last executing test programs: 12m56.619307922s ago: executing program 1 (id=1767): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_tcp(0x2, 0x1, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 12m55.021578273s ago: executing program 1 (id=1772): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000000)={&(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000040)={0x0}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) unshare(0x40400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10122, 0x0, 0xffffffffffffff16) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/sync_on_suspend', 0x40500, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 12m51.896521323s ago: executing program 1 (id=1778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1a001, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000000)='minix\x00', 0x2808404, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000a80)={0x0, 0x9, 0x1, [0x0, 0x4, 0x6, 0x3, 0xfffffffffffffff8], [0x6, 0x3, 0x8001, 0x8, 0x1, 0x6, 0x4, 0x7ff, 0x4, 0xc2, 0x2, 0x100000000, 0x3, 0xff, 0x2, 0x7, 0x1, 0x3, 0xfffffffffffffffd, 0xfe, 0x7, 0xc55, 0x3, 0x8, 0x7ff, 0x9, 0x2, 0xfffffffffffffffa, 0x5, 0x5, 0x5, 0x8, 0x580, 0x1, 0xafc, 0x5, 0x2, 0x9, 0x3, 0x4, 0x40, 0x3, 0x100000001, 0x7fffffffffffffff, 0x0, 0x101, 0xd8, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3, 0x1, 0xa6e9, 0x6, 0x9, 0x5, 0x3, 0xffffffffffff1644, 0x1, 0x7ff, 0x5, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x9, 0x2, 0x5, 0x1, 0x8001, 0xeae6, 0x7, 0x80, 0x4, 0x83, 0x6, 0x6, 0x9, 0x5, 0xe8, 0x6, 0x9b, 0x6, 0xd7, 0x800, 0xb, 0x7, 0x76, 0xe, 0xc, 0x100000001, 0x0, 0x9, 0x80000000, 0x6, 0x1, 0x2, 0x80000001, 0x236fe678, 0x1e3, 0x2, 0x6, 0x5ea, 0x15, 0x0, 0x8, 0x80000000, 0x9, 0x3ff, 0x9, 0x793, 0x6, 0x8000, 0xf55f, 0x9]}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000ec0)={{r2}, {@val={r9}, @max}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000180)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000140)={r8}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000600)={0x3d0, 0x13, 0x200, 0x70bd2a, 0x25dfdbfd, {0x25, 0x1, 0xf9, 0xc, {0x4e20, 0x4e24, [0x8, 0x4, 0x7], [0x5, 0x1, 0x1fe, 0x9], 0x0, [0x4, 0x1]}, 0xb7ea, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "da71b988e538ff41d9e492d5845e3ae65e0031a2019e55bebd6c752d00f225c06e60f755cadcb87dc44c4d3b32e8d34c9343ef680a4e2c30e6dea611418af1e2a215fe897cda00e7dd8b91ac1c2e19dae35fe8657f58439ecffd11f259c080b75516248eefce620fec591f1cc5f7da8ad0c7ca009fa184757643879f103d7989565a4c975d1717216e4ed072447747d1905540a8dd64429166f652eff1674af6503a59ae2b8c2b4fadc7aea2"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "67b87e3413cf75a13e3ca2fdea9e2c1968e9209657e188aeee"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "e39e71d02c81aebe76bce210cda9813ad4fa437a43ed61ea13523a42ac6f82896c6ee2abdd16"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "060578163e58866a181f4263330804ac385d846b2debb269291f993fd1bc11a52a2943ae5b651329c25c032c5b4dccf6e9dbcafe6c506da91950dad7b3b8d7bf1713257c02365afdb284c83fb90f3ef2e0d4684d627e87d8de22f56ebfd2707d7d88b51825d8e9566e08f02dd018dc186908750deca78dce5d0ddcac1f4e61acde5e4cbf713fd1bf04f73d63377d65064b4d2641ba2cff5a1e9ddc1a231a85"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "a425181bcca558b313108c74c2902227758650220b2d57dc6a88a850dba702e64f53b9de538c4a86e642ed00971fffc87668db3af5c64042ecdb9eb74e3a5885134edd9f5b922bcca30ec88e47a22316f69dedfd991bfe9d1b82243245fca37dadf78e64dcd35d40fc0aee52869ed0d823d14499f035238bf07283864ffe60f51927ce3cf3f922"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "42164f8fb40d7bd828994d36e89f18c01e6c144865618e3b4ed37f7f30e7b37fea51f5e95520072f18d5dcb4ddc7598dafd907ea63c0d71ffcd9019556cfb764e6b549c8da87ac2dc65ca2fe19ce3d2a76d50441716a87dad129f95a81497f2bf18faeda4a20eb35dd1c0949bff0f82ef03c3f43a8d95a067a67acd037b30f99aa8f2eed237d5bb99ba369a56dd10d2c17a646b56554b331f88676f92f8083daac6fcce6eef43e54cacfd125f7806689ee794b5fd380f25b641511b53153e688df90982ef0b31f31c189"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "98dc7dc42229194c46e3ad3f606a81afce150a352c2ba13351749b7c9e07d9f0b2b738c244689b7b78e4127dbb7a878376e2ff67e95350ebb270df7b58b5bd15041611930af7faddc23bec8879940e9b498bdbf7f343777acab34fa21e37ec2b9529a97b546d3f49924cdee0601624def8ddc4b9548de0705fce96123a81f8fb12421a"}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x80}, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0x20, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x37, 0x40}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x950}, 0x0) 12m49.609534602s ago: executing program 1 (id=1782): r0 = socket(0x10, 0x803, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)="c24d5304833c27da1ef7f6916ede2e91d4a80bebca7d555b9f43feab3ef983d3c47de39b8771d9e0b643a5ffffffff3a5d3786a64fdb9a0960b163ce0bfc6a376951a35870dd757e774a55937a0eaef4b327b50d7a165ae52edb653091e07ec60b902aa8656c4a13e61e8774e60000fa2d8856613ebadbe0ef4bef02faf0175bba2899d05288207f4ee773b16abcdd7b32b7f174bc45", 0x96) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r4, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000200000006000f00b74b00004063073199b0625681db5ee8431a115afbdb8284a1a784df448a6b4b0b3d3d1650fd7b8ae8d9afc08b5540964946e3734eab881a4a6842e7714df2395a33ff210c308d0392e61828797f2b235f0c14aa19a028ece68da64f5a075ddc486a3cc67fe5806d7562206de06bb5558ae136dea773"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendto$packet(r2, &(0x7f00000002c0), 