1197f5a5d0deb98346b89752a169672afecb8e8651b63509ab9b79e93e589d67ea5bd47aa351da987528b57cb5307d682c66a35d579a434af93987f9f042e5b4ba8e16bccb37d2b145e76d8df24c3bf458c7f1c45db88509e10ad35fca0f339cbca679c413409adbf249a3618de00b80a4f5749ba7d271c78aa80c919b4dea54002e93304678e79d08c073666b7852ecb8a32c4e718df1eba82daa04f9c63cf0d737ce6ef1d2d575542ce1049ed75328a42d6b67e0c2b3c5e7ab274df98c7c867d1f85058875764052bbef8c6bfe0ff01093f998004bdd7b1428872e62247e411fd9c24d017fa5836416bdadd5f87af10727bf4e548687383d66a46c286cfab6f6de81ca76cd5fb58eb4781d47a9b3c054b80428133214047ca204221ac2d18494e4f1b416d378d7587554fb92149c92af791f8faf89840ebcecc1311b53fb46ff22a95de64df97376dad6e08428613804ffc33c3bf5637ce7c7f8fabf7ad8a6b66a875ed6644a65c870b8286b6b8667ca554db7c15918d8807a7773c5c3a481705b539656dbc44989cd3a31adf66286c66573dde04d05c9ad7d27e51f5d952c1a4d99831cadb0cf8ab95a676e3e21df5ee23f2e0abd8779149b3cc030ae825350c3fa071b6367bc215aaf9a7f99bb3c0cb79a75efb76f42b13d099d42bd47de1bd24e1fecc1489f1fcadd488fd62d8e1d306e9f82ead3f36cce64af85b8f6b87df71ae16947b38e0db17889a40adb77db1b5ffb66b80e081345c1c71785824b86f1a787a4029f655a7008d9d654489a827740373830be445860071715025e42db85b6a051f48258c03d4f33de4abf56aceb4bd172cc1a8ab256cee9e3c1c582c00a95a41ae588aa257f1aaa542695c77234f0d9151b7df5f13259e680f8d370b3aedff119abe19df135e73cb4333bd0f823a8ab209a26cd7301b73a8483bb1d14dd223f05b2fe5ba11b0b1a314b41ede40c11f74b91a791ca6e09147691dade75c8b6527e959979b2c80ccab03c3f3758c56f91d98d3ae2643dec3ad859edcb5a9fe7d0fed754780324a36515a5aa00713820bfadeeace0ccb9cfd70ebcd704c5db9f6072585038105dc2f386e8e19ad5d95efbb42d1d9b2924ff6206108148876010d860ed0850b3f2c23dc52785a2df8099b7c3718db39de1ae6b0e5495586444b451b6ddc4226b161ddd1f9003657a9ad40b26e92cbfbf74a96790d8f1a6253eb5c29ec271a94f2a74169397921a3ac432b8d63eea054c29a1356d35bb3aac63e907ac9df2c67b462dfbfb2d9b72e9c32e7f8a9daaae7ac2670280af8a3b0391719ef91a1d9d9859f24b52e5bbc01cd8095e34692fd6139a05ba9509f208587b6ae85b86076012829674800d09a533b38087ab876e19f43a3bc29e54cdbf82ac5bb67d9dd6b4bf9e7f9a213ae0a430ce7dc81df490f1e53b19c2c2aad1c44e1acb3d5d5eae37aa17112e05308c35f6f509aa1df9d174d35d1e03a2193c326edfd07a6f1bd94ee5d8bf6f0bc15c8e0021e6009fd02fb99dcd9014eb0d05a1852d9076791c009d7e7b2a2e413bd2a298c2e4473c9ac130e0cfc5a3960648715c858c4d52da673a7137fe5d727c50dcb1752a2c7aacda84ff00f19b9c15e3291be25bd6bb75a4447544f38789a5d03db1fcab21486ad24b36726d42fe59707708907370640ce67aebc9f6454d3ff627165f72e45b03a4cff45743d60d18688bcaa28c2433cd0355553e3469d13ad1643d49447003d98c08a26c69276d537dbd4403b49a239d255f4fdb66e005ca35b5e33b577c50946b59c666c8f41dec580581530d737b0c50320ce0554b1e1498b5d0500206df04e068a5b33b97cfe00f020ead47783fb763943cd027ce3fe14094f7ce61aa079a0e3d7cc20397c8e99ca72de7f2d4d7e44832ee4132a5ca951d86d9a5dd4e6525fcdd474e4238eb2830a88e382356af9cd2e18eb3c34c8c77a12e5abb71406a7065905f709a047df3c4e83cd25d9b19830d9e87c13ec6c321c8c2a9a59a1f483929322623bff1dc2f0e3472665e51ff0c8d3d61545f8cd301beeb11dcab9a6990cca5ef9531971e4ee61b65dc1201b6ccbce3fa687dd77d9f32a35ffd6b52531dc25f7ef663a1af8c658dd82650f10df69ff75ec0686444f8d6578072833f37d", 0x1000}, {&(0x7f0000000180)="1b", 0x1}, {&(0x7f0000001c00)="f8ff5394754ca40967e31f3a3b8b22be9d9ac64ed9aa141dcaad263dc12aaea55101ce1213b486d9cd67502fb3c27bb94c98542b58f24f2ff9dc157ce78a2b622fda0c3415384df47de4ebddbfc5c34d2b99dcd759ba010c968e63d7e0803f5509c595ba194e33a9d035da6e4686c5769775e379d87d241407", 0x79}, {&(0x7f0000001c80)="eacb77555c8ba0ffe2b25e06c43bf4b691eef95d5ca81c50a12d2fd7b494cab6c17d629d3c8c34de04a2c133b58d6a7bd4052012dbed196f756bd9afcc03d7e0d26f7f5931b831b609e1a0e64c0db4dddede2a4036f1ba7909ff88cbe9151abe4fbf409f", 0x64}], 0xa, &(0x7f0000001f80)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3d}, r8}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x16, 0x6, 0x0, 0x5, 0x0, [@private1, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r9}}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002040)="74bd9a95126cbb50ed8112cf83885a1fae8d8e96653a5b6dbcdd6c0da53bd9f9cb9c1b4fbd5ff8d7715b8bd982226ca836504113888b480673f71db9505bcbb2eec09d7ff9fca1bc3c7392cade507699f05533f2d1bb9285d38799189622d3fd74b5d1db103c7e0fa32f0841e4d183cf141c6f8159496cf1a965266e2a48795e4e7917bfdce3975f078e945c95d27443808fcc24ac83e25ba49be1dc81b299d4", 0xa0}, {&(0x7f0000002100)="b964b5c578c01435d86800ef403ac2032f6653698f6d8bd659208fddcab933b63d206e3672aca22ceec01eb97f12fd591f31d6366b226af3fb27985d531ace0278a9143bd141492d2cc7d16b57b51289994096508e3e19c03099bc2922eefd824e2a984bd89e9eb3e966dfdb4520b3ed0e58f7ff31f26d43c547def913ab521ee4da181dc11d35c95f51cb924b70668a6b3dbd6272f979234c2ceb670f5091050584167cbffcb9306ea978c85f199055258148ceb4f092fd1ad16988b7837d548a2d033ce5cf228f3b2b4214c505", 0xce}], 0x2, &(0x7f00000022c0)=[@rthdrdstopts={{0x120, 0x29, 0x37, {0x33, 0x20, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xe}, @ra, @ra={0x5, 0x2, 0xfff}, @enc_lim={0x4, 0x1, 0x81}, @generic={0x5, 0xc6, "fbad91297de2a3ca5496a3316f066ad2a8cd94a4e5307cd59c787442acee41c67dfabe7c134b17c1e9b548f0651ea8f00505d9bc640888b91c8af98fb3db73c204bc96ee30e5a00dd6eae253a18ffd79ac0de5f3fd7f23736b13d1a37c75a1e829088a9ab1c44f99542fd644855e62f4f400f2ff7c51ecacbc727e85332d19722fe8f7fe5998b690e53a8bfaad5eea6822f0c88c58121d05ec0ba6adaa278f46c026e8939c27aa9852b45453549be4d5d6312f1808fd9933f5185a3c7944b84cff193c1db426"}, @generic={0xd4, 0x2b, "8937441214b9c58871f8c33b2f3476043cdf6221f566e2a6825e0c77b1e44b4b222b6fcc61601ec2387d99"}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x84, 0x14, 0x0, 0x2, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x800}}, @hopopts={{0x70, 0x29, 0x36, {0x16, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @enc_lim={0x4, 0x1, 0x30}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x9, [0x3, 0x10000]}}, @pad1]}}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x25e8102bedf831a0, 0x1f, '\x00', [@generic={0x40, 0xee, "a98683c5760b978fd0bb3140be4cf0dbd6ee61b218dbfb1d356841e8e0f26e148435a1fef91f2d9a5628327ecdb7f9ef63aa9827443aef0ac37e5f916f8b287ac8a95f9c3e348963f6efd2e2498e2e8c9b81ff094fac46ec8d332345197cd730c4decfb35b73bd75d1e6779b813536c91e0b320e107e5d5d709fbb01a0ca06f2730b85e3f4181c3be89db89a42a98cba06b3dfa16babe7f2f96feca60398f30474cd4d076ad75db37f0fd669d16e081600b9fbcfb111f2cd0a6e02a5d24101c52dd66bf3c870b9085d1ee5ba9363fe849f50b97ca7250acb3e8c8051ad2780d41a1c5b9c96e75698b5a214584ad4"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xffff}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r10}}}], 0x3a0}}], 0x2, 0x4040044) shutdown(r7, 0x1) syz_emit_ethernet(0x256, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xa2e}, &(0x7f0000000100)=0x8) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x5100, 0x0) 2.032173004s ago: executing program 2 (id=2099): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffffffffffffffffffdff86dd60dfa5ef00082f0000000000000000000000000000000000ff02000000000000000000030000000100006558"], 0x0) 1.858709387s ago: executing program 2 (id=2100): pipe2(0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0xa000000, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.767717511s ago: executing program 4 (id=2101): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000156400007135550000000000bc202900000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1.517348337s ago: executing program 4 (id=2102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000100)}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000300)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x1, 0x40000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) 1.304481142s ago: executing program 3 (id=2103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r4) readlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r3) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x938, 0xffffffff}) setpriority(0x1, 0x0, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYBLOB="010003000000fbdbdf2525000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x84c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x337341fef48d726c}, @TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x5, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x40007fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x4, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe4, 0xc, 0x5, 0x3, 0x95]}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0xb, 0x1, 0x116f, 0x8, 0x4, 0x4, 0x40, 0x1, 0xf, 0x3ff, 0x3079, 0x200, 0x9, 0x8, 0xabce, 0x7, 0x400, 0x4, 0x6, 0xc, 0x8, 0x0, 0xd, 0x0, 0x2000000, 0x80000001, 0x2, 0x10001, 0x1, 0x1, 0x2, 0x5, 0xffffff81, 0x4, 0x7, 0x80000001, 0x8, 0x3ff, 0x3, 0x2, 0x1000, 0x40, 0x1000, 0x7, 0x7fff, 0x5, 0x8, 0x40, 0x7, 0x6, 0x5, 0x5, 0xe, 0x5, 0x6, 0x5, 0x6, 0x8001, 0x0, 0x4, 0x9, 0xa7, 0xe, 0x9, 0x8, 0x3, 0x1, 0xbd, 0x7, 0x6, 0x9, 0xd, 0x10, 0x4, 0x3, 0x8, 0x3, 0x8, 0x3, 0xf, 0x1000, 0x0, 0x3, 0x5, 0x40dc, 0x0, 0x89, 0x7, 0x3, 0x7, 0x40, 0x5, 0x4090000, 0x4, 0x200, 0x6, 0x7, 0x1, 0x5, 0x81, 0x1, 0x800, 0x3e, 0x80, 0x1de3, 0x9, 0x80000001, 0x5, 0x9, 0x4, 0xffffffff, 0x1a, 0x2, 0x2, 0x1, 0xff, 0x4, 0x0, 0x9, 0x5, 0x9, 0x2, 0x5, 0x3, 0x2, 0xffffffff, 0x7, 0x7773276c, 0x7f, 0x8000, 0x4, 0x2, 0xfffffffe, 0xd, 0xf11, 0xd, 0x9, 0x6, 0x5e7c4a39, 0x5, 0x6, 0x22f, 0x2, 0x6, 0x3, 0x6, 0x0, 0x1ff, 0x6, 0xfffffffc, 0xe1, 0x7, 0x4, 0x7ff, 0xa2, 0x5, 0x3, 0x4, 0x7ff, 0x6, 0x4, 0x10000, 0xfffffff8, 0x24, 0x2, 0x3, 0x5944, 0x1, 0x1, 0xe, 0x7, 0x0, 0xbe70, 0x2, 0x7, 0xb9, 0x10001, 0x0, 0xb, 0xffffffdf, 0x5, 0xa60, 0x4, 0xff, 0x2b, 0x8, 0xffffb2cb, 0x892, 0x9, 0xfffffac7, 0x2, 0x1, 0x0, 0x6, 0xc0ef, 0x40, 0x6, 0x8, 0x6, 0x3, 0x7f, 0x3, 0xfffffffc, 0x6, 0x0, 0x5, 0x42c3, 0x10000, 0x2, 0x1, 0x10000, 0x6, 0x2, 0x0, 0xe, 0x1, 0x1, 0xff, 0x8, 0x284, 0xcd4e, 0x9d, 0x0, 0xd6, 0xfffffffb, 0xd6df, 0x800, 0x71e, 0x5, 0x3ff, 0x5, 0xff, 0x2, 0x3, 0x9, 0x1, 0x3ff, 0x8, 0x9, 0x7, 0x9, 0xd, 0xca, 0x8001, 0x9, 0x6, 0x6, 0x7, 0x2, 0x7fffffff, 0x9, 0x3, 0x5, 0x3, 0x1]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x84c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7fffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xa}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.203434674s ago: executing program 2 (id=2104): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000040000000a"]) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000300)=0x5, 0x4) sendfile(r1, r1, &(0x7f0000000080), 0x4d9b6eaf) quotactl$Q_SYNC(0xffffffff80000102, 0x1000000, 0x0, 0x0) 971.752694ms ago: executing program 4 (id=2105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, r2}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(r6, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x3, 0x0, 0x0, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x8000, 0x2000, 0x0, 0x0, 0x0, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x8412060, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r6, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x7, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xddd2, 0x4, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x10000000) 768.893092ms ago: executing program 2 (id=2106): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x618, 0x0, 0x188, 0x338, 0x0, 0x338, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x0, 0xff000000], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [0x0, 0xffffffff], [0x0, 0xffffffff], [0x0, 0x100fffffe], 0x0, 0x58}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x10, 0x6}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x40000], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}, {0x5e, 0x98}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) 568.866126ms ago: executing program 2 (id=2107): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x1f0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x348, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @local, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x1c}, [0xff, 0x0, 0xff000000, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffff00, 0xff, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x27}, [0xff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@local, [0x0, 0x0, 0xffffffff, 0xffffffff], 0x2, 0x9, 0x11, 0x4e24, 0x4e21, 0x56, 0x4e22, 0x400, 0x2000}, 0x100, 0x12, 0x4e24, 0x4e20, 0x4e22, 0x4e23}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x78}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x5}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x1}, {0x2}}}, @common=@inet=@tos={{0x28}, {0x10, 0x6}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x478) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000101100fe8000000000000000000000000000bbfe808dffffffffffffff0000000000aa00030e22001090780203"], 0x0) 534.255262ms ago: executing program 0 (id=2108): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@delqdisc={0x128, 0x25, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0x7, 0xfff1}, {0xfff1, 0xb}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x4, 0x7aad, 0x8c, 0x1, 0x9, 0x8000, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xe7, 0x1, 0x9, 0x7, 0x2, 0x3, 0x401, 0x5}}, {0xe, 0x2, [0x5, 0x6, 0x80, 0x7f, 0x8001]}}, {{0x1c, 0x1, {0x4, 0x3, 0x1, 0xc2, 0x0, 0xe2, 0x0, 0x3}}, {0xa, 0x2, [0x2, 0x81, 0x9]}}, {{0x1c, 0x1, {0x20, 0x5, 0x6, 0x2, 0x1, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x55, 0x4, 0x3, 0x7, 0x2, 0x1000, 0x6}}, {0x4}}]}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x6, 0x5, 0x0, 0x1, 0x9fea}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xfd, 0xcbe, 0x3, 0x5, 0x0, 0x4}}, {0x4}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x4044850) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000003008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) 341.090752ms ago: executing program 0 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r2 = io_uring_setup(0x29a8, &(0x7f0000000000)={0x0, 0x4323, 0x8, 0x3, 0x41}) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0x39, 0x53, 0x10, 0xe41, 0x5057, 0x6ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x5, 0x0, 0xeb, 0x24, 0xe0}}]}}]}}, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0xb, @raw_data="700188a3752e694069f372d987d11c91113ff8522af484690a87e223e57c8f49f1c137bce5a75d9d831670fd0cb7a41ca60c6d1589168b934f55d0a1dd28f27a0084ba7e3a36299a3a090a8a2d9a82787dc3858e748cc2a93c9a222d9b59428c02759ad413be8807ed8aab36efb5e0b793f67669f06ee423e29a62e462908727b30cff3075ae189974020178e4c1520c95797d97d057fc9e14b7a6dab95a1fb52b6ecc19ac88226799f02f9951c651bfd43bc6e6006c698dae6cda7b837a6eed28bfd15d1ada5db1"}) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x47, 0x1}, 0x7) syz_usb_control_io$printer(r3, 0x0, 0x0) io_uring_enter(r2, 0x236f, 0x37b8, 0x80, &(0x7f0000000180)={[0x3fe000000000000]}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f00000001c0)=0xfff, 0x4) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fbdbdf25430000000c009900ff0700004e0000007900580018000000000000000c0058002d000000000000000c00580034000000000000263b0058004500000000000000212ac9d4efd367eea60bb8d8d2c1c55d1b96001648ea72534ea3d398ae1c8ffd36b3844a368c90be1b8be55809393d5189c2"], 0x50}, 0x1, 0x0, 0x0, 0x20000}, 0x20040800) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r7, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x34, 0x43, 0x107, 0xbffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x109}]}, @typed={0x8, 0x26, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x9c, 0x0, 0x0, @uid=r1}]}]}, 0x34}}, 0xc000) write$FUSE_NOTIFY_RESEND(r7, &(0x7f00000002c0)={0x14}, 0x14) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={r9, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000200)={r9, 0x0, 0x1, [0x85e]}, 0xa) 340.873596ms ago: executing program 2 (id=2110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf2500000000000000a608000500", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000200001000000000000000001021000000200000200a50000"], 0x1c}}, 0x4400000c) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_size', 0x800, 0x0) lseek(r8, 0xb, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2002}) 0s ago: executing program 4 (id=2111): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x20, 0xb, 0xa, {0xa, 0x31, "f8ef4d8aa9bd2c10"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0xa, "7ccd"}, @global=@item_4={0x3, 0x1, 