0x0, 0x4000, &(0x7f00000003c0)={0x11, 0x17, r4, 0x1, 0x10, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x275ba000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={0x0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x10) 12m43.301135065s ago: executing program 1 (id=1793): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc53a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x70, 0x6, "", [{{0x9, 0x4, 0x0, 0x5, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffc, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x15, 0xb4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x5, 0x80}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x20000004) move_pages(r1, 0x7, &(0x7f0000000140)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil], &(0x7f0000000180)=[0x1, 0x0, 0x8, 0x8d], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)=ANY=[@ANYBLOB="003002d636728239"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x50) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r6, 0x7, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r7, 0x4) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r9, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) syz_usb_ep_write(r0, 0x0, 0x37, &(0x7f00000003c0)="4f5e4f968d6218ad48243169430d2aafb12a996167415c1d042f3c1e5b236b0f61ad75288085e7aac7c0b0fcbb302050cab23805c851ea") r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff1000/0xf000)=nil) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000100)={0x3, "fa00050001000000000000000000000000000100000000000000ffff00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000240)={0x10000, "ccc4a7b8c9011f4c5c7bb0464d4d3b8cd0aab3850a1afbc9e37ab2c30676744f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r13, 0xc0303e03, &(0x7f0000000280)={"6739629f274d13b691ebe45b0006f500", r10, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r14, 0xc0303e03, &(0x7f0000000300)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', r12}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) 12m39.478199302s ago: executing program 1 (id=1798): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x268, &(0x7f0000000500)={@link_local, @empty, @void, {@ipv4={0x800, @gre={{0x16, 0x4, 0x1, 0x33, 0x25a, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0xa6, 0x0, 0x0, [0x7, 0x0, 0x9]}, @lsrr={0x83, 0x7, 0xb0, [@private=0xa010101]}, @generic={0x44, 0x12, "3f8138ae45a7cbebbd427a59125dea16"}, @end, @lsrr={0x83, 0x17, 0xf3, [@loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x37, 0x0, [0x5], "fd45d272dd1f71c310fa88325f3a4f6f192492267f2ab8568ae4d928c003efaae0943f884af1573b759dcd7aad6fa4e2a5de36d4de6c46"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x8], "0906b7ebd66c39e597a99a1f9887707538d0adb7d1cc299ffedecde92a4bcbd181c3e46df685894c1301da4403d17a96f279f6f2ba27649ddeb9ec4b1072761df34fa0acf90cad415b9970c0ced756324d256846212ba2f6a4fd95479c2958803703b626"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0xfffa], "a762504f733fbce19475f43368554962aba37f81864c7f4ff03e798b603c4cb1f66f256c0a1eb37e03c78e20b3f75e95d770ad8d455192a5e4438748238200a0a9c76c998d5c2c08da2d11f1f3b4ac783ec3a0bb72743763370ad37c7d6f3d8c5ab0ec969fb32f22ee1880328ada4fbecad90f90a553a6760b46ba"}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xfc, 0x2, 0x1, 0x0, 0x7, 0x5}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x8, 0x2, 0x0, 0x3, 0x7, 0xa}, 0x2, {0x5fa, 0xfffa, 0x0, 0x5, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "9d99f34c9d162e3a9cb45e502ab78e7de977a375b72993268f20d4f44f8da603aa824c42cd879144ab1263c066524aba9f579014dd93882f140e40431a03d9c983a4ea5d53db1ddf0276778012062e98a103ce93530ac5d84f9acfbd0c71d2f756345c9009d09127cef89744c93e8ad772d5591744accb224280745a90aecea53ad3b604ecd5495fc9c514b63ecf3b8c43d8c1a225c30eba91bf9fba85a1ba31"}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x301000, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/options/context-info\x00', 0x191c00, 0x12) read(r5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000400)={0x28, 0x1, r4, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000001c0)={0x18, r4}) 12m37.918855954s ago: executing program 32 (id=1798): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x268, &(0x7f0000000500)={@link_local, @empty, @void, {@ipv4={0x800, @gre={{0x16, 0x4, 0x1, 0x33, 0x25a, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0xa6, 0x0, 0x0, [0x7, 0x0, 0x9]}, @lsrr={0x83, 0x7, 0xb0, [@private=0xa010101]}, @generic={0x44, 0x12, "3f8138ae45a7cbebbd427a59125dea16"}, @end, @lsrr={0x83, 0x17, 0xf3, [@loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x37, 0x0, [0x5], "fd45d272dd1f71c310fa88325f3a4f6f192492267f2ab8568ae4d928c003efaae0943f884af1573b759dcd7aad6fa4e2a5de36d4de6c46"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x8], "0906b7ebd66c39e597a99a1f9887707538d0adb7d1cc299ffedecde92a4bcbd181c3e46df685894c1301da4403d17a96f279f6f2ba27649ddeb9ec4b1072761df34fa0acf90cad415b9970c0ced756324d256846212ba2f6a4fd95479c2958803703b626"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0xfffa], "a762504f733fbce19475f43368554962aba37f81864c7f4ff03e798b603c4cb1f66f256c0a1eb37e03c78e20b3f75e95d770ad8d455192a5e4438748238200a0a9c76c998d5c2c08da2d11f1f3b4ac783ec3a0bb72743763370ad37c7d6f3d8c5ab0ec969fb32f22ee1880328ada4fbecad90f90a553a6760b46ba"}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xfc, 0x2, 0x1, 0x0, 0x7, 0x5}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x8, 0x2, 0x0, 0x3, 0x7, 0xa}, 0x2, {0x5fa, 0xfffa, 0x0, 0x5, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "9d99f34c9d162e3a9cb45e502ab78e7de977a375b72993268f20d4f44f8da603aa824c42cd879144ab1263c066524aba9f579014dd93882f140e40431a03d9c983a4ea5d53db1ddf0276778012062e98a103ce93530ac5d84f9acfbd0c71d2f756345c9009d09127cef89744c93e8ad772d5591744accb224280745a90aecea53ad3b604ecd5495fc9c514b63ecf3b8c43d8c1a225c30eba91bf9fba85a1ba31"}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x301000, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/options/context-info\x00', 0x191c00, 0x12) read(r5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000400)={0x28, 0x1, r4, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000001c0)={0x18, r4}) 12m1.932131342s ago: executing program 5 (id=1875): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) (fail_nth: 2) 12m1.29030496s ago: executing program 5 (id=1877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000001200)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) 12m0.054534966s ago: executing program 5 (id=1880): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='usb3503 0x08\n\x00', 0xd) syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a1009050300000400000009050000ebff09030509050402000000000009058102e0"], 0x0) 11m55.749132961s ago: executing program 5 (id=1888): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x20000010) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = epoll_create1(0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0x28002011}) 11m54.167033065s ago: executing program 5 (id=1894): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='e1my_eprob', 0xa) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000349000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x60000000000000, 0x9, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setrlimit(0x9, &(0x7f00000001c0)={0x4}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x9) connect(r3, &(0x7f0000000240)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) getpeername$packet(r3, 0x0, &(0x7f0000000080)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 11m50.349280798s ago: executing program 5 (id=1903): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) syz_emit_ethernet(0xfa, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$sock(r3, 0x0, 0x40801) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000003c0)=0xfffffffd, 0x4) write(r1, &(0x7f0000000200)="9c97", 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000101401002cbd70000bbda9160800010001"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) file_getattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x18, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0x300, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200001, 0x46, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@deltfilter={0x904, 0x2d, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff2, 0xc}, {0x1, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x8c8, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xc1}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xa}}, @TCA_U32_POLICE={0x8a4, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc4, 0x0, 0xffff, 0x8, 0x3ff, {0x2, 0x1, 0x800, 0x2ea, 0x1, 0x3}, {0x5, 0x0, 0x9, 0xfff, 0x8, 0x1}, 0x4, 0x800, 0xff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x6, 0x9, 0x464d, 0x8001, 0x1f, 0x4, 0x38, 0x10003, 0x3, 0xb, 0x81, 0x620, 0x0, 0xc1, 0x3, 0x1, 0x10, 0x6, 0x10000, 0x0, 0xd4d6, 0xa, 0x5, 0xc0e, 0x6, 0x4, 0x3, 0xc, 0x20c9, 0x3, 0x4, 0x55, 0x6, 0x8, 0x1, 0x4, 0x3, 0x2, 0x8, 0x501, 0x9, 0x3ff, 0x9, 0x8, 0x5, 0x3, 0x4, 0x2, 0x8, 0x7, 0xd, 0xfff, 0x5, 0x8001, 0x3, 0x9, 0x7, 0x200, 0xffffffff, 0x47, 0x1, 0x120, 0x8, 0x3, 0x1, 0x2, 0x9, 0x8, 0x81, 0xffffff3d, 0x10000, 0x0, 0x9, 0x4, 0x1, 0x40, 0x9, 0x1, 0x7ff, 0xef7, 0x5061, 0x1, 0x7, 0x9c50, 0x8, 0x200004, 0xfffffe00, 0x3f, 0x8, 0xe547, 0x4, 0x80000000, 0x3, 0x16c, 0x79dd, 0xfffffff7, 0x3ff, 0x1000, 0x7, 0x5, 0x8, 0x7, 0x7, 0x3, 0xc, 0x9, 0x4, 0x80f, 0x80, 0x49eaefe2, 0xda, 0x2, 0x8000, 0x0, 0x6, 0xeb6, 0x3, 0x8, 0x401, 0x4, 0x0, 0x5, 0x854, 0x1, 0x1, 0xc16, 0x7, 0xffff, 0xfff, 0x0, 0x7fffffff, 0xcc18, 0x795f, 0x1, 0x2, 0x54, 0x4, 0xfff, 0x7, 0x5, 0xd2f5, 0xe, 0xd3b, 0x3, 0xfffffffe, 0x1, 0x5, 0xfffffff9, 0x81, 0x1, 0x8000, 0x67, 0x4a4, 0x2, 0x9, 0x3, 0x6, 0x1d9, 0x7, 0x3ff, 0x0, 0x7, 0x1, 0x8, 0x4, 0x10000, 0x7fff, 0x5, 0x3, 0xef, 0xffff, 0x8, 0x400, 0x8, 0x99c8, 0x8001, 0xa, 0xa8c, 0x6, 0x800, 0xa, 0x100, 0x600, 0xf, 0xfa, 0xb, 0x401, 0x5, 0x10000, 0x7ff, 0xffffffff, 0x6, 0x3, 0x17, 0x101, 0x10000, 0x3ff, 0x7, 0x1, 0x200, 0xefe8, 0x3, 0xffff, 0x7f, 0x9, 0x7fff, 0x3, 0x6, 0x9, 0x3abb, 0x5, 0xf, 0xfffffffb, 0x0, 0xfffffffe, 0xc161, 0x800, 0x9f9, 0x0, 0x5, 0x3, 0x1, 0x8, 0x10, 0x492, 0x6, 0x7, 0x8, 0x7, 0x0, 0x0, 0xec, 0x0, 0x1, 0x4, 0x4, 0x6, 0x6, 0x3, 0x0, 0x4, 0x6, 0x5, 0x9, 0x8, 0x49f, 0x8, 0x7, 0x3, 0xfffffffb, 0xff, 0x9, 