0xb, "b8418890"}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x7, "f6ceee6b"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0xf61}}}}, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x40, 0x15, 0x11, "a8237c41cb7c17f432c909733b71995204"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000200)={0x20, 0x1, 0x24, "16c326021c0d81fc03c58738f9d3eec18914c60b844a60ec78e5be7ece8b92c434347ef1"}, &(0x7f0000000240)={0x20, 0x3, 0x1, 0xb8}}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183880, 0x23456}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183880, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) kernel console output (not intermixed with test programs): ce 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 422.433366][ T5922] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 422.445838][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.484342][T10610] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 422.501943][ T5922] hub 3-1:1.0: bad descriptor, ignoring hub [ 422.515203][ T5922] hub 3-1:1.0: probe with driver hub failed with error -5 [ 422.523622][ T5922] cdc_wdm 3-1:1.0: skipping garbage [ 422.529134][ T5922] cdc_wdm 3-1:1.0: skipping garbage [ 422.545633][ T5922] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 422.553126][ T5922] cdc_wdm 3-1:1.0: Unknown control protocol [ 422.700798][ T5895] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 422.834488][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 422.841177][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 422.847549][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 422.854190][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 422.860475][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 422.867113][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 422.874186][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 422.880812][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 422.881079][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 422.887226][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 422.898703][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 422.926193][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.963250][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.000171][ T5895] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 423.022706][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.063347][ T5895] usb 4-1: config 0 descriptor?? [ 423.071132][ T978] usb 3-1: USB disconnect, device number 21 [ 423.214447][T10610] vivid-007: disconnect [ 423.481923][ T5895] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 423.491581][T10635] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1418'. [ 423.495222][ T5895] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 423.507731][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1418'. [ 423.530501][ T5895] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 423.543027][ T5895] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 423.555929][ T5895] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 423.568966][ T5895] savu 0003:1E7D:2D5A.0014: unbalanced collection at end of report description [ 423.587411][ T5895] savu 0003:1E7D:2D5A.0014: parse failed [ 423.641724][ T5895] savu 0003:1E7D:2D5A.0014: probe with driver savu failed with error -22 [ 423.696913][ T5895] usb 4-1: USB disconnect, device number 43 [ 423.733402][T10631] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 423.753873][T10631] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 423.861070][ T5922] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 423.990728][ T5922] usb 1-1: device descriptor read/64, error -71 [ 424.241240][ T5922] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 424.384151][ T5922] usb 1-1: device descriptor read/64, error -71 [ 424.503622][ T5922] usb usb1-port1: attempt power cycle [ 424.903100][ T5922] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 424.944101][ T5922] usb 1-1: device descriptor read/8, error -71 [ 425.081256][T10606] vivid-007: reconnect [ 425.485705][ T5922] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 425.544518][ T5922] usb 1-1: device descriptor read/8, error -71 [ 425.661285][ T5922] usb usb1-port1: unable to enumerate USB device [ 426.370787][ T5922] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 426.532981][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.570752][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 426.582642][ T5922] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 426.588209][T10674] syzkaller1: entered promiscuous mode [ 426.597433][T10674] syzkaller1: entered allmulticast mode [ 426.610814][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.630699][ T5922] usb 5-1: Product: syz [ 426.638553][ T5922] usb 5-1: Manufacturer: syz [ 426.653801][ T5922] usb 5-1: SerialNumber: syz [ 426.742618][ T5922] usb 5-1: config 0 descriptor?? [ 426.769726][ T5922] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 426.792729][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 426.802217][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 426.845882][ T5922] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 426.877069][ T5922] usb 5-1: media controller created [ 426.921692][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.175276][ T5922] DVB: Unable to find symbol tda10046_attach() [ 427.194815][ T5922] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 427.223930][ T5922] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 427.710724][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 427.876877][ T24] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 427.890850][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.903146][ T24] usb 1-1: Product: syz [ 427.908701][ T24] usb 1-1: Manufacturer: syz [ 427.914243][ T24] usb 1-1: SerialNumber: syz [ 427.924080][ T24] usb 1-1: config 0 descriptor?? [ 427.959409][ T24] usb 1-1: selecting invalid altsetting 1 [ 427.968948][ T24] comedi comedi5: could not switch to alternate setting 1 [ 427.980871][ T24] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 428.002477][ T5904] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 428.173910][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.190893][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 428.203135][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 428.216298][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 428.246811][ T5904] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.262974][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.293981][ T5904] usb 3-1: config 0 descriptor?? [ 428.732150][ T5922] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 428.750553][ T5922] usb 5-1: USB disconnect, device number 30 [ 428.846668][ T5904] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 428.952699][T10713] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1442'. [ 429.085676][T10715] netlink: 'syz.3.1444': attribute type 11 has an invalid length. [ 429.093908][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 429.260164][T10722] loop8: detected capacity change from 0 to 1 [ 429.274821][T10722] Dev loop8: unable to read RDB block 1 [ 429.287150][T10722] loop8: unable to read partition table [ 429.300493][T10722] loop8: partition table beyond EOD, truncated [ 429.307331][T10722] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 429.491801][ T5922] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 429.638862][T10731] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 429.778403][ T5922] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 429.789818][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.816068][ T5922] usb 4-1: config 0 descriptor?? [ 429.829702][ T5922] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 430.028148][T10720] ipvlan1: entered promiscuous mode [ 430.035215][T10720] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1445'. [ 430.045552][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 430.066927][T10720] ipvlan1 (unregistering): left promiscuous mode [ 430.135762][ T5922] gspca_sn9c2028: read1 error -71 [ 430.141492][ T5922] gspca_sn9c2028: read1 error -71 [ 430.172537][ T5922] gspca_sn9c2028: read1 error -71 [ 430.184998][ T5922] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 430.849371][ T5922] usb 4-1: USB disconnect, device number 44 [ 431.066113][ T5904] usb 1-1: USB disconnect, device number 40 [ 431.081930][ T5922] usb 3-1: USB disconnect, device number 22 [ 431.385411][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 431.517399][T10752] netlink: 'syz.0.1455': attribute type 13 has an invalid length. [ 431.539437][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 431.569832][T10752] gretap0: refused to change device tx_queue_len [ 431.580165][T10752] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 432.574292][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 433.224602][T10794] ptrace attach of "./syz-executor exec"[5846] was attempted by "   8    \x09   [ 433.860688][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 434.622639][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.641071][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 434.652463][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 434.668059][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.697492][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.721862][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.767398][ T24] usb 4-1: config 0 descriptor?? [ 435.693353][ T24] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 435.890812][T10812] netlink: 'syz.0.1473': attribute type 21 has an invalid length. [ 435.914051][T10812] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1473'. [ 435.996772][T10811] netlink: 'syz.0.1473': attribute type 21 has an invalid length. [ 436.045750][T10811] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1473'. [ 436.094037][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 436.136012][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 436.147053][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 436.331135][T10823] IPv6: sit1: Disabled Multicast RS [ 436.449363][T10829] fuse: Unknown parameter '0x0000000000000003' [ 436.902194][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 436.925801][ T5922] usb 4-1: USB disconnect, device number 45 [ 437.077103][T10845] syzkaller1: entered promiscuous mode [ 437.083472][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 437.092485][ T24] usb 1-1: config 0 has no interface number 0 [ 437.101080][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 437.110482][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.139298][T10848] ptrace attach of "./syz-executor exec"[5846] was attempted by "   8    \x09   [ 437.201398][T10845] syzkaller1: entered allmulticast mode [ 437.313525][ T24] usb 1-1: Product: syz [ 437.317758][ T24] usb 1-1: Manufacturer: syz [ 437.323189][ T24] usb 1-1: SerialNumber: syz [ 437.330458][ T24] usb 1-1: config 0 descriptor?? [ 437.743705][ T24] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 437.756190][ T24] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 437.779466][ T24] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 437.980716][ T5895] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 438.159518][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 438.172448][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.198275][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.221697][ T5895] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 438.259903][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.307574][ T5895] usb 3-1: config 0 descriptor?? [ 438.335540][ T5895] hub 3-1:0.0: USB hub found [ 438.436837][T10857] loop8: detected capacity change from 0 to 1 [ 438.523884][T10857] Dev loop8: unable to read RDB block 1 [ 438.530415][T10857] loop8: unable to read partition table [ 438.539342][T10857] loop8: partition table beyond EOD, truncated [ 438.551450][T10857] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 438.570787][ T5904] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 438.579741][ T5895] hub 3-1:0.0: 1 port detected [ 438.826439][ T5904] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 438.844184][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.872445][ T5904] usb 4-1: Product: syz [ 438.876777][ T5904] usb 4-1: Manufacturer: syz [ 438.882248][ T5904] usb 4-1: SerialNumber: syz [ 438.900757][ T5904] usb 4-1: config 0 descriptor?? [ 438.914280][ T5904] hso 4-1:0.0: Not our interface [ 438.921805][ T5904] usb-storage 4-1:0.0: USB Mass Storage device detected [ 439.180256][T10866] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1491'. [ 439.212856][ T5904] hub 3-1:0.0: activate --> -90 [ 439.294299][ T5895] usb 4-1: USB disconnect, device number 46 [ 439.337697][T10869] x_tables: duplicate underflow at hook 3 [ 439.400481][T10871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.414888][T10871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.434369][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 439.616390][ T5904] usb 3-1-port1: config error [ 439.616748][ T5920] usb 3-1: USB disconnect, device number 23 [ 440.232530][T10893] ptrace attach of "./syz-executor exec"[5843] was attempted by "   8    \x09   [ 440.644428][ T5839] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 441.120852][ T5904] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 441.761085][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.786347][T10905] fuse: Unknown parameter '0x0000000000000003' [ 441.798320][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.830377][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 441.850696][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.884014][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.892685][ T5904] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.896057][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.926977][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.952908][ T5904] usb 5-1: config 0 descriptor?? [ 442.518369][ T5904] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 442.591688][ T5918] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 442.760680][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 442.775756][ T5918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 442.790458][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 442.804009][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 442.901614][T10919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.974502][T10923] netlink: 'syz.0.1509': attribute type 21 has an invalid length. [ 442.982895][T10923] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1509'. [ 442.995645][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.005867][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.020011][T10923] netlink: 'syz.0.1509': attribute type 21 has an invalid length. [ 443.028202][T10923] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1509'. [ 443.039243][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.054096][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.285243][ T5918] usb 4-1: GET_CAPABILITIES returned 0 [ 443.290980][ T5918] usbtmc 4-1:16.0: can't read capabilities [ 443.518227][ T5918] usb 4-1: USB disconnect, device number 47 [ 443.989237][ T5918] usb 5-1: USB disconnect, device number 31 [ 444.258112][T10953] netlink: 'syz.3.1512': attribute type 10 has an invalid length. [ 444.526697][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 444.628970][T10966] ptrace attach of "./syz-executor exec"[5843] was attempted by "   8    \x09   [ 445.004938][T10970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.125663][T10968] xt_hashlimit: Unknown mode mask 4000, kernel too old? [ 445.771532][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.777919][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.861780][T10970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.728160][T10997] netlink: 'syz.1.1522': attribute type 2 has an invalid length. [ 447.879795][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 447.879810][ T30] audit: type=1326 audit(1765676997.495:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11022 