0x5, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x3, 0x1, 0x200, 0x1000, 0x858b, 0x6, 0x7, 0x1, 0x2, 0x0, 0x4, 0x3, 0x4, 0x8, 0xefba, 0x8, 0x1, 0x9, 0xf, 0x9, 0x3, 0x3, 0x8, 0x8, 0xcd1, 0x9, 0x401, 0x10000, 0x5, 0x339, 0x7, 0x9, 0x2, 0x8, 0x3, 0x8, 0x80, 0x17b, 0xa4, 0x6, 0x9, 0x0, 0x401, 0x1, 0xfffffff8, 0x6964, 0x9, 0x43a, 0x4, 0xf, 0xa, 0x7, 0xd, 0xab, 0xf3, 0x2, 0x2, 0x3, 0x7, 0x128, 0x80, 0x61f, 0x7, 0x2, 0x4, 0x959, 0x200, 0x9, 0xfff, 0x0, 0x81, 0x2, 0xfffffffc, 0x7f, 0x3, 0x6, 0x1000, 0x66de, 0xfffff83f, 0x5, 0xf181, 0xf3, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xff, 0x7, 0x0, 0x3, 0x8000, 0x4, 0x8, 0x8b7, 0x80000001, 0x7fff, 0xe07a, 0x8, 0xa91, 0x6d, 0x2, 0x1, 0x8, 0x3, 0x191, 0xa, 0x7, 0x8, 0xa, 0x3, 0x9, 0x6, 0xa0c2, 0xe11, 0x4, 0x6, 0x7, 0xffffffff, 0xc, 0x6b, 0x5, 0xfffffff7, 0x1, 0x9, 0x98, 0xff, 0x1, 0x3, 0x0, 0xfffdfffd, 0x2e680, 0x2, 0x4, 0x1, 0x80000000, 0x20000, 0x0, 0x21fbe8d2, 0x800, 0xffff3074, 0x6df6, 0x6de, 0x6f, 0x40, 0xff, 0x2, 0xfffffffa, 0x4, 0x0, 0x9, 0x2, 0x7ff, 0x0, 0x4, 0x10001, 0x80000001, 0x5, 0x80, 0x6, 0x44687b52, 0x0, 0x31, 0xfffffff8, 0x5, 0xc, 0x700, 0xa, 0x8, 0xd, 0x5, 0xf, 0x0, 0xffffffff, 0x0, 0xc37, 0xff, 0x1, 0x7, 0x8, 0x0, 0x8, 0x10001, 0x9, 0x9, 0x2, 0x7ff, 0x9, 0x0, 0xffffffff, 0x1, 0x7, 0x8, 0x9, 0x9, 0xb, 0x6, 0x70, 0x5, 0x100, 0x8, 0x4, 0x8, 0x4, 0x7, 0xe, 0xe, 0x677, 0x6, 0x2, 0xb67, 0x3, 0x7, 0xfff, 0x7, 0x8, 0x3, 0x400, 0x38000000, 0x5, 0x6, 0x1, 0x1a3b7a97, 0x8, 0x5, 0xf836, 0x3ff, 0x11, 0xe, 0x9, 0x6, 0x8dd, 0x1, 0x3, 0x7fffffff, 0x8, 0x7fffffff, 0x7ffffffd, 0x1, 0x80000000, 0x1, 0xe13, 0x3, 0xc8c, 0x4, 0x1, 0x1, 0x2, 0x81, 0x3, 0x7, 0x7fff, 0x58b, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x420e}]}, @TCA_U32_LINK={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8252}]}, 0x904}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) socket$kcm(0x2, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) 11m34.788782527s ago: executing program 33 (id=1903): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) syz_emit_ethernet(0xfa, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$sock(r3, 0x0, 0x40801) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000003c0)=0xfffffffd, 0x4) write(r1, &(0x7f0000000200)="9c97", 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000101401002cbd70000bbda9160800010001"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) file_getattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x18, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0x300, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200001, 0x46, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@deltfilter={0x904, 0x2d, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff2, 0xc}, {0x1, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x8c8, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xc1}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xa}}, @TCA_U32_POLICE={0x8a4, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc4, 0x0, 0xffff, 0x8, 0x3ff, {0x2, 0x1, 0x800, 0x2ea, 0x1, 0x3}, {0x5, 0x0, 0x9, 0xfff, 0x8, 0x1}, 0x4, 0x800, 0xff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x6, 0x9, 0x464d, 0x8001, 0x1f, 0x4, 0x38, 0x10003, 0x3, 0xb, 0x81, 0x620, 0x0, 0xc1, 0x3, 0x1, 0x10, 0x6, 0x10000, 0x0, 0xd4d6, 0xa, 0x5, 0xc0e, 0x6, 0x4, 0x3, 0xc, 0x20c9, 0x3, 0x4, 0x55, 0x6, 0x8, 0x1, 0x4, 0x3, 0x2, 0x8, 0x501, 0x9, 0x3ff, 0x9, 0x8, 0x5, 0x3, 0x4, 0x2, 0x8, 0x7, 0xd, 0xfff, 0x5, 0x8001, 0x3, 0x9, 0x7, 0x200, 0xffffffff, 0x47, 0x1, 0x120, 0x8, 0x3, 0x1, 0x2, 0x9, 0x8, 0x81, 0xffffff3d, 0x10000, 0x0, 0x9, 0x4, 0x1, 0x40, 0x9, 0x1, 0x7ff, 0xef7, 0x5061, 0x1, 0x7, 0x9c50, 0x8, 0x200004, 0xfffffe00, 0x3f, 0x8, 0xe547, 0x4, 0x80000000, 0x3, 0x16c, 0x79dd, 0xfffffff7, 0x3ff, 0x1000, 0x7, 0x5, 0x8, 0x7, 0x7, 0x3, 0xc, 0x9, 0x4, 0x80f, 0x80, 0x49eaefe2, 0xda, 0x2, 0x8000, 0x0, 0x6, 0xeb6, 0x3, 0x8, 0x401, 0x4, 0x0, 0x5, 0x854, 0x1, 0x1, 0xc16, 0x7, 0xffff, 0xfff, 0x0, 0x7fffffff, 0xcc18, 0x795f, 0x1, 0x2, 0x54, 0x4, 0xfff, 0x7, 0x5, 0xd2f5, 0xe, 0xd3b, 0x3, 0xfffffffe, 0x1, 0x5, 0xfffffff9, 0x81, 0x1, 0x8000, 0x67, 0x4a4, 0x2, 0x9, 0x3, 0x6, 0x1d9, 0x7, 0x3ff, 0x0, 0x7, 0x1, 0x8, 0x4, 0x10000, 0x7fff, 0x5, 0x3, 0xef, 0xffff, 0x8, 0x400, 0x8, 0x99c8, 0x8001, 0xa, 0xa8c, 0x6, 0x800, 0xa, 0x100, 0x600, 0xf, 0xfa, 0xb, 0x401, 0x5, 0x10000, 0x7ff, 0xffffffff, 0x6, 0x3, 0x17, 0x101, 0x10000, 0x3ff, 0x7, 0x1, 0x200, 0xefe8, 0x3, 0xffff, 0x7f, 0x9, 0x7fff, 0x3, 0x6, 0x9, 0x3abb, 0x5, 0xf, 0xfffffffb, 0x0, 0xfffffffe, 0xc161, 0x800, 0x9f9, 0x0, 0x5, 0x3, 0x1, 0x8, 0x10, 0x492, 0x6, 0x7, 0x8, 0x7, 0x0, 0x0, 0xec, 0x0, 0x1, 0x4, 0x4, 0x6, 0x6, 0x3, 0x0, 0x4, 0x6, 0x5, 0x9, 0x8, 0x49f, 0x8, 0x7, 0x3, 0xfffffffb, 0xff, 0x9, 0x5, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x3, 0x1, 0x200, 0x1000, 0x858b, 0x6, 0x7, 0x1, 0x2, 0x0, 0x4, 0x3, 0x4, 0x8, 0xefba, 0x8, 0x1, 0x9, 0xf, 0x9, 0x3, 0x3, 0x8, 0x8, 0xcd1, 0x9, 0x401, 0x10000, 0x5, 0x339, 0x7, 0x9, 0x2, 0x8, 0x3, 0x8, 0x80, 0x17b, 0xa4, 0x6, 0x9, 0x0, 0x401, 0x1, 0xfffffff8, 0x6964, 0x9, 0x43a, 0x4, 0xf, 0xa, 0x7, 0xd, 0xab, 0xf3, 0x2, 0x2, 0x3, 0x7, 0x128, 0x80, 0x61f, 0x7, 0x2, 0x4, 0x959, 0x200, 0x9, 0xfff, 0x0, 0x81, 0x2, 0xfffffffc, 0x7f, 0x3, 0x6, 0x1000, 0x66de, 0xfffff83f, 0x5, 0xf181, 0xf3, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xff, 0x7, 0x0, 0x3, 0x8000, 0x4, 0x8, 0x8b7, 0x80000001, 0x7fff, 0xe07a, 0x8, 0xa91, 0x6d, 0x2, 0x1, 0x8, 0x3, 0x191, 0xa, 0x7, 0x8, 0xa, 0x3, 0x9, 0x6, 0xa0c2, 0xe11, 0x4, 0x6, 0x7, 0xffffffff, 0xc, 0x6b, 0x5, 0xfffffff7, 0x1, 0x9, 0x98, 0xff, 0x1, 0x3, 0x0, 0xfffdfffd, 0x2e680, 0x2, 0x4, 0x1, 0x80000000, 0x20000, 0x0, 0x21fbe8d2, 0x800, 0xffff3074, 0x6df6, 0x6de, 0x6f, 0x40, 0xff, 0x2, 0xfffffffa, 0x4, 0x0, 0x9, 0x2, 0x7ff, 0x0, 0x4, 0x10001, 0x80000001, 0x5, 0x80, 0x6, 0x44687b52, 0x0, 0x31, 0xfffffff8, 0x5, 0xc, 0x700, 0xa, 0x8, 0xd, 0x5, 0xf, 0x0, 0xffffffff, 0x0, 0xc37, 0xff, 0x1, 0x7, 0x8, 0x0, 0x8, 0x10001, 0x9, 0x9, 0x2, 0x7ff, 0x9, 0x0, 0xffffffff, 0x1, 0x7, 0x8, 0x9, 0x9, 0xb, 0x6, 0x70, 0x5, 0x100, 0x8, 0x4, 0x8, 0x4, 0x7, 0xe, 0xe, 0x677, 0x6, 0x2, 0xb67, 0x3, 0x7, 0xfff, 0x7, 0x8, 0x3, 0x400, 0x38000000, 0x5, 0x6, 0x1, 0x1a3b7a97, 0x8, 0x5, 0xf836, 0x3ff, 0x11, 0xe, 0x9, 0x6, 0x8dd, 0x1, 0x3, 0x7fffffff, 0x8, 0x7fffffff, 0x7ffffffd, 0x1, 0x80000000, 0x1, 0xe13, 0x3, 0xc8c, 0x4, 0x1, 0x1, 0x2, 0x81, 0x3, 0x7, 0x7fff, 0x58b, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x420e}]}, @TCA_U32_LINK={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8252}]}, 0x904}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) socket$kcm(0x2, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) 5m31.549548798s ago: executing program 6 (id=2663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000500000014000180060001000a000000080005000100000038000280140001000000000000000000000000000000000106000200500000000800030002000000080004000100000008000500000000000800050002"], 0x84}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x21}, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}, {@dev={0xac, 0x14, 0x14, 0x12}}]}]}}}}}}}, 0x0) socket(0x11, 0x80a, 0x0) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r10, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) io_submit(0x0, 0x8, &(0x7f0000000cc0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x3, r9, &(0x7f00000003c0)="b11c098749d52c0d0512fa1e0cb625984fa56614675b6dd9129ae2a3ddc856f0d13aa56665c393bc11f99922fe470f55c07ca5ad", 0x34, 0x401, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x401, r3, &(0x7f0000000500)="c385443739f188a6ff6ae2103de5b3486b8bbf39d51a7403582d06446fb9e825ba7b51d1fac53abc1e6174c17647f07d77844036d89093ef48ace3c1", 0x3c, 0x2, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0xf6bf, 0xffffffffffffffff, &(0x7f0000000580)="ef33b5c4eab1a6adaf48ed062f36c5d4e071bbe51a5975fcff115e294e0e56ae38137c52202b24bf2b2c4edf9829addbad3d2fc9df30f7a93bd3b73a967a31c96f1db7ab47107816fb8d695ba1f678be7c272644c6461ffd3fb37b64f9584fd8019c26c8d3235ef102e55ceb", 0x6c, 0xd000000, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, r10, &(0x7f0000000640)="dff8f10960ec08eede8f815e7d62fefa2e56481390b7d6d3c651e6c9569f86f477a8", 0x22, 0x9, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x200, r0, &(0x7f0000000780)="2b07f41ef0e8e4819fe83ad3b74763fe59def43af981863f83043e1e0f3b1238b3a2e538c008158862209851f8fcd67455ce4e46da6d32bdbe49432f3ec52d4099b2162749e05843580ab3936b338509d7041d49253587cd4f54f2fbca55fa854fd1b6df67f65af5e250a74615e0886a0b536ee4b7c1bf18798a73595e5235fde5", 0x81, 0x1, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f00000008c0)="f8038daab88edd4b241b5021358a0bf0e892e24de83996aaec38e08dc086cbe2cc7d900e304636f8115e6eded39240ef879eb9f074604936a7625a0ecd39276f7eb84835296afc2adf5dc2b7a99663904135077d5776c6904934f96deeae4c3a17c61a2a924d3102f13f456c4a8593c77b39966a738b105f2f4e0d09c758c60d55a1e95a2fce95215a4a74aae718dc69e1f72fdf485136e913ee9e29018adf43f351feea203974fd043be9d184304b23b1289a4d10b36bde4fb8a43f2e97c1ba8b8161", 0xc3, 0x100000001, 0x0, 0x1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x2, 0x401, r6, &(0x7f0000000a00)="ef194505b2f88871f521e2b892c7ef58cb7ce265c4d3d6dd7c171f25c67a70dbd1dccec196389b2e71c747269a1d70b8fa94c1b0cf6bee73cd8724dc079fb1bc4fc1", 0x42, 0x0, 0x0, 0x3}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x81, r6, &(0x7f0000000c00)="68f365d57e8411c1e8e1f698eb2be114c1bfa8c6f84662ff033ef0e4c946993f63650ff5f1b727dc9b64b61d99650108e78c60d987e037b9e3cd4aecf1039aa98c4ca00f1851d86730b889618f77416c8cf04126a00aefa2584837a5c97181e623d9b6b7797a61fe60339347beba56f29b314a67cc02e2ad9d49511c490834", 0x7f, 0x8, 0x0, 0x2}]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x800, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, r11, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000020806000186dd06100203aaaaaaaaaa1dfc0200"/44], 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) 5m30.518093192s ago: executing program 6 (id=2666): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000000)={&(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000040)={0x0}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10) listen(0xffffffffffffffff, 0x0) unshare(0x40400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10122, 0x0, 0xffffffffffffff16) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/sync_on_suspend', 0x40500, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 5m26.55428874s ago: executing program 6 (id=2676): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) r0 = socket$inet6(0xa, 0x3, 0x800000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000300)='-:_', 