comm="syz.4.1533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc54f38f749 code=0x0 [ 448.092832][T11028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'. [ 448.321020][T11028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'. [ 448.346531][T11034] ptrace attach of "./syz-executor exec"[5843] was attempted by "   8    \x09   [ 449.446527][T11052] netlink: 'syz.0.1540': attribute type 1 has an invalid length. [ 450.068083][T11052] 8021q: adding VLAN 0 to HW filter on device bond7 [ 450.233935][T11063] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1544'. [ 450.268829][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1544'. [ 450.302290][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1544'. [ 450.435628][T11071] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 450.560745][ T5922] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 450.678462][T11071] 8021q: adding VLAN 0 to HW filter on device bond10 [ 450.775145][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.805724][T11077] ptrace attach of "./syz-executor exec"[5848] was attempted by "   8    \x09   [ 450.979315][ T5922] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 451.807650][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.817155][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 452.037812][ T5922] usb 5-1: SerialNumber: syz [ 452.117249][ T5922] usb 5-1: bad CDC descriptors [ 453.294098][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.355908][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.771963][T11100] ptrace attach of "./syz-executor exec"[5843] was attempted by "   8    \x09   [ 453.961827][T11102] loop4: detected capacity change from 0 to 7 [ 454.105711][ T5918] usb 5-1: USB disconnect, device number 32 [ 454.123130][ T5845] buffer_io_error: 61 callbacks suppressed [ 454.123148][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.137672][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.147125][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.155480][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.163927][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.173651][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.182118][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.190108][ T5845] ldm_validate_partition_table(): Disk read failed. [ 454.197054][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.205309][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.213209][ T5845] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.221238][ T5845] Dev loop4: unable to read RDB block 0 [ 454.226877][ T5845] loop4: unable to read partition table [ 454.233511][ T5845] loop4: partition table beyond EOD, truncated [ 454.241345][T11102] ldm_validate_partition_table(): Disk read failed. [ 454.250189][T11102] Dev loop4: unable to read RDB block 0 [ 454.256061][T11102] loop4: unable to read partition table [ 454.262626][T11102] loop4: partition table beyond EOD, truncated [ 454.269045][T11102] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 454.690534][ T5198] ldm_validate_partition_table(): Disk read failed. [ 454.705729][ T5198] Dev loop4: unable to read RDB block 0 [ 454.722472][ T5198] loop4: unable to read partition table [ 454.964654][ T5198] loop4: partition table beyond EOD, truncated [ 455.334622][T11115] sctp: [Deprecated]: syz.0.1559 (pid 11115) Use of int in maxseg socket option. [ 455.334622][T11115] Use struct sctp_assoc_value instead [ 455.504421][T11119] loop6: detected capacity change from 0 to 524288000 [ 455.591698][T11120] SET target dimension over the limit! [ 456.606856][T11135] netlink: 'syz.2.1564': attribute type 10 has an invalid length. [ 456.741550][T11135] syz_tun: entered promiscuous mode [ 456.766448][T11136] ======================================================= [ 456.766448][T11136] WARNING: The mand mount option has been deprecated and [ 456.766448][T11136] and is ignored by this kernel. Remove the mand [ 456.766448][T11136] option from the mount to silence this warning. [ 456.766448][T11136] ======================================================= [ 456.777368][T11135] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 457.961912][ T5918] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 458.133483][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.147499][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.170780][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 458.209890][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.590647][ T5918] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.651159][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.692418][ T5918] usb 3-1: config 0 descriptor?? [ 459.034966][T11162] netlink: 'syz.1.1569': attribute type 21 has an invalid length. [ 459.043511][T11162] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1569'. [ 459.054840][T11162] netlink: 'syz.1.1569': attribute type 21 has an invalid length. [ 459.062887][T11162] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1569'. [ 459.150132][ T5918] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 459.336868][ T5895] usb 3-1: USB disconnect, device number 24 [ 459.448119][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 459.633139][T11172] loop2: detected capacity change from 0 to 7 [ 459.648057][T11172] Dev loop2: unable to read RDB block 7 [ 459.658556][T11172] loop2: AHDI p2 p3 [ 459.663442][T11172] loop2: partition table partially beyond EOD, truncated [ 459.673624][T11172] loop2: p3 start 335544320 is beyond EOD, truncated [ 459.983143][T11187] netlink: 'syz.3.1579': attribute type 11 has an invalid length. [ 460.031585][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 460.098634][T11190] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 460.192985][T11190] 8021q: adding VLAN 0 to HW filter on device bond5 [ 460.540070][T11200] fuse: Unknown parameter '0x0000000000000003' [ 461.000716][ T5904] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 461.022254][T11205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.041851][T11205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.051983][T11205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.091485][T11205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.123867][T11205] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20003 [ 461.181791][ T5904] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.192700][ T5904] usb 4-1: config 0 has no interface number 0 [ 461.215616][ T5904] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 461.227546][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.260128][ T5904] usb 4-1: Product: syz [ 461.270637][ T5904] usb 4-1: Manufacturer: syz [ 461.281585][ T5904] usb 4-1: SerialNumber: syz [ 461.301790][ T5904] usb 4-1: config 0 descriptor?? [ 461.352673][T11215] snd_dummy snd_dummy.0: control 2:0:128:syz0:0 is already present [ 461.393172][T11215] snd_dummy snd_dummy.0: control 2:0:128:syz0:0 is already present [ 461.419786][T11215] snd_dummy snd_dummy.0: control 2:0:128:syz0:0 is already present [ 461.521731][ T5904] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 462.036849][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.047392][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.593534][T11230] netlink: 'syz.4.1592': attribute type 10 has an invalid length. [ 462.635758][T11230] syz_tun: entered promiscuous mode [ 462.669689][T11230] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 462.934522][T11242] IPv6: addrconf: prefix option has invalid lifetime [ 462.984876][T11244] syzkaller0: entered promiscuous mode [ 462.998220][T11244] netlink: 'syz.1.1599': attribute type 6 has an invalid length. [ 463.007868][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 463.591898][T11252] netlink: 'syz.1.1602': attribute type 2 has an invalid length. [ 463.600022][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 464.554691][T11263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.564308][T11263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.362019][T11272] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1607'. [ 465.421266][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1607'. [ 465.480487][T11272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1607'. [ 465.644045][T11278] netlink: 'syz.3.1608': attribute type 2 has an invalid length. [ 465.890744][ T5922] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 466.011304][T11286] loop2: detected capacity change from 0 to 7 [ 466.073788][ T5922] usb 5-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 466.134159][ T5922] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 466.314977][T11290] FAULT_INJECTION: forcing a failure. [ 466.314977][T11290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.332303][T11290] CPU: 0 UID: 0 PID: 11290 Comm: syz.0.1611 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.332329][T11290] Tainted: [L]=SOFTLOCKUP [ 466.332335][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.332345][T11290] Call Trace: [ 466.332352][T11290] [ 466.332360][T11290] dump_stack_lvl+0x189/0x250 [ 466.332386][T11290] ? __pfx____ratelimit+0x10/0x10 [ 466.332409][T11290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.332428][T11290] ? __pfx__printk+0x10/0x10 [ 466.332452][T11290] ? __might_fault+0xb0/0x130 [ 466.332489][T11290] should_fail_ex+0x414/0x560 [ 466.332514][T11290] _copy_from_user+0x2d/0xb0 [ 466.332531][T11290] __sys_bpf+0x1e3/0x860 [ 466.332555][T11290] ? __pfx___sys_bpf+0x10/0x10 [ 466.332588][T11290] ? ksys_write+0x22a/0x250 [ 466.332605][T11290] ? __pfx_ksys_write+0x10/0x10 [ 466.332624][T11290] __x64_sys_bpf+0x7c/0x90 [ 466.332644][T11290] do_syscall_64+0xfa/0xf80 [ 466.332668][T11290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.332684][T11290] ? clear_bhb_loop+0x60/0xb0 [ 466.332703][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.332718][T11290] RIP: 0033:0x7f506398f749 [ 466.332732][T11290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.332746][T11290] RSP: 002b:00007f50648fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.332764][T11290] RAX: ffffffffffffffda RBX: 00007f5063be5fa0 RCX: 00007f506398f749 [ 466.332775][T11290] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000015 [ 466.332786][T11290] RBP: 00007f50648fd090 R08: 0000000000000000 R09: 0000000000000000 [ 466.332796][T11290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.332805][T11290] R13: 00007f5063be6038 R14: 00007f5063be5fa0 R15: 00007f5063d0fa28 [ 466.332829][T11290] [ 466.576911][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.739891][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 466.777156][ T5922] usb 5-1: SerialNumber: syz [ 466.805203][T11286] Dev loop2: unable to read RDB block 7 [ 466.869168][T11286] loop2: unable to read partition table [ 466.888631][ T5922] usb 5-1: bad CDC descriptors [ 466.893266][T11286] loop2: partition table beyond EOD, truncated [ 466.934145][T11286] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 467.029015][T11298] fuse: Unknown parameter 'fd0x0000000000000003' [ 467.089458][T11299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.098808][T11299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.422364][T11301] tipc: Started in network mode [ 467.432956][T11301] tipc: Node identity 2e2b130640f7, cluster identity 4711 [ 467.451571][T11301] tipc: Enabled bearer , priority 0 [ 467.491298][T11302] syzkaller0: entered promiscuous mode [ 467.516532][T11302] syzkaller0: entered allmulticast mode [ 467.582820][T11301] tipc: Resetting bearer [ 467.601645][T11301] tipc: Resetting bearer [ 467.628888][T11301] tipc: Disabling bearer [ 468.043874][T11306] batadv_slave_1: entered promiscuous mode [ 468.363414][T11311] netlink: set zone limit has 4 unknown bytes [ 468.381697][ T5922] usb 5-1: USB disconnect, device number 33 [ 469.491112][ T5922] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 469.652963][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.672791][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.694875][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 469.716812][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.753532][ T5922] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.771886][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.813646][ T5922] usb 5-1: config 0 descriptor?? [ 470.266534][ T5922] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 470.291258][ T5920] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 470.461008][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 470.469827][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.501409][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.528176][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.554070][ T5920] usb 3-1: New USB device found, idVendor=3923, idProduct=0371, bcdDevice=2d.a1 [ 470.577036][ T5920] usb 3-1: New USB device strings: Mfr=252, Product=111, SerialNumber=0 [ 470.593989][ T5920] usb 3-1: Product: syz [ 470.599575][ T5920] usb 3-1: Manufacturer: syz [ 470.607409][ T5920] usb 3-1: config 0 descriptor?? [ 471.019826][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 471.028676][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 471.043958][ T5920] usb 3-1: USB disconnect, device number 25 [ 471.066636][T11366] fuse: Unknown parameter 'fd0x0000000000000003' [ 471.127655][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.136861][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.586869][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1640'. [ 471.600318][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 471.761979][T11374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1641'. [ 471.771432][T11374] openvswitch: netlink: Flow key attr not present in new flow. [ 472.066103][ T5920] usb 5-1: USB disconnect, device number 34 [ 473.895718][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1652'. [ 474.347048][T11418] program syz.1.1656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.733312][T11430] netlink: 'syz.2.1660': attribute type 1 has an invalid length. [ 474.939875][T11430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.427424][T11453] fuse: Unknown parameter 'fd0x0000000000000003' [ 476.524629][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.549526][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.641826][T11461] netlink: 'syz.3.1668': attribute type 2 has an invalid length. [ 476.849139][T11467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1671'. [ 477.756338][T11482] netlink: 'syz.2.1674': attribute type 4 has an invalid length. [ 478.300694][ T978] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 478.540720][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 478.599762][ T978] usb 3-1: config 0 has no interfaces? [ 478.618802][ T978] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 478.636232][ T978] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 478.650121][ T978] usb 3-1: Manufacturer: syz [ 478.665401][ T978] usb 3-1: config 0 descriptor?? [ 480.375082][T11525] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1687'. [ 480.510694][ T5920] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 480.621727][T11533] loop8: detected capacity change from 0 to 1 [ 480.629313][ T5882] Dev loop8: unable to read RDB block 1 [ 480.635997][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.651711][ T5882] loop8: unable to read partition table [ 480.671649][ T5882] loop8: partition table beyond EOD, truncated [ 480.678776][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.679458][T11533] Dev loop8: unable to read RDB block 1 [ 480.713019][T11533] loop8: unable to read partition table [ 480.713655][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.732094][T11533] loop8: partition table beyond EOD, truncated [ 480.738469][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 480.750195][T11533] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 480.759846][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 480.770482][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 480.817818][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 480.845488][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.868744][ T5920] usb 5-1: config 0 descriptor?? [ 481.290249][ T5920] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 481.340001][ T5895] usb 3-1: USB disconnect, device number 26 [ 482.070227][T11549] bond3: option mode: unable to set because the bond device has slaves [ 482.089313][T11549] bond3: (slave macvlan4): Error -98 calling set_mac_address [ 482.591081][ T5920] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 482.744324][ T5920] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 482.753199][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.765298][ T5920] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 482.775305][ T5920] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 482.783925][ T5920] usb 3-1: Manufacturer: syz [ 482.791786][ T5920] usb 3-1: config 0 descriptor?? [ 482.882506][ T5920] rc_core: IR keymap rc-hauppauge not found [ 482.888621][ T5920] Registered IR keymap rc-empty [ 482.905318][ T5920] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 482.934457][ T5920] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input46 [ 483.017646][ T5920] usb 5-1: USB disconnect, device number 35 [ 483.217350][ C1] igorplugusb 3-1:0.0: receive overflow, at least 13 lost [ 483.429631][ T5920] usb 3-1: USB disconnect, device number 27 [ 483.872796][ T30] audit: type=1326 audit(1765677033.435:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce458f749 code=0x7ffc0000 [ 483.937142][ T30] audit: type=1326 audit(1765677033.435:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce458f749 code=0x7ffc0000 [ 484.037479][ T30] audit: type=1326 audit(1765677033.435:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2ce458f749 code=0x7ffc0000 [ 484.112445][T11597] ptrace attach of "./syz-executor exec"[5847] was attempted by "   8    \x09   [ 484.141093][ T30] audit: type=1326 audit(1765677033.435:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce458f749 code=0x7ffc0000 [ 484.299998][ T30] audit: type=1326 audit(1765677033.435:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce458f749 code=0x7ffc0000 [ 484.325297][ T30] audit: type=1326 audit(1765677033.435:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2ce458f749 code=0x7ffc0000 [ 484.826644][ T30] audit: type=1326 audit(1765677033.435:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce458f749 code=0x7ffc0000 [ 484.994871][ T30] audit: type=1326 audit(1765677033.435:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ce458df90 code=0x7ffc0000 [ 485.017457][ T5895] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 485.136625][ T30] audit: type=1326 audit(1765677033.435:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce458f749 code=0x7ffc0000 [ 485.187072][ T30] audit: type=1326 audit(1765677033.435:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ce458f749 code=0x7ffc0000 [ 485.254841][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 485.266560][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 485.281386][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 485.332131][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.385953][ T5895] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.474429][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.495543][ T5895] usb 3-1: config 0 descriptor?? [ 485.948012][ T5895] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 487.221051][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 487.258426][T11624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1721'. [ 487.516653][ T5918] usb 3-1: USB disconnect, device number 28 [ 488.244892][T11636] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1724'. [ 488.279275][T11629] 8021q: adding VLAN 0 to HW filter on device bond8 [ 488.705491][T11650] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 489.145981][T11655] pimreg: entered allmulticast mode [ 489.160086][T11653] netlink: 'syz.0.1729': attribute type 13 has an invalid length. [ 489.319814][T11653] gretap0: refused to change device tx_queue_len [ 489.340412][T11653] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 489.381615][T11658] pimreg: left allmulticast mode [ 490.050741][ T978] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 490.223610][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.259441][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 490.311845][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 490.371684][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.405391][ T978] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.428029][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.470517][ T978] usb 5-1: config 0 descriptor?? [ 491.139759][ T978] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 491.181959][T11679] loop4: detected capacity change from 0 to 7 [ 491.197375][ T5882] buffer_io_error: 52 callbacks suppressed [ 491.197390][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.232539][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.259553][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.288470][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.307343][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.355648][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.387304][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.581790][ T5882] ldm_validate_partition_table(): Disk read failed. [ 491.588460][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.676690][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.710888][ T5882] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.739286][ T5882] Dev loop4: unable to read RDB block 0 [ 491.759724][ T5882] loop4: unable to read partition table [ 491.766854][ T5882] loop4: partition table beyond EOD, truncated [ 491.790168][T11679] ldm_validate_partition_table(): Disk read failed. [ 491.809626][T11679] Dev loop4: unable to read RDB block 0 [ 491.820700][T11679] loop4: unable to read partition table [ 491.854718][T11679] loop4: partition table beyond EOD, truncated [ 491.880700][T11679] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 492.074261][ T5198] ldm_validate_partition_table(): Disk read failed. [ 492.094284][ T5198] Dev loop4: unable to read RDB block 0 [ 492.116985][ T5198] loop4: unable to read partition table [ 492.140745][ T5198] loop4: partition table beyond EOD, truncated [ 492.175047][T11691] loop2: detected capacity change from 0 to 7 [ 492.215652][ T5198] Dev loop2: unable to read RDB block 7 [ 492.240313][ T5198] loop2: AHDI p1 p2 [ 492.260736][ T5198] loop2: partition table partially beyond EOD, truncated [ 492.278439][ T5198] loop2: p1 start 1700753509 is beyond EOD, truncated [ 492.297852][T11691] Dev loop2: unable to read RDB block 7 [ 492.317286][T11691] loop2: AHDI p1 p2 [ 492.321758][T11691] loop2: partition table partially beyond EOD, truncated [ 492.322307][T11698] loop8: detected capacity change from 0 to 1 [ 492.329271][T11691] loop2: p1 start 1700753509 is beyond EOD, truncated [ 492.354845][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 492.374594][T11698] Dev loop8: unable to read RDB block 1 [ 492.382362][ T5198] Dev loop2: unable to read RDB block 7 [ 492.394813][T11698] loop8: unable to read partition table [ 492.399348][ T5198] loop2: AHDI p1 p2 [ 492.409861][ T5198] loop2: partition table partially beyond EOD, truncated [ 492.419687][ T5198] loop2: p1 start 1700753509 is beyond EOD, truncated [ 492.437622][T11698] loop8: partition table beyond EOD, truncated [ 492.454364][ T5198] Dev loop2: unable to read RDB block 7 [ 492.455400][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.466876][ T5198] loop2: AHDI p1 p2 [ 492.479146][ T5198] loop2: partition table partially beyond EOD, truncated [ 492.483839][T11698] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 492.504085][ T5198] loop2: p1 start 1700753509 is beyond EOD, truncated [ 492.521645][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.622818][ T5198] Dev loop2: unable to read RDB block 7 [ 492.634063][ T5198] loop2: AHDI p1 p2 [ 492.648247][ T5198] loop2: partition table partially beyond EOD, truncated [ 492.668738][ T5198] loop2: p1 start 1700753509 is beyond EOD, truncated [ 492.854077][ T5918] usb 5-1: USB disconnect, device number 36 [ 492.938241][ T5198] Dev loop2: unable to read RDB block 7 [ 492.960658][ T5198] loop2: AHDI p1 p2 [ 492.964639][ T5198] loop2: partition table partially beyond EOD, truncated [ 492.985307][ T5198] loop2: p1 start 1700753509 is beyond EOD, truncated [ 493.037316][T11720] netlink: 'syz.3.1744': attribute type 10 has an invalid length. [ 493.048068][T11720] batman_adv: batadv0: Adding interface: netdevsim0 [ 493.081862][T11720] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.108118][T11720] batman_adv: batadv0: Interface activated: netdevsim0 [ 493.334767][T11726] geneve3: entered promiscuous mode [ 493.364583][T11726] geneve3: entered allmulticast mode [ 493.861597][ T5198] Dev loop2: unable to read RDB block 7 [ 493.867413][ T5198] loop2: AHDI p1 p2 [ 493.871733][ T5198] loop2: partition table partially beyond EOD, truncated [ 493.879131][ T5198] loop2: p1 start 1700753509 is beyond EOD, truncated [ 494.246235][T11729] 8021q: adding VLAN 0 to HW filter on device bond6 [ 494.572953][T11739] FAULT_INJECTION: forcing a failure. [ 494.572953][T11739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.619675][T11739] CPU: 1 UID: 0 PID: 11739 Comm: syz.2.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.619702][T11739] Tainted: [L]=SOFTLOCKUP [ 494.619708][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.619717][T11739] Call Trace: [ 494.619724][T11739] [ 494.619731][T11739] dump_stack_lvl+0x189/0x250 [ 494.619756][T11739] ? __pfx____ratelimit+0x10/0x10 [ 494.619778][T11739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.619797][T11739] ? __pfx__printk+0x10/0x10 [ 494.619829][T11739] should_fail_ex+0x414/0x560 [ 494.619855][T11739] _copy_to_user+0x31/0xb0 [ 494.619873][T11739] simple_read_from_buffer+0xe1/0x170 [ 494.619896][T11739] proc_fail_nth_read+0x1b3/0x220 [ 494.619914][T11739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.619933][T11739] ? rw_verify_area+0x2a6/0x4d0 [ 494.619957][T11739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.619975][T11739] vfs_read+0x200/0xa30 [ 494.619988][T11739] ? fdget_pos+0x247/0x320 [ 494.620011][T11739] ? __pfx___mutex_lock+0x10/0x10 [ 494.620035][T11739] ? __pfx_vfs_read+0x10/0x10 [ 494.620057][T11739] ? __fget_files+0x2a/0x420 [ 494.620080][T11739] ? __fget_files+0x3a0/0x420 [ 494.620098][T11739] ? __fget_files+0x2a/0x420 [ 494.620124][T11739] ksys_read+0x145/0x250 [ 494.620140][T11739] ? __pfx_ksys_read+0x10/0x10 [ 494.620157][T11739] ? do_syscall_64+0xbe/0xf80 [ 494.620183][T11739] do_syscall_64+0xfa/0xf80 [ 494.620207][T11739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.620222][T11739] ? clear_bhb_loop+0x60/0xb0 [ 494.620241][T11739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.620256][T11739] RIP: 0033:0x7fe99198e15c [ 494.620271][T11739] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 494.620284][T11739] RSP: 002b:00007fe9928f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.620299][T11739] RAX: ffffffffffffffda RBX: 00007fe991be5fa0 RCX: 00007fe99198e15c [ 494.620311][T11739] RDX: 000000000000000f RSI: 00007fe9928f40a0 RDI: 0000000000000009 [ 494.620321][T11739] RBP: 00007fe9928f4090 R08: 0000000000000000 R09: 0000000000000000 [ 494.620330][T11739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.620339][T11739] R13: 00007fe991be6038 R14: 00007fe991be5fa0 R15: 00007fe991d0fa28 [ 494.620363][T11739] [ 495.420792][T11754] random: crng reseeded on system resumption [ 496.210695][ T5922] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 496.225281][T11765] fuse: Bad value for 'group_id' [ 496.231810][T11763] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1760'. [ 496.259282][T11765] fuse: Bad value for 'group_id' [ 496.283607][T11767] netlink: 'syz.1.1760': attribute type 21 has an invalid length. [ 496.320399][T11767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1760'. [ 496.387938][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.413809][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 496.450667][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 496.481171][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.520933][ T5922] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.570893][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.592669][ T5922] usb 5-1: config 0 descriptor?? [ 496.671528][T11772] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1758'. [ 496.985779][T11781] loop2: detected capacity change from 0 to 7 [ 496.993720][ T5882] Dev loop2: unable to read RDB block 7 [ 497.001193][ T5882] loop2: unable to read partition table [ 497.007293][ T5882] loop2: partition table beyond EOD, truncated [ 497.014952][T11781] Dev loop2: unable to read RDB block 7 [ 497.017570][ T5922] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 497.026781][T11781] loop2: unable to read partition table [ 497.047487][T11781] loop2: partition table beyond EOD, truncated [ 497.060595][T11781] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 497.241706][ T129] usb 5-1: USB disconnect, device number 37 [ 497.443553][T11789] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[11789] [ 498.162551][T11803] fuse: Bad value for 'group_id' [ 498.193304][T11803] fuse: Bad value for 'group_id' [ 498.566703][ T129] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 498.638034][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1776'. [ 498.751084][T11814] netlink: 'syz.3.1778': attribute type 10 has an invalid length. [ 498.763114][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 498.792834][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 498.818866][T11818] loop2: detected capacity change from 0 to 7 [ 498.848269][T11818] Dev loop2: unable to read RDB block 7 [ 498.854127][ T129] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 498.854160][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.854184][ T129] usb 3-1: Product: syz [ 498.854201][ T129] usb 3-1: Manufacturer: syz [ 498.854218][ T129] usb 3-1: SerialNumber: syz [ 498.889783][ T129] usb 3-1: config 0 descriptor?? [ 498.905608][T11818] loop2: AHDI p2 p3 [ 498.914316][T11818] loop2: partition table partially beyond EOD, truncated [ 498.955710][T11818] loop2: p3 start 335544320 is beyond EOD, truncated [ 499.426466][ T5922] usb 3-1: USB disconnect, device number 29 [ 499.613683][ T129] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 499.638026][ T129] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 499.862094][T11824] bond6: option mode: unable to set because the bond device is up [ 500.095365][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1784'. [ 500.124779][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1784'. [ 500.374195][T11843] fuse: Bad value for 'group_id' [ 500.380466][T11843] fuse: Bad value for 'group_id' [ 500.873775][T11858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1792'. [ 500.899220][T11858] openvswitch: netlink: Flow key attr not present in new flow. [ 500.907055][ T978] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 501.100813][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 501.109794][ T978] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 501.119704][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.132601][ T978] usb 3-1: Product: syz [ 501.145496][ T978] usb 3-1: Manufacturer: syz [ 501.161930][ T978] usb 3-1: SerialNumber: syz [ 501.179431][ T978] usb 3-1: config 0 descriptor?? [ 501.196607][ T978] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 501.217493][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 501.239989][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 501.262971][ T978] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 501.294352][ T978] usb 3-1: media controller created [ 501.336379][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.384243][ T978] usb 3-1: selecting invalid altsetting 7 [ 501.393581][ T978] cxusb: set interface failed [ 501.412821][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 