0x3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="58000000020601f70c7ebd0d1c080000000080000000000000000900020073797a300000000005000400030000000c000300686173683a6970400000000c050005000a0000000500260fc02a0000"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x5, @loopback, 0x10000}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0xfffffff9}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}], 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40400c1) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0xff, 0x9, 0x0, 0x4}, 0x20) 5m25.191328651s ago: executing program 6 (id=2678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x6612, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r10, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01000000e9090000000002000000050002000a000000"], 0x1c}}, 0x0) lseek(0xffffffffffffffff, 0x7ffffffffffffffe, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) 5m21.90092292s ago: executing program 6 (id=2691): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x700) io_setup(0x2007, &(0x7f0000000980)=0x0) r7 = eventfd2(0x3, 0x80000) io_pgetevents(r6, 0xffffffffffff46b1, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_getevents(r6, 0x1, 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x6, r3, &(0x7f0000000100)="45d294aa112298dee6c00e01d1a2cca2ee53e112a12dfffb15927686364ee784d73a09b276c07d6f971769b42c576b4705f18286f08bc6cf88c46bcdd523fd6f11ed2353495b1f2e84521dbb853be1c624381505f46f80f288d0e17dd63ee8ed65b9087ae2a60d0cdb7c37a782d0f0079479a2227d222b17fa731e9eeb25d66f0a13e2d8869e54e3fff4b0dbe15956e9924d9ba6cb580d7c", 0x98, 0x4}]) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r8, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) 5m16.412993041s ago: executing program 6 (id=2703): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x700) io_setup(0x2007, &(0x7f0000000980)=0x0) r7 = eventfd2(0x3, 0x80000) io_pgetevents(r6, 0xffffffffffff46b1, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_getevents(r6, 0x1, 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x6, r3, &(0x7f0000000100)="45d294aa112298dee6c00e01d1a2cca2ee53e112a12dfffb15927686364ee784d73a09b276c07d6f971769b42c576b4705f18286f08bc6cf88c46bcdd523fd6f11ed2353495b1f2e84521dbb853be1c624381505f46f80f288d0e17dd63ee8ed65b9087ae2a60d0cdb7c37a782d0f0079479a2227d222b17fa731e9eeb25d66f0a13e2d8869e54e3fff4b0dbe15956e9924d9ba6cb580d7c", 0x98, 0x4}]) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r8, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) 5m15.66563876s ago: executing program 34 (id=2703): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x700) io_setup(0x2007, &(0x7f0000000980)=0x0) r7 = eventfd2(0x3, 0x80000) io_pgetevents(r6, 0xffffffffffff46b1, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_getevents(r6, 0x1, 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x6, r3, &(0x7f0000000100)="45d294aa112298dee6c00e01d1a2cca2ee53e112a12dfffb15927686364ee784d73a09b276c07d6f971769b42c576b4705f18286f08bc6cf88c46bcdd523fd6f11ed2353495b1f2e84521dbb853be1c624381505f46f80f288d0e17dd63ee8ed65b9087ae2a60d0cdb7c37a782d0f0079479a2227d222b17fa731e9eeb25d66f0a13e2d8869e54e3fff4b0dbe15956e9924d9ba6cb580d7c", 0x98, 0x4}]) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r8, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) 2m49.603624963s ago: executing program 0 (id=2998): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160ae36504b68675f8001d000a00a0e69ee517d344000000000000ce27251e6182949a36c23d3b48dfd8cdbf9367b4fa06000000c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000680)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3m\xcf\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, ':%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x3000) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xfdd9) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYRES8=r5, @ANYRES32=r6, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRESOCT=r1, @ANYRES8=0x0], 0x68}, 0x1, 0x0, 0x0, 0x2004c814}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0xc}, {0xfff2, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2m49.181556978s ago: executing program 0 (id=3000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000500000014000180060001000a0000000800050001000000380002801400010000000000000000000000000000000001060002005000000008000300020000000800040001000000080005000000000008000500020000001c0002800800050001000000080006000010000008000800d4000000"], 0x84}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x21}, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}, {@dev={0xac, 0x14, 0x14, 0x12}}]}]}}}}}}}, 0x0) socket(0x11, 0x80a, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r9, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) io_submit(0x0, 0x8, &(0x7f0000000cc0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x3, r8, &(0x7f00000003c0)="b11c098749d52c0d0512fa1e0cb625984fa56614675b6dd9129ae2a3ddc856f0d13aa56665c393bc11f99922fe470f55c07ca5ad", 0x34, 0x401, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x401, r3, &(0x7f0000000500)="c385443739f188a6ff6ae2103de5b3486b8bbf39d51a7403582d06446fb9e825ba7b51d1fac53abc1e6174c17647f07d77844036d89093ef48ace3c1", 0x3c, 0x2, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0xf6bf, 