501.525005][ T978] DVB: Unable to find symbol lgdt330x_attach() [ 501.543977][ T978] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 501.589413][T11863] netlink: 'syz.1.1793': attribute type 11 has an invalid length. [ 501.599561][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 501.674418][ T24] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 501.675213][ T5904] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 501.705617][ T24] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 501.710461][ T978] rc_core: IR keymap rc-dvico-portable not found [ 501.724616][ T978] Registered IR keymap rc-empty [ 501.730213][ T24] usb 1-1: USB disconnect, device number 41 [ 501.737492][ T978] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 501.753986][ T978] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input50 [ 501.765176][ T5904] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 501.819205][ T5904] usb 4-1: USB disconnect, device number 48 [ 501.825456][ T978] dvb-usb: schedule remote query interval to 100 msecs. [ 501.853417][ T978] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 501.947618][ T978] usb 3-1: USB disconnect, device number 30 [ 502.170663][ T5904] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 502.181446][T11872] Cannot find add_set index 0 as target [ 502.233315][ T978] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 502.329900][T11876] netlink: 'syz.4.1799': attribute type 11 has an invalid length. [ 502.406197][T11878] SET target dimension over the limit! [ 502.438832][T11876] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1799'. [ 502.928502][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 503.344671][T11900] netlink: 'syz.2.1808': attribute type 10 has an invalid length. [ 503.487134][T11903] program syz.0.1809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.501227][ T129] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 503.560754][ T5904] usb 4-1: device descriptor read/64, error -71 [ 503.685121][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 503.697349][ T129] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 503.741492][ T129] usb 5-1: config 0 has no interface number 0 [ 503.748584][ T129] usb 5-1: config 0 interface 255 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 503.765513][ T129] usb 5-1: config 0 interface 255 has no altsetting 0 [ 503.801943][ T5904] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 503.852421][ T129] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 503.861980][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.874499][ T129] usb 5-1: Product: syz [ 503.888398][ T129] usb 5-1: Manufacturer: syz [ 503.907584][ T129] usb 5-1: SerialNumber: syz [ 503.932076][ T129] usb 5-1: config 0 descriptor?? [ 504.001536][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 504.009202][ T5904] usb 4-1: config index 0 descriptor too short (expected 260, got 27) [ 504.017900][ T5904] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 504.048811][ T5904] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 504.068585][ T5904] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 504.080526][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.311891][T11895] loop2: detected capacity change from 0 to 7 [ 504.319246][T11895] loop2: [POWERTEC] p1 p2 p3 p4 [ 504.324390][ T129] RobotFuzz Open Source InterFace, OSIF 5-1:0.255: failure sending bit rate [ 504.327154][T11895] loop2: p1 size 17956864 extends beyond EOD, truncated [ 504.612567][T11895] loop2: p2 start 258 is beyond EOD, truncated [ 504.615992][ T129] RobotFuzz Open Source InterFace, OSIF 5-1:0.255: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 504.685423][T11895] loop2: p3 start 16777216 is beyond EOD, truncated [ 504.707296][T11895] loop2: p4 start 1869611008 is beyond EOD, truncated [ 504.765236][ T5904] usb 4-1: string descriptor 0 read error: -71 [ 504.787605][ T5904] usb 4-1: USB disconnect, device number 50 [ 504.850863][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 504.866517][ T129] usb 5-1: USB disconnect, device number 38 [ 504.980967][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 505.019760][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.070940][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 505.106091][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 505.143462][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.188083][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.197765][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.222616][ T24] usb 1-1: config 0 descriptor?? [ 505.413047][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 505.666579][ T24] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 505.699757][T11939] random: crng reseeded on system resumption [ 505.988302][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 506.011103][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 506.083278][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 506.224407][ T24] usb 5-1: device descriptor read/64, error -71 [ 506.400856][ T5922] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 506.471274][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 506.531078][ T5922] usb 3-1: device descriptor read/64, error -71 [ 506.610722][ T24] usb 5-1: device descriptor read/64, error -71 [ 506.625948][ T129] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 506.720905][ T24] usb usb5-port1: attempt power cycle [ 506.760685][ T129] usb 4-1: device descriptor read/64, error -71 [ 506.771000][ T5922] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 506.794698][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.804471][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.900668][ T5922] usb 3-1: device descriptor read/64, error -71 [ 507.000835][ T129] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 507.018993][ T5922] usb usb3-port1: attempt power cycle [ 507.094803][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 507.121391][ T24] usb 5-1: device descriptor read/8, error -71 [ 507.150664][ T129] usb 4-1: device descriptor read/64, error -71 [ 507.262128][ T129] usb usb4-port1: attempt power cycle [ 507.364213][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 507.392133][ T24] usb 5-1: device descriptor read/8, error -71 [ 507.450809][ T5922] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 507.471930][ T5922] usb 3-1: device descriptor read/8, error -71 [ 507.501159][ T24] usb usb5-port1: unable to enumerate USB device [ 507.505965][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.522095][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.630880][ T129] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 507.675781][ T129] usb 4-1: device descriptor read/8, error -71 [ 507.708398][ T978] usb 1-1: USB disconnect, device number 42 [ 507.710739][ T5922] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 507.742338][ T5922] usb 3-1: device descriptor read/8, error -71 [ 507.860927][ T5922] usb usb3-port1: unable to enumerate USB device [ 507.940824][ T129] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 507.971296][ T129] usb 4-1: device descriptor read/8, error -71 [ 508.091449][ T129] usb usb4-port1: unable to enumerate USB device [ 508.158108][T11970] IPv6: addrconf: prefix option has invalid lifetime [ 508.165941][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 508.231169][ T978] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 508.408970][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 508.433005][ T978] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 508.453205][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.471790][ T978] usb 1-1: Product: syz [ 508.479185][ T978] usb 1-1: Manufacturer: syz [ 508.491200][ T978] usb 1-1: SerialNumber: syz [ 508.513986][ T978] usb 1-1: config 0 descriptor?? [ 509.217652][T11987] loop8: detected capacity change from 0 to 1 [ 509.241543][T11987] Dev loop8: unable to read RDB block 1 [ 509.251752][T11987] loop8: unable to read partition table [ 509.258192][T11987] loop8: partition table beyond EOD, truncated [ 509.279130][T11987] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 509.624433][T11997] netlink: 'syz.2.1834': attribute type 2 has an invalid length. [ 509.789052][T11996] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1835'. [ 510.570660][ T978] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 510.746101][ T978] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.759415][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 510.902955][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 510.947833][ T24] usb 1-1: USB disconnect, device number 43 [ 511.000094][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 511.073299][ T978] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.097857][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.143981][ T978] usb 4-1: config 0 descriptor?? [ 511.695133][ T978] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 511.937640][T12023] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1842'. [ 512.258593][T12029] netlink: 'syz.0.1844': attribute type 10 has an invalid length. [ 512.268909][T12029] syz_tun: entered promiscuous mode [ 512.932789][T12032] loop4: detected capacity change from 0 to 7 [ 512.939637][T12032] buffer_io_error: 42 callbacks suppressed [ 512.939665][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 512.954867][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 512.971673][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 513.005749][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 513.041061][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 513.078989][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 513.107419][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 513.146809][T12032] ldm_validate_partition_table(): Disk read failed. [ 513.155137][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 513.186294][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 513.194861][T12032] Buffer I/O error on dev loop4, logical block 0, async page read [ 513.286011][T12032] Dev loop4: unable to read RDB block 0 [ 513.351692][T12032] loop4: unable to read partition table [ 513.407970][T12032] loop4: partition table beyond EOD, truncated [ 513.444484][T12032] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 513.612025][ T129] usb 4-1: USB disconnect, device number 55 [ 513.753256][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.762874][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.820675][ T24] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 514.011022][ T24] usb 5-1: device descriptor read/64, error -71 [ 514.156486][T12055] ptrace attach of "./syz-executor exec"[5848] was attempted by "   8    \x09   [ 514.388990][ T24] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 514.788154][T12061] loop2: detected capacity change from 0 to 7 [ 514.813329][ T5947] Dev loop2: unable to read RDB block 7 [ 514.819014][ T5947] loop2: unable to read partition table [ 514.834451][ T5947] loop2: partition table beyond EOD, truncated [ 514.843247][T12061] Dev loop2: unable to read RDB block 7 [ 514.848943][T12061] loop2: unable to read partition table [ 515.107887][T12061] loop2: partition table beyond EOD, truncated [ 515.189642][T12066] loop8: detected capacity change from 0 to 1 [ 515.198121][T12066] Dev loop8: unable to read RDB block 1 [ 515.205654][T12066] loop8: unable to read partition table [ 515.279641][T12061] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 515.301312][T12066] loop8: partition table beyond EOD, truncated [ 515.307746][T12066] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 515.353408][ T24] usb 5-1: device descriptor read/64, error -71 [ 515.368543][ T5198] Dev loop2: unable to read RDB block 7 [ 515.374767][ T5198] loop2: unable to read partition table [ 515.531896][ T24] usb usb5-port1: attempt power cycle [ 515.537879][ T5198] loop2: partition table beyond EOD, truncated [ 515.836836][T12071] syzkaller1: entered promiscuous mode [ 515.842762][T12071] syzkaller1: entered allmulticast mode [ 515.881161][ T24] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 515.911899][ T24] usb 5-1: device descriptor read/8, error -71 [ 515.985436][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 515.999032][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 516.160755][ T24] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 516.195280][ T24] usb 5-1: device descriptor read/8, error -71 [ 516.371325][ T24] usb usb5-port1: unable to enumerate USB device [ 516.906285][T12081] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 517.252322][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 517.498768][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 517.530743][ T5920] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 517.613317][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 517.634817][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 517.644982][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 517.668491][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.744101][ T5920] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 517.756154][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.816630][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 517.890631][ T5920] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.901464][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.028291][ T24] usb 3-1: config 0 descriptor?? [ 518.048227][ T5920] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 518.085634][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 518.146988][ T5920] usb 5-1: Product: syz [ 518.192521][ T5920] usb 5-1: Manufacturer: syz [ 518.256799][ T5920] cdc_wdm 5-1:1.0: skipping garbage [ 518.509999][ T5920] cdc_wdm 5-1:1.0: skipping garbage [ 518.573606][ T5920] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 518.691214][ T24] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 518.900741][ T5904] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 519.104291][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 519.114295][ T5904] usb 1-1: config 1 interface 0 has no altsetting 0 [ 519.124861][ T5904] usb 1-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.40 [ 519.134224][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.147250][ T5904] usb 1-1: Product: 䐊 [ 519.169786][ T5904] usb 1-1: Manufacturer: ૳첺屮૷뗵࡮֢뺆攋꞊蒚啕狵낊惉餩䊁集菟㹛ㇵᕇ郛࿠燶耝ޚ₤闂봇봇쓈⾁骺샽꿁燘␟쀑⁶먲톌鲩鎨灦잙믓땢ᘀ撬黻䈧쌧ꠐ鳋༿넲켆 [ 519.260771][ T5904] usb 1-1: SerialNumber: з [ 519.531627][ T5904] usbhid 1-1:1.0: can't add hid device: -71 [ 519.538240][ T5904] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 519.585638][ T5904] usb 1-1: USB disconnect, device number 44 [ 519.956912][T12135] syzkaller1: entered promiscuous mode [ 519.968764][T12135] syzkaller1: entered allmulticast mode [ 520.142125][T12140] loop8: detected capacity change from 0 to 1 [ 520.156737][T12140] Dev loop8: unable to read RDB block 1 [ 520.164802][T12140] loop8: unable to read partition table [ 520.171983][T12140] loop8: partition table beyond EOD, truncated [ 520.207896][T12140] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 520.210223][ T5920] usb 5-1: USB disconnect, device number 47 [ 520.303794][T12143] netlink: 'syz.3.1877': attribute type 11 has an invalid length. [ 520.331711][T12143] netlink: 448 bytes leftover after parsing attributes in process `syz.3.1877'. [ 520.370167][T12145] Cannot find add_set index 0 as target [ 520.659776][T12157] ptrace attach of "./syz-executor exec"[5843] was attempted by "   8    \x09   [ 520.975307][T12163] loop2: detected capacity change from 0 to 7 [ 521.319753][T12163] Dev loop2: unable to read RDB block 7 [ 521.727469][ T5922] usb 3-1: USB disconnect, device number 35 [ 521.746487][T12163] loop2: AHDI p2 p3 [ 521.902766][T12163] loop2: partition table partially beyond EOD, truncated [ 521.941291][T12163] loop2: p3 start 335544320 is beyond EOD, truncated [ 522.171102][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 523.063703][T12187] fuse: Unknown parameter 'grou00000000000000000000' [ 524.222919][T12209] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1897'. [ 524.271045][ T5920] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 524.457442][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.469300][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.522466][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 524.554570][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.576049][ T5920] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.586887][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.614353][ T5920] usb 4-1: config 0 descriptor?? [ 524.700127][T12221] netlink: 'syz.1.1900': attribute type 13 has an invalid length. [ 524.711538][T12221] gretap0: refused to change device tx_queue_len [ 524.719330][T12221] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 525.465841][ T5920] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 525.973988][T12232] fuse: Unknown parameter 'group_i00000000000000000000' [ 525.976716][T12231] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1905'. [ 526.818308][T12252] netlink: 'syz.1.1910': attribute type 2 has an invalid length. [ 527.454092][ T5920] usb 4-1: USB disconnect, device number 56 [ 527.740456][T12270] netlink: 'syz.0.1915': attribute type 10 has an invalid length. [ 528.128150][T12272] loop4: detected capacity change from 0 to 7 [ 528.140372][T12272] buffer_io_error: 24 callbacks suppressed [ 528.140465][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.186721][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.197002][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.207655][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.233293][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.246634][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.257640][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.271632][T12272] ldm_validate_partition_table(): Disk read failed. [ 528.283805][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.296930][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.326327][T12275] program syz.0.1916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.340029][T12272] Buffer I/O error on dev loop4, logical block 0, async page read [ 528.362892][T12272] Dev loop4: unable to read RDB block 0 [ 528.427445][T12272] loop4: unable to read partition table [ 528.447708][T12272] loop4: partition table beyond EOD, truncated [ 528.590755][ T978] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 528.740632][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 528.767621][ T978] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 528.841428][ T978] usb 1-1: config 0 has no interface number 0 [ 528.850897][ T978] usb 1-1: config 0 interface 209 has no altsetting 0 [ 528.873930][ T978] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 528.891849][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.929551][ T978] usb 1-1: Product: syz [ 528.942565][ T978] usb 1-1: Manufacturer: syz [ 528.950285][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 528.968105][ T978] usb 1-1: SerialNumber: syz [ 528.987725][ T978] usb 1-1: config 0 descriptor?? [ 528.998363][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1920'. [ 529.011289][T12272] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 529.042831][ T5198] ldm_validate_partition_table(): Disk read failed. [ 529.049840][ T5198] Dev loop4: unable to read RDB block 0 [ 529.057127][ T5198] loop4: unable to read partition table [ 529.066089][ T5198] loop4: partition table beyond EOD, truncated [ 529.341681][T12294] program syz.3.1922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.815950][ T978] usb 1-1: USB disconnect, device number 45 [ 529.991882][ T129] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 530.010603][T12303] tipc: Enabling of bearer rejected, media not registered [ 530.163349][ T129] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.211297][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 530.226095][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 530.256337][ T129] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.302339][ T129] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.328979][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.340940][ T978] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 530.412621][T12312] SET target dimension over the limit! [ 530.489166][ T129] usb 3-1: config 0 descriptor?? [ 530.670741][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 530.681809][ T978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 530.698170][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 530.827034][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 530.876681][ T978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.907795][ T978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 530.940210][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.970111][ T129] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 531.191936][ T978] usb 5-1: GET_CAPABILITIES returned 0 [ 531.197602][ T978] usbtmc 5-1:16.0: can't read capabilities [ 532.021143][T12324] syzkaller1: entered promiscuous mode [ 532.026777][T12324] syzkaller1: entered allmulticast mode [ 532.518828][ T129] usb 3-1: USB disconnect, device number 36 [ 532.622333][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 532.773763][ T5920] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 532.813573][T12337] trusted_key: encrypted_key: insufficient parameters specified [ 532.825594][T12337] binder: 12333:12337 ioctl c018620c 200000000000 returned -1 [ 533.570885][ T5922] usb 5-1: USB disconnect, device number 48 [ 533.600912][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 533.651990][ T5920] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 533.672396][ T5920] usb 1-1: config 0 has no interface number 0 [ 533.865595][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 533.875271][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.926567][ T5920] usb 1-1: Product: syz [ 533.955828][ T5920] usb 1-1: Manufacturer: syz [ 534.028151][ T5920] usb 1-1: SerialNumber: syz [ 535.338849][ T5920] usb 1-1: config 0 descriptor?? [ 535.796806][T12341] netlink: 'syz.1.1934': attribute type 21 has an invalid length. [ 535.817905][T12341] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1934'. [ 535.886321][T12345] netlink: 'syz.1.1934': attribute type 21 has an invalid length. [ 535.961009][T12345] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1934'. [ 536.564534][T12351] input: syz0 as /devices/virtual/input/input57 [ 536.660780][ T7511] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 536.704099][ T5920] usb 1-1: can't set config #0, error -71 [ 536.720209][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 536.720229][ T30] audit: type=1326 audit(1765677086.335:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 536.786183][ T30] audit: type=1326 audit(1765677086.335:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 536.840658][ T30] audit: type=1326 audit(1765677086.335:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 536.844488][ T7511] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 536.885857][ T5920] usb 1-1: USB disconnect, device number 46 [ 536.901552][ T30] audit: type=1326 audit(1765677086.335:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 536.946282][ T7511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.958524][ T30] audit: type=1326 audit(1765677086.335:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 536.985483][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 537.030359][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1940'. [ 537.050384][ T30] audit: type=1326 audit(1765677086.375:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 537.082740][ T30] audit: type=1326 audit(1765677086.375:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 537.167705][ T30] audit: type=1326 audit(1765677086.375:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 537.207852][ T30] audit: type=1326 audit(1765677086.375:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 537.250500][ T7511] usb 3-1: config 0 descriptor?? [ 537.280638][ T30] audit: type=1326 audit(1765677086.375:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65338f749 code=0x7ffc0000 [ 537.307812][ T7511] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 537.518962][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'. [ 537.939136][ T7511] gspca_cpia1: usb_control_msg 03, error -32 [ 537.955799][ T7511] gspca_cpia1: usb_control_msg 03, error -71 [ 537.977507][ T7511] gspca_cpia1: usb_control_msg 01, error -71 [ 537.996109][ T7511] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 538.080957][ T7511] usb 3-1: USB disconnect, device number 37 [ 538.910791][ T129] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 538.982371][T12381] x_tables: duplicate underflow at hook 3 [ 539.145300][ T129] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 539.170717][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 539.200654][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 539.311413][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.333230][T12386] netlink: 'syz.2.1947': attribute type 10 has an invalid length. [ 539.357964][ T129] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.409768][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.435517][T12388] program syz.0.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.457433][ T129] usb 4-1: config 0 descriptor?? [ 539.885860][T12397] loop8: detected capacity change from 0 to 8 [ 539.925640][T12397] Dev loop8: unable to read RDB block 8 [ 539.970860][T12397] loop8: unable to read partition table [ 540.004259][T12397] loop8: partition table beyond EOD, truncated [ 540.027345][ T129] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 540.041954][T12397] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 540.349733][T12408] openvswitch: netlink: Multiple metadata blocks provided [ 540.430030][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1952'. [ 540.627794][T12405] netlink: 'syz.2.1953': attribute type 21 has an invalid length. [ 540.636123][T12405] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1953'. [ 540.647659][T12405] netlink: 'syz.2.1953': attribute type 21 has an invalid length. [ 540.655721][T12405] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1953'. [ 541.100974][ T129] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 541.270688][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 541.332826][ T129] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 541.366768][ T129] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 541.390709][ T129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 541.430900][ T129] usb 1-1: config 1 has no interface number 0 [ 541.451533][ T129] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 541.473200][ T129] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 541.529790][ T129] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 541.552886][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.595259][ T129] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 541.794515][ T129] snd_usb_pod 1-1:1.1: invalid control EP [ 541.804550][ T129] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 541.829244][ T129] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 541.848348][ T129] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 542.070841][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 542.070863][ T30] audit: type=1326 audit(1765677091.625:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12412 comm="syz.0.1955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f506398f749 code=0x0 [ 542.834963][ T129] usb 4-1: USB disconnect, device number 57 [ 542.956049][T12433] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1960'. [ 543.804427][ T129] usb 1-1: USB disconnect, device number 47 [ 543.885498][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 544.517666][T12470] loop8: detected capacity change from 0 to 1 [ 544.561923][T12470] Dev loop8: unable to read RDB block 1 [ 544.569014][T12470] loop8: unable to read partition table [ 544.587224][T12470] loop8: partition table beyond EOD, truncated [ 544.606286][T12470] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 544.706146][T12473] netlink: 'syz.2.1972': attribute type 10 has an invalid length. [ 545.725243][T12476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.734202][T12476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.120235][T12488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.570651][ T129] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 546.663031][T12499] netlink: 'syz.0.1978': attribute type 11 has an invalid length. [ 546.740689][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 546.748856][ T129] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 546.773410][ T129] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.785421][ T129] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.797436][T12506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1981'. [ 546.803999][ T129] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.832733][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.864579][ T129] usb 4-1: Product: syz [ 546.873228][ T129] usb 4-1: Manufacturer: syz [ 546.877978][ T129] usb 4-1: SerialNumber: syz [ 548.599277][T12527] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 549.174328][T12532] netlink: 'syz.1.1987': attribute type 21 has an invalid length. [ 549.182509][T12532] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1987'. [ 549.317033][ T129] usb 4-1: 0:2 : does not exist [ 549.355380][ T129] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 549.428748][ T129] usb 4-1: USB disconnect, device number 58 [ 549.921150][ T129] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 550.024021][T12542] netlink: 'syz.1.1990': attribute type 2 has an invalid length. [ 550.271178][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.284883][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.320645][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 550.335174][ T129] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.344446][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.362557][ T129] usb 4-1: config 0 descriptor?? [ 550.521555][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'. [ 550.538804][T12546] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1991'. [ 550.568464][T12548] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.623647][T12548] IPv6: Can't replace route, no match found [ 550.803620][ T129] plantronics 0003:047F:FFFF.0025: item fetching failed at offset 12/15 [ 550.813585][ T129] plantronics 0003:047F:FFFF.0025: parse failed [ 550.820089][ T129] plantronics 0003:047F:FFFF.0025: probe with driver plantronics failed with error -22 [ 551.007044][ T129] usb 4-1: USB disconnect, device number 59 [ 551.141283][ T7511] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 551.305183][ T7511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.316702][ T7511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.327669][ T7511] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.345832][ T7511] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.378035][ T7511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.424371][ T7511] usb 3-1: config 0 descriptor?? [ 551.677322][T12564] netlink: 'syz.0.1997': attribute type 12 has an invalid length. [ 551.890842][ T5920] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 552.293893][ T7511] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 552.545533][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.559885][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 552.571723][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 552.585077][ T7511] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 552.599990][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 552.628623][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.638482][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.655469][ T5920] usb 5-1: config 0 descriptor?? [ 552.697803][T12555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.712605][T12555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.722591][ T129] usb 3-1: USB disconnect, device number 38 [ 553.125832][ T5920] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 553.255143][T12577] netlink: 'syz.0.2002': attribute type 10 has an invalid length. [ 553.325545][ T5920] usb 5-1: USB disconnect, device number 49 [ 553.468170][T12592] netlink: 'syz.1.2003': attribute type 1 has an invalid length. [ 553.564168][T12592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.185229][T12612] netlink: 'syz.2.2009': attribute type 2 has an invalid length. [ 555.074521][T12629] ptrace attach of "./syz-executor exec"[5847] was attempted by "   8    \x09   "[12629] [ 557.089614][T12650] x_tables: duplicate underflow at hook 3 [ 557.440807][ T978] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 557.612596][ T978] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.624292][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 557.669846][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 557.687678][ T978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.714817][ T978] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.726696][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.759826][T12670] netlink: 'syz.1.2025': attribute type 2 has an invalid length. [ 557.928608][ T978] usb 1-1: config 0 descriptor?? [ 558.298321][T12682] program syz.3.2032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.392537][ T978] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 558.574711][ T129] usb 1-1: USB disconnect, device number 48 [ 559.065577][ T129] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 559.162030][T12694] loop4: detected capacity change from 0 to 7 [ 559.168787][T12694] buffer_io_error: 38 callbacks suppressed [ 559.168801][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.188683][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.228583][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.279106][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.283158][ T129] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 559.307508][ T129] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 559.317892][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.319122][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.335900][ T129] usb 5-1: Product: syz [ 559.344335][ T129] usb 5-1: Manufacturer: syz [ 559.349808][ T129] usb 5-1: SerialNumber: syz [ 559.382926][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.395284][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.405899][T12694] ldm_validate_partition_table(): Disk read failed. [ 559.433055][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.450741][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.492271][T12694] Buffer I/O error on dev loop4, logical block 0, async page read [ 559.493913][ T129] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 559.539506][T12694] Dev loop4: unable to read RDB block 0 [ 559.558929][T12694] loop4: unable to read partition table [ 559.580970][T12694] loop4: partition table beyond EOD, truncated [ 559.601712][T12694] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 559.636111][T12689] bond1: option mode: unable to set because the bond device has slaves [ 559.674523][T12705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.683955][T12689] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 559.687993][T12705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.894204][ T129] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 559.922700][ T129] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 559.937359][ T5198] ldm_validate_partition_table(): Disk read failed. [ 559.958001][ T5198] Dev loop4: unable to read RDB block 0 [ 559.965153][ T129] usb 5-1: media controller created [ 559.972707][ T5198] loop4: unable to read partition table [ 559.979473][ T5198] loop4: partition table beyond EOD, truncated [ 560.039921][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.181874][T12718] binder: BINDER_SET_CONTEXT_MGR already set [ 560.188209][T12718] binder: 12709:12718 ioctl 4018620d 200000000040 returned -16 [ 560.933206][T12725] netlink: 'syz.3.2044': attribute type 1 has an invalid length. [ 561.017952][ T129] usb 5-1: USB disconnect, device number 50 [ 561.302188][T12730] netlink: 'syz.1.2046': attribute type 10 has an invalid length. [ 561.353404][T12725] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 561.510842][ T129] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 561.551672][T12733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2047'. [ 561.710682][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 561.759194][ T129] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.792620][ T129] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 561.822340][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.840731][ T129] usb 5-1: Product: syz [ 561.870669][ T129] usb 5-1: Manufacturer: syz [ 561.881287][ T129] usb 5-1: SerialNumber: syz [ 561.921029][ T129] usb 5-1: config 0 descriptor?? [ 562.002591][ T129] usb 5-1: bad CDC descriptors [ 562.032068][ T129] usb 5-1: unsupported MDLM descriptors [ 562.347233][ T129] usb 5-1: USB disconnect, device number 51 [ 562.453896][T12736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.479900][T12736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.887944][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'. [ 563.046821][ T30] audit: type=1326 audit(1765677112.615:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12744 comm="syz.0.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506398f749 code=0x7ffc0000 [ 563.350836][ T30] audit: type=1326 audit(1765677112.655:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12744 comm="syz.0.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506398f749 code=0x7ffc0000 [ 563.446114][T12760] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2054'. [ 563.485608][T12764] FAULT_INJECTION: forcing a failure. [ 563.485608][T12764] name failslab, interval 1, probability 0, space 0, times 0 [ 563.535403][T12764] CPU: 1 UID: 0 PID: 12764 Comm: syz.2.2056 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.535445][T12764] Tainted: [L]=SOFTLOCKUP [ 563.535454][T12764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.535468][T12764] Call Trace: [ 563.535477][T12764] [ 563.535487][T12764] dump_stack_lvl+0x189/0x250 [ 563.535521][T12764] ? __pfx____ratelimit+0x10/0x10 [ 563.535553][T12764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.535580][T12764] ? __pfx__printk+0x10/0x10 [ 563.535615][T12764] ? __pfx___might_resched+0x10/0x10 [ 563.535640][T12764] ? fs_reclaim_acquire+0x7d/0x100 [ 563.535670][T12764] should_fail_ex+0x414/0x560 [ 563.535705][T12764] should_failslab+0xa8/0x100 [ 563.535734][T12764] __kmalloc_cache_noprof+0x84/0x700 [ 563.535755][T12764] ? netlink_lookup+0x30/0x200 [ 563.535776][T12764] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 563.535807][T12764] ? genl_start+0x1c9/0x6c0 [ 563.535842][T12764] genl_start+0x1c9/0x6c0 [ 563.535878][T12764] ? netlink_lookup+0x30/0x200 [ 563.535907][T12764] __netlink_dump_start+0x469/0x7e0 [ 563.535940][T12764] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 563.535975][T12764] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 563.536005][T12764] ? genl_get_cmd+0x7d9/0x910 [ 563.536037][T12764] ? __pfx___mutex_lock+0x10/0x10 [ 563.536070][T12764] ? __pfx_genl_start+0x10/0x10 [ 563.536097][T12764] ? __pfx_genl_dumpit+0x10/0x10 [ 563.536124][T12764] ? __pfx_genl_done+0x10/0x10 [ 563.536169][T12764] genl_rcv_msg+0x5da/0x790 [ 563.536207][T12764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.536236][T12764] ? __pfx_tipc_nl_node_dump_monitor+0x10/0x10 [ 563.536287][T12764] netlink_rcv_skb+0x208/0x470 [ 563.536312][T12764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.536344][T12764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.536386][T12764] ? down_read+0x274/0x2e0 [ 563.536404][T12764] ? genl_rcv+0xd/0x40 [ 563.536434][T12764] genl_rcv+0x28/0x40 [ 563.536461][T12764] netlink_unicast+0x82f/0x9e0 [ 563.536505][T12764] ? __pfx_netlink_unicast+0x10/0x10 [ 563.536542][T12764] ? netlink_sendmsg+0x642/0xb30 [ 563.536564][T12764] ? skb_put+0x11b/0x210 [ 563.536602][T12764] netlink_sendmsg+0x805/0xb30 [ 563.536637][T12764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.536665][T12764] ? aa_sock_msg_perm+0xf1/0x1b0 [ 563.536691][T12764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 563.536712][T12764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.536738][T12764] __sock_sendmsg+0x21c/0x270 [ 563.536770][T12764] ____sys_sendmsg+0x505/0x820 [ 563.536799][T12764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.536833][T12764] ? import_iovec+0x74/0xa0 [ 563.536865][T12764] ___sys_sendmsg+0x21f/0x2a0 [ 563.536891][T12764] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.536922][T12764] ? rcu_read_lock_any_held+0xb3/0x120 [ 563.536983][T12764] ? __fget_files+0x2a/0x420 [ 563.537010][T12764] ? __fget_files+0x3a0/0x420 [ 563.537050][T12764] __x64_sys_sendmsg+0x19b/0x260 [ 563.537076][T12764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.537110][T12764] ? __pfx_ksys_write+0x10/0x10 [ 563.537137][T12764] ? do_syscall_64+0xbe/0xf80 [ 563.537173][T12764] do_syscall_64+0xfa/0xf80 [ 563.537208][T12764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.537229][T12764] ? clear_bhb_loop+0x60/0xb0 [ 563.537257][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.537278][T12764] RIP: 0033:0x7fe99198f749 [ 563.537298][T12764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.537317][T12764] RSP: 002b:00007fe9928f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.537340][T12764] RAX: ffffffffffffffda RBX: 00007fe991be5fa0 RCX: 00007fe99198f749 [ 563.537357][T12764] RDX: 0000000000000010 RSI: 00002000000005c0 RDI: 0000000000000004 [ 563.537372][T12764] RBP: 00007fe9928f4090 R08: 0000000000000000 R09: 0000000000000000 [ 563.537385][T12764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.537398][T12764] R13: 00007fe991be6038 R14: 00007fe991be5fa0 R15: 00007fe991d0fa28 [ 563.537435][T12764] [ 564.135488][T12770] loop8: detected capacity change from 0 to 8 [ 564.142400][T12770] Dev loop8: unable to read RDB block 8 [ 564.148011][T12770] loop8: unable to read partition table [ 564.174742][T12770] loop8: partition table beyond EOD, truncated [ 564.184651][T12770] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 564.850740][ T978] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 564.865334][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2064'. [ 564.887109][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2064'. [ 564.990639][ T978] usb 5-1: device descriptor read/64, error -71 [ 565.041556][T12788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.118817][T12788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.262862][ T978] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 565.402711][T12793] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2068'. [ 565.432613][ T978] usb 5-1: device descriptor read/64, error -71 [ 565.513574][ T5895] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 565.566408][ T978] usb usb5-port1: attempt power cycle [ 565.675366][T12798] loop2: detected capacity change from 0 to 7 [ 565.682963][T12798] Dev loop2: unable to read RDB block 7 [ 565.700962][T12798] loop2: unable to read partition table [ 565.707965][T12798] loop2: partition table beyond EOD, truncated [ 565.760813][T12798] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 565.785319][ T5895] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.880048][ T5895] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 565.930714][ T5895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.950919][ T978] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 565.996377][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.006803][ T978] usb 5-1: device descriptor read/8, error -71 [ 566.015282][ T5895] usb 1-1: Product: syz [ 566.019470][ T5895] usb 1-1: Manufacturer: syz [ 566.026761][ T5895] usb 1-1: SerialNumber: syz [ 566.135428][T12803] fuse: Bad value for 'group_id' [ 566.140495][T12803] fuse: Bad value for 'group_id' [ 566.157022][T12805] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2072'. [ 566.270701][ T978] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 566.308671][ T978] usb 5-1: device descriptor read/8, error -71 [ 566.411342][ T5920] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 566.422561][ T978] usb usb5-port1: unable to enumerate USB device [ 566.572497][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 566.593555][T12790] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 566.594733][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 566.627208][T12811] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2074'. [ 566.738927][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 566.766226][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.817661][ T5920] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.847101][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.873489][ T5920] usb 4-1: config 0 descriptor?? [ 567.014447][T12819] netlink: 'syz.2.2076': attribute type 11 has an invalid length. [ 567.072527][ T5895] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 567.086623][ T5895] cdc_ncm 1-1:1.0: bind() failure [ 567.100992][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'. [ 567.117906][ T5895] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 567.134815][ T5895] cdc_ncm 1-1:1.1: bind() failure [ 567.409784][ T5920] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 567.800117][T12838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.810268][T12838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.235521][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.243750][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.371769][ T5920] usb 1-1: USB disconnect, device number 49 [ 568.780295][ T978] usb 4-1: USB disconnect, device number 60 [ 568.960688][T12854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2087'. [ 569.051722][T12854] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2087'. [ 569.068801][T12856] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2087'. [ 569.318482][T12864] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2086'. [ 570.535857][T12880] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[12880] [ 571.053721][T12886] tap0: tun_chr_ioctl cmd 1074025677 [ 571.073584][T12886] tap0: linktype set to 774 [ 571.088959][T12886] tap0: tun_chr_ioctl cmd 1074025672 [ 571.105065][T12886] tap0: ignored: set checksum enabled [ 571.169880][T12885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2095'. [ 571.465240][ T5920] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 571.750688][ T5920] usb 1-1: device descriptor read/64, error -71 [ 572.100920][ T5920] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 572.241077][ T5920] usb 1-1: device descriptor read/64, error -71 [ 572.508269][ T5920] usb usb1-port1: attempt power cycle [ 572.851225][ T5920] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 572.873003][ T5920] usb 1-1: device descriptor read/8, error -71 [ 572.907638][T12908] loop2: detected capacity change from 0 to 7 [ 572.920644][T12906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.931572][T12906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.953879][T12908] Dev loop2: unable to read RDB block 7 [ 572.975313][T12908] loop2: AHDI p2 p3 [ 573.010694][T12908] loop2: partition table partially beyond EOD, truncated [ 573.053989][T12908] loop2: p3 start 335544320 is beyond EOD, truncated [ 573.140965][ T5920] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 573.209741][ T5920] usb 1-1: device descriptor read/8, error -71 [ 573.353653][ T5920] usb usb1-port1: unable to enumerate USB device [ 573.387475][T12913] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1852575491 (118564831424 ns) > initial count (78018577472 ns). Using initial count to start timer. [ 573.509813][T12917] program syz.2.2104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.933527][T12926] Cannot find add_set index 0 as target [ 574.530633][ T5920] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 574.641761][ T31] INFO: task kworker/1:1:39 blocked for more than 143 seconds. [ 574.652530][ T31] Tainted: G L syzkaller #0 [ 574.672962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.701139][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 574.709240][ T5920] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 574.717853][ T5920] usb 1-1: config 0 has no interface number 0 [ 574.720636][ T31] task:kworker/1:1 state:D stack:20648 pid:39 tgid:39 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 574.728947][ T5920] usb 1-1: config 0 interface 237 has no altsetting 0 [ 574.777930][ T31] Workqueue: usb_hub_wq hub_event [ 574.786287][ T5920] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 574.788933][ T31] Call Trace: [ 574.803337][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.812181][ T5920] usb 1-1: Product: syz [ 574.816633][ T5920] usb 1-1: Manufacturer: syz [ 574.821808][ T31] [ 574.825151][ T5920] usb 1-1: SerialNumber: syz [ 574.825520][ T31] __schedule+0x14bc/0x5000 [ 574.835225][ T31] ? __pfx___schedule+0x10/0x10 [ 574.840238][ T31] ? schedule+0x91/0x360 [ 574.845471][ T31] schedule+0x165/0x360 [ 574.849846][ T31] schedule_timeout+0x9a/0x270 [ 574.856969][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 574.857826][ T5920] usb 1-1: config 0 descriptor?? [ 574.868910][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.877117][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 574.885659][ T31] ? wait_for_completion+0x267/0x5d0 [ 574.891443][ T31] wait_for_completion+0x2bf/0x5d0 [ 574.892764][ T5920] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 found [ 574.904044][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 574.911871][ T31] i2c_del_adapter+0x591/0x760 [ 574.917581][ T31] ? kfree+0x1c0/0x660 [ 574.926532][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 574.938564][ T31] ? dvb_usbv2_exit+0x949/0xb90 [ 574.941083][ T5922] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 574.945600][ T31] dvb_usbv2_probe+0x497/0x3c20 [ 574.962361][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 574.968282][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 574.977152][ T31] usb_probe_interface+0x668/0xc90 [ 574.983486][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 574.989698][ T31] really_probe+0x26d/0xad0 [ 574.997938][ T31] __driver_probe_device+0x18c/0x320 [ 575.004013][ T31] driver_probe_device+0x4f/0x240 [ 575.009389][ T31] __device_attach_driver+0x279/0x430 [ 575.015589][ T31] bus_for_each_drv+0x251/0x2e0 [ 575.021537][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 575.027809][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 575.034916][ T31] __device_attach+0x2b8/0x430 [ 575.039993][ T31] ? __pfx___device_attach+0x10/0x10 [ 575.046285][ T31] ? _raw_spin_unlock+0x28/0x50 [ 575.089248][ T5920] snd_usb_podhd 1-1:0.237: cannot get proper max packet size [ 575.110982][ T5920] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 now disconnected [ 575.154637][ T5922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 575.164326][ T31] device_initial_probe+0xa1/0xd0 [ 575.164446][ T5922] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 575.169514][ T31] bus_probe_device+0x12a/0x220 [ 575.169549][ T31] ? device_add+0x726/0xb80 [ 575.241187][ T31] device_add+0x7b6/0xb80 [ 575.246723][ T31] usb_set_configuration+0x1a87/0x2110 [ 575.249849][ T5920] snd_usb_podhd 1-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 575.253058][ T31] usb_generic_driver_probe+0x8d/0x150 [ 575.269200][ T31] usb_probe_device+0x1c4/0x3c0 [ 575.269222][ T5922] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 575.269250][ T5922] usb 5-1: config 63 has no interface number 0 [ 575.276115][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 575.297862][ T31] really_probe+0x26d/0xad0 [ 575.305567][ T31] __driver_probe_device+0x18c/0x320 [ 575.313434][ T31] driver_probe_device+0x4f/0x240 [ 575.318982][ T31] __device_attach_driver+0x279/0x430 [ 575.325115][ T5920] usb 1-1: USB disconnect, device number 54 [ 575.341887][ T5922] usb 5-1: config 63 interface 66 has no altsetting 0 [ 575.424603][ T31] bus_for_each_drv+0x251/0x2e0 [ 575.427792][ T5922] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 575.439833][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.448081][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 575.450054][ T5922] usb 5-1: Product: syz [ 575.458804][ T5922] usb 5-1: Manufacturer: syz [ 575.463603][ T5922] usb 5-1: SerialNumber: syz [ 575.478468][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 575.484549][ T31] __device_attach+0x2b8/0x430 [ 575.489463][ T31] ? __pfx___device_attach+0x10/0x10 [ 575.509432][ T31] ? _raw_spin_unlock+0x28/0x50 [ 575.520697][ T31] device_initial_probe+0xa1/0xd0 [ 575.527845][ T31] bus_probe_device+0x12a/0x220 [ 575.535777][ T31] ? device_add+0x726/0xb80 [ 575.540362][ T31] device_add+0x7b6/0xb80 [ 575.561992][ T31] usb_new_device+0xa39/0x1720 [ 575.567030][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 575.580591][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.585884][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 575.591448][ T31] hub_event+0x29b1/0x4ef0 [ 575.599394][ T31] ? __pfx_hub_event+0x10/0x10 [ 575.609527][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 575.620709][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.625989][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 575.640870][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 575.646830][ T31] process_scheduled_works+0xad1/0x1770 [ 575.660833][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.666928][ T31] worker_thread+0x8a0/0xda0 [ 575.681848][ T31] kthread+0x711/0x8a0 [ 575.686004][ T31] ? __pfx_worker_thread+0x10/0x10 [ 575.700618][ T31] ? __pfx_kthread+0x10/0x10 [ 575.705570][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.711242][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 575.716528][ T31] ? __pfx_kthread+0x10/0x10 [ 575.731569][ T31] ret_from_fork+0x599/0xb30 [ 575.736254][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.747660][ T31] ? __switch_to_asm+0x39/0x70 [ 575.752738][ T31] ? __switch_to_asm+0x33/0x70 [ 575.757558][ T31] ? __pfx_kthread+0x10/0x10 [ 575.762325][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.767162][ T31] [ 575.770439][ T31] [ 575.770439][ T31] Showing all locks held in the system: [ 575.779708][ T31] 1 lock held by khungtaskd/31: [ 575.784982][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 575.797215][ T31] 5 locks held by kworker/1:1/39: [ 575.809887][ T31] #0: ffff8881432d2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 575.821501][ T31] #1: ffffc90000af7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 575.862164][ T31] #2: ffff888144382198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 575.871266][ T31] #3: ffff888057bf1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 575.880742][ T31] #4: ffff88807b079160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 575.890084][ T31] 2 locks held by getty/5590: [ 575.895012][ T31] #0: ffff888030c320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 575.905167][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 575.915909][ T31] 5 locks held by kworker/1:6/5922: [ 575.921343][ T31] #0: ffff8881432d2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 575.932839][ T31] #1: ffffc90004ef7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 575.944831][ T31] #2: ffff88823be8e998 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 575.953976][ T31] #3: ffff8880573d5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 575.963764][ T31] #4: ffff88801f6c1278 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 575.975881][ T31] 4 locks held by udevd/7719: [ 576.020586][ T31] #0: ffff88807685f790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 576.029619][ T31] #1: ffff888056a0b088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 576.050573][ T31] #2: ffff888058b435a8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 576.060193][ T31] #3: ffff888057bf1198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 576.069711][ T31] 3 locks held by syz.4.2111/12944: [ 576.076584][ T31] [ 576.079001][ T31] ============================================= [ 576.079001][ T31] [ 576.103372][ T31] NMI backtrace for cpu 0 [ 576.103396][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 576.103425][ T31] Tainted: [L]=SOFTLOCKUP [ 576.103433][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.103447][ T31] Call Trace: [ 576.103456][ T31] [ 576.103465][ T31] dump_stack_lvl+0x189/0x250 [ 576.103502][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.103529][ T31] ? __pfx__printk+0x10/0x10 [ 576.103574][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 576.103605][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 576.103641][ T31] ? __pfx__printk+0x10/0x10 [ 576.103678][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.103716][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 576.103747][ T31] sys_info+0x135/0x170 [ 576.103768][ T31] watchdog+0xf95/0xfe0 [ 576.103805][ T31] ? watchdog+0x20a/0xfe0 [ 576.103844][ T31] kthread+0x711/0x8a0 [ 576.103877][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.103906][ T31] ? __pfx_kthread+0x10/0x10 [ 576.103937][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.103967][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 576.103996][ T31] ? __pfx_kthread+0x10/0x10 [ 576.104027][ T31] ret_from_fork+0x599/0xb30 [ 576.104050][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.104083][ T31] ? __switch_to_asm+0x39/0x70 [ 576.104111][ T31] ? __switch_to_asm+0x33/0x70 [ 576.104138][ T31] ? __pfx_kthread+0x10/0x10 [ 576.104168][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.104216][ T31] [ 576.104224][ T31] Sending NMI from CPU 0 to CPUs 1: [ 576.261334][ C1] NMI backtrace for cpu 1 [ 576.261359][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.261386][ C1] Tainted: [L]=SOFTLOCKUP [ 576.261393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.261406][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 576.261434][ C1] RIP: 0010:__lock_acquire+0x594/0x2cf0 [ 576.261457][ C1] Code: b6 81 c4 00 00 00 84 c0 0f 84 77 ff ff ff 41 0f b6 f4 0f b6 d0 40 38 c6 0f 42 d6 80 b9 c6 00 00 00 02 0f 84 60 ff ff ff 89 d0 59 ff ff ff 48 c7 c7 70 1c e1 8d 4c 89 fe e8 78 3d 29 03 e9 69 [ 576.261473][ C1] RSP: 0018:ffffc90000bd7170 EFLAGS: 00000093 [ 576.261488][ C1] RAX: 0000000000000004 RBX: ffff88801e2b6720 RCX: ffffffff932d56d0 [ 576.261502][ C1] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 0000000000000000 [ 576.261513][ C1] RBP: ffff88801e2b6750 R08: ffffffff81743f85 R09: ffffffff8df419e0 [ 576.261527][ C1] R10: ffffc90000bd7478 R11: ffffffff81ada000 R12: 00000000ffffff05 [ 576.261540][ C1] R13: ffff88801e2b6750 R14: ffff88801e2b5b80 R15: 0000000000000002 [ 576.261554][ C1] FS: 0000000000000000(0000) GS:ffff888125f3a000(0000) knlGS:0000000000000000 [ 576.261569][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.261581][ C1] CR2: 00007fc54d570d58 CR3: 0000000057254000 CR4: 00000000003526f0 [ 576.261599][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 576.261611][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 576.261625][ C1] Call Trace: [ 576.261632][ C1] [ 576.261643][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 576.261664][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 576.261683][ C1] ? unwind_next_frame+0xa5/0x2390 [ 576.261708][ C1] ? unwind_next_frame+0xa5/0x2390 [ 576.261728][ C1] lock_acquire+0x117/0x340 [ 576.261745][ C1] ? unwind_next_frame+0xa5/0x2390 [ 576.261770][ C1] ? unwind_next_frame+0xa5/0x2390 [ 576.261791][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 576.261817][ C1] ? unwind_next_frame+0xa5/0x2390 [ 576.261838][ C1] unwind_next_frame+0xc2/0x2390 [ 576.261866][ C1] ? unwind_next_frame+0xa5/0x2390 [ 576.261890][ C1] ? unwind_next_frame+0xa5/0x2390 [ 576.261911][ C1] ? ret_from_fork+0x599/0xb30 [ 576.261930][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 576.261960][ C1] arch_stack_walk+0x11c/0x150 [ 576.261983][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 576.262010][ C1] stack_trace_save+0x9c/0xe0 [ 576.262037][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 576.262065][ C1] ? stack_trace_save+0x9c/0xe0 [ 576.262092][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 576.262122][ C1] kasan_save_track+0x3e/0x80 [ 576.262139][ C1] ? kasan_save_track+0x3e/0x80 [ 576.262156][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 576.262174][ C1] ? __kmalloc_node_track_caller_noprof+0x575/0x820 [ 576.262193][ C1] ? kmalloc_reserve+0x136/0x290 [ 576.262220][ C1] ? __alloc_skb+0x27e/0x430 [ 576.262245][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 576.262265][ C1] ? process_scheduled_works+0xad1/0x1770 [ 576.262283][ C1] ? worker_thread+0x8a0/0xda0 [ 576.262301][ C1] ? kthread+0x711/0x8a0 [ 576.262323][ C1] ? ret_from_fork+0x599/0xb30 [ 576.262338][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 576.262383][ C1] __kasan_kmalloc+0x93/0xb0 [ 576.262403][ C1] __kmalloc_node_track_caller_noprof+0x575/0x820 [ 576.262422][ C1] ? __alloc_skb+0x27e/0x430 [ 576.262450][ C1] ? __alloc_skb+0x27e/0x430 [ 576.262475][ C1] kmalloc_reserve+0x136/0x290 [ 576.262504][ C1] __alloc_skb+0x27e/0x430 [ 576.262531][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 576.262557][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 576.262587][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 576.262610][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 576.262632][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.262656][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 576.262675][ C1] process_scheduled_works+0xad1/0x1770 [ 576.262705][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.262732][ C1] worker_thread+0x8a0/0xda0 [ 576.262762][ C1] kthread+0x711/0x8a0 [ 576.262787][ C1] ? __pfx_worker_thread+0x10/0x10 [ 576.262805][ C1] ? __pfx_kthread+0x10/0x10 [ 576.262829][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.262852][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 576.262886][ C1] ? __pfx_kthread+0x10/0x10 [ 576.262909][ C1] ret_from_fork+0x599/0xb30 [ 576.262927][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 576.262949][ C1] ? __switch_to_asm+0x39/0x70 [ 576.262972][ C1] ? __switch_to_asm+0x33/0x70 [ 576.262995][ C1] ? __pfx_kthread+0x10/0x10 [ 576.263018][ C1] ret_from_fork_asm+0x1a/0x30 [ 576.263050][ C1] [ 576.723156][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 576.730051][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 576.740765][ T31] Tainted: [L]=SOFTLOCKUP [ 576.745124][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.755217][ T31] Call Trace: [ 576.758528][ T31] [ 576.761492][ T31] dump_stack_lvl+0x99/0x250 [ 576.766125][ T31] ? __asan_memcpy+0x40/0x70 [ 576.770751][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.775998][ T31] ? __pfx__printk+0x10/0x10 [ 576.780646][ T31] vpanic+0x237/0x6d0 [ 576.784675][ T31] ? __pfx_vpanic+0x10/0x10 [ 576.789303][ T31] ? preempt_schedule_common+0x83/0xd0 [ 576.794794][ T31] panic+0xb9/0xc0 [ 576.798590][ T31] ? __pfx_panic+0x10/0x10 [ 576.803044][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 576.808434][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 576.814633][ T31] watchdog+0xfdf/0xfe0 [ 576.818823][ T31] ? watchdog+0x20a/0xfe0 [ 576.823176][ T31] kthread+0x711/0x8a0 [ 576.827269][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.831970][ T31] ? __pfx_kthread+0x10/0x10 [ 576.836582][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.841796][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 576.847022][ T31] ? __pfx_kthread+0x10/0x10 [ 576.851636][ T31] ret_from_fork+0x599/0xb30 [ 576.856250][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.861380][ T31] ? __switch_to_asm+0x39/0x70 [ 576.866163][ T31] ? __switch_to_asm+0x33/0x70 [ 576.870970][ T31] ? __pfx_kthread+0x10/0x10 [ 576.875587][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.880411][ T31] [ 576.883769][ T31] Kernel Offset: disabled [ 576.888110][ T31] Rebooting in 86400 seconds..