0xffffffffffffffff, &(0x7f0000000580)="ef33b5c4eab1a6adaf48ed062f36c5d4e071bbe51a5975fcff115e294e0e56ae38137c52202b24bf2b2c4edf9829addbad3d2fc9df30f7a93bd3b73a967a31c96f1db7ab47107816fb8d695ba1f678be7c272644c6461ffd3fb37b64f9584fd8019c26c8d3235ef102e55ceb", 0x6c, 0xd000000, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, r9, &(0x7f0000000640)="dff8f10960ec08eede8f815e7d62fefa2e56481390b7d6d3c651e6c9569f86f477a8", 0x22, 0x9, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x200, r0, &(0x7f0000000780)="2b07f41ef0e8e4819fe83ad3b74763fe59def43af981863f83043e1e0f3b1238b3a2e538c008158862209851f8fcd67455ce4e46da6d32bdbe49432f3ec52d4099b2162749e05843580ab3936b338509d7041d49253587cd4f54f2fbca55fa854fd1b6df67f65af5e250a74615e0886a0b536ee4b7c1bf18798a73595e5235fde5", 0x81, 0x1, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f00000008c0)="f8038daab88edd4b241b5021358a0bf0e892e24de83996aaec38e08dc086cbe2cc7d900e304636f8115e6eded39240ef879eb9f074604936a7625a0ecd39276f7eb84835296afc2adf5dc2b7a99663904135077d5776c6904934f96deeae4c3a17c61a2a924d3102f13f456c4a8593c77b39966a738b105f2f4e0d09c758c60d55a1e95a2fce95215a4a74aae718dc69e1f72fdf485136e913ee9e29018adf43f351feea203974fd043be9d184304b23b1289a4d10b36bde4fb8a43f2e97c1ba8b8161", 0xc3, 0x100000001, 0x0, 0x1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x2, 0x401, r6, &(0x7f0000000a00)="ef194505b2f88871f521e2b892c7ef58cb7ce265c4d3d6dd7c171f25c67a70dbd1dccec196389b2e71c747269a1d70b8fa94c1b0cf6bee73cd8724dc079fb1bc4fc1", 0x42, 0x0, 0x0, 0x3}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x81, r6, &(0x7f0000000c00)="68f365d57e8411c1e8e1f698eb2be114c1bfa8c6f84662ff033ef0e4c946993f63650ff5f1b727dc9b64b61d99650108e78c60d987e037b9e3cd4aecf1039aa98c4ca00f1851d86730b889618f77416c8cf04126a00aefa2584837a5c97181e623d9b6b7797a61fe60339347beba56f29b314a67cc02e2ad9d49511c490834", 0x7f, 0x8, 0x0, 0x2}]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x800, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, r10, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000020806000186dd06100203aaaaaaaaaa1dfc0200"/44], 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) 2m47.75835939s ago: executing program 0 (id=3002): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180c0000000000000600"/24], 0x18}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000100)={0x2d, 0x2c, 0x100082, 0x15, 0x5, 0xac, 0x2, 0xaf, 0x1}) 2m47.568280623s ago: executing program 0 (id=3004): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c0003"], 0x68}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xffc}]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2m47.173924932s ago: executing program 0 (id=3005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x1941054, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, 0x0, 0x0) 2m46.208934495s ago: executing program 0 (id=3006): sync() sync() sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000680)={0xfffffff9, 0xf95, 0x5, 0x8, 0x1a, "6518883aa267cb6a471bfcd183cc274d6d5cd0"}) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="bd6ef6f039d2ffff7d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) 2m31.155562562s ago: executing program 35 (id=3006): sync() sync() sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000680)={0xfffffff9, 0xf95, 0x5, 0x8, 0x1a, "6518883aa267cb6a471bfcd183cc274d6d5cd0"}) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="bd6ef6f039d2ffff7d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) 11.890178326s ago: executing program 8 (id=4045): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="200803"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r2, 0xb0dd000) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x3f, &(0x7f00000008c0)=0x2, 0x4) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x21) write$binfmt_aout(r4, &(0x7f0000000180)={{0x107, 0x2, 0x7, 0x369, 0x3e1, 0x5, 0x2f4, 0x12c52c65}, "a6a0f8a4177f3f163cecbc0702f8a7397fea1ea0e57774445d9091edecedf03620fbbd441f227135a6aa8918b82f94e319a84cd247fa2053ea34a1e850d540225edaafda2d6763a920131af21fa81c22d818b846435395d7802606695731aaf7604d74622705b9c6cfb087408a55fbfb3998651f3164bb05245dfaa493cf247f492eae1cc8ca30e16193e55ed3b1ff32ff757b1384a73afcee5b4d692ea0d45f7e"}, 0xc1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x30, 0x2, @ib={0x1b, 0xffff, 0x542, {"502076b560e54777232c80cac43d502b"}, 0x6, 0x8, 0x2}}}, 0xa0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 9.19380255s ago: executing program 3 (id=4059): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b40)=""/4087, 0xff7}, {0x0}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000a80)=""/172, 0xac}, {&(0x7f0000000500)=""/176, 0xb0}], 0x6}, 0x10100) 9.079904456s ago: executing program 3 (id=4061): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1}) ioctl(r0, 0x3b8e, &(0x7f0000000580)="10") ioctl(r0, 0x3b89, &(0x7f00000005c0)="3000000004000000030000000100"/40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.917679961s ago: executing program 3 (id=4062): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, 0x0, 0x0, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 8.702761373s ago: executing program 3 (id=4063): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0xfffffff5}) r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004400)="6074800be6a663e55421e35b2d43c491fcb92e5276791368f7ac2306753e5c7f43fa1b328eeff3ade5036fa9a59965b7df04f04f394c4cdfa8154858a9b5c5e05dcbb6c6da75b7a0cb7d0ffa4f38aad2817157bebff12aadd611f82c34b5a46a36986ae839bacb8fbd6d5b683cffb6a6deac9a40e90d498ce1c6a8d40923128d548f72af5df610254e7c7694126b8b7494136c9be79639605b6ced224b4a90169ac56ee14947ab15a77c56af89e73b0cf83a771af79d268d57db9c16b4752b205844fcf27e9a584dbc110728c484f0509c190bd94befea72c78d2c1539a2314f95183804234d66727c337deb23f16352880071a4a7234250c6cdd977668ecd4b18ec46f19f49ab9be757a3db22f6390d34d4e6b3535689feb7d63d08a8927aa90e627aae135c154df05403fc33fcb6a409a5ec3d729d1f647da6043660e0260a359cd65cb016ddaf275ba215b10f7a144a94b7dd57a8a754a119683e716c9fe7219d2be8d006e7e309b81140664240dd372168cc05932f05c8aaa9f8772456062f01270c099da18a451f7618e2ea324db80e2d47dcacfd030ee12e88f48e5aae2e3297f748d5832e74a777cbc4cf26a8733963ddef4a2f62696345c81b8b79dabf2d010ee6318ee3928d6a9c8f6b28db6a4c590a3a5dc0bc10770a879d05976dc75af7448e9f9506c72d79b7bd1bc829472706686382a12c8b6fae13094269588782d12694da6565f0bbbb4f0f707307f36285ee491f0c8a2942107651bab4639a6000fec0590896120f97813a3a8f0c8b5beb5e5e113ebeeb4404567230ce492c1398ed1bf07353c2f49e6703d0c41a59588bd6e1acc133291947b9088c6ada89caa09d83bb8dfc768574968235fe9ba04fefa161e36fde8f2cbf877ec3c284d85253f6bcf941150937544e92dcdc360a20516158557d4aa08e781fcda8cb90186ed407bd934cc8801edb7dc19e60dc1f86f056e9728359406dd4ac81683a5d41de219d97bbd9edcfc5cc81c8d23157865a6eeb1c30bd6fa93b6174c0a2f97d6bddfbb6014a820f39870c1df328792b8133f6dedac7fff173b54fc5024e3163eeb6094fb00e9848a9e11e37fa454f6192fe9cc9c3bb68bc418cd170c43a90cb4cf0540489a26cc89b316bd5fa410b517ca63a4ceeaacbd0243f25d0236b8a2424c45f0eabc584bbf268302747d68257499db740115d413a209c6b05f6d01cdd069f4a2b208d48a98bccf569af42999eae6f7ef3f40dba45d3b38e1c28fddf0cfe1bfe02fe77315f329329f3843467cb29c490c694dc5ebebb0e6eb42fb9e611d2e07c01773605a4a542a32a2f47bd1524cf4c2bb064e8eee2e95c4dea608581794b6ec05cd0558d1251ad3aeec246717ea9ab2730c7c1a29879bd44a61fd86058ae677789bdba038f2054445ef2efb18b9924d863fe4e91f0670f00ac4dd7a75e182b3eb45df57499ea81149529f6a59c5293f89ae07001acefaa3ac2731f0f8f940d83fa529efb49ab2960dbed16fb18a5fa8e624a5e7d40a6b909da91aed2ac73ebc9eb83b093fd9ef6e2ecec94d24c2a2dc2914df20f2aa07b396ab02e0ad91ac44b1a76c331f5dceb7b7569d8103f8c8e944a2c1772ec9b42462463a534ffaf6d3e4dfca3cc556a34c857b7096a67e9795c133d351ca436e99b23537e93dec2b2abb6082f20b25a767185f4d33f6a5eb65eae396a2ebeecfbacb6992246e0c56dd0e73d615e73567fde83e8fc26d168edd0a4cbafe5b9d1d92bfdb0461ec4d1a0672072ddcadaecc750208355e281aa0fc0cd06085a91083f21ec2a8307205fa0e26bafc7ceafcbe5d19e0c29f62d4e6e14b037b735e26d97037dcf863784beef2bb374ce40c67971730cf4cba66afd802ab3b8c24836ab1fe903d46b82d8145cfcd9e45997044cc4ac3154bd3006a252c590eb7523494d64f8301e4f8388557aded12a969bf149d8767eb912c10976e48806823304bec64db0b50635240093911736b6f5b3a358713d882fb522da3afc5ce818ccc80b7a3a5834e2dc2d2fc6f8252198f82885d45e3171a6abc7319602c309f74250bc1e5f6c42a1d1dadfb589d6ebf6e2f5fab456abee5038d0b55eb961dda18334110173a8db62f4fa41cf6aeb47d62ae179e2c45d60657c70e3549734437e3098d948a1f709079427c3fdab87f6d2abad9d35326f69aa40a8d76c8b5147539ea9b80c18cf32248ea2429c0fcbe506c4c98790a885c5c34104e130e520f2741666b984be1892e5552454d1750ae76dbb52688bef7edcf286f61bfdecbffb277549fe144c71f908fc1b4831e0062386600e0ecb61fa2227c4ecd51b4e14bf412b438b9c839bea9ec8a15616fadedba57e7cb0e727289ecc014dc9fb21f3619533355a5c614cce36016196c503e7df99acca67025d2744c8b428575c89897314a822c8010ec8e2a0b085e2f6e11d3acd29382da799d5d51ab110666d49d3030268cf903d08000000000000009d065e806ed89f46cacb5fe4cd5be3bb2c7e287df2ce18637ee8b0def95a3395004e3d739fe3f34fba26ecdd47ff86795b59c06101699a99e1e8098bf0206d453c738fa8b2110037ea9bb72e4a600b2f6cb49695ec7e9b61bba6360ce105d681970592cf3ff05381d5df9be8c7d6ce64914211f0c84d5aa8addca85ffaa656bcdf576fc2f52514e3e5ea7d23ff296ab746913ddabc437ca5cedec9a85f48aac54601888d82f2bdfc0f908fb544329fd740ae969dedb427cfd12bfd094eda6126f7fad7ba2c38811f0893a08c670804e88b94d355bcf517cbfb8e45934b3c7ed13b5ab309b0996ba1778c82f462b9fbc67ee8a06dd1e7ff7a584fdb0a3eb1a4f7857f8af8b60c27027a83a9c4b65f727c7f861e2a497a53da9efead3c11fc22dce14e1621a678a37794f08e5ca62bf036590a4680c45b0152bbfcc8bdb727b40f504750a356fc1ef044d038415ca57f26a6191512dcc31373dfc6feab298c2f761bb48ac177656160be1c0bb37dc45a6eb6db84c3681939f479dee630108ad479eb8815bd9e65838c171686e907d212e10d26ab0d6cae312db3180e0cc642c67a822c9702a344d3242b94a20aad40788fe539769ff33b777b14a175e5d9980414e2281c52f05540174eae1d83006ad74ee5f2214d032b4cce90029b9ca8af3ae4eeae1b3463cbc078c51db509802158cce5fa9cdf4c3b35ee3c622b4b96b9d0f6a5598e1eea82cf27a3f61bdd5808acc5eae715be2e1068884e49baab264c2575645f1fcaf5b07cb001e3c661656959ab665462be436f79b14076903fe18921d25393d770b8f2039b2791167ace1d95fee3534ab872e639196a5364bd79ddc91d2c049a83eb7c0add3e3fabcb070d475bf544327d908fc8df486ffb040db05a5bbcf34f23a65b69f31b65bb2e2f960430d3abe9172738fe647521a2760975174f549cce5d1f6ce51cc96a47596cd171322e18c183813fa58fca62a1841083c210957709b68f46bd4c5aaf893dbba8fc9556f419e49f4afeedf3f70d182a5626b7a655b41773180f32b80e259bc6136680752c88d877df708e578fc515522ae69fce6e871ed20a38457fcc176f7e359011a43bf67cd31251a152a1ff6ab7ba2ea4c0c2a142f6b02f711befd521b32a35b00a38b4dbc00c7c773e4677129ee43a94061a5d1258ae10f13ec26bf3f9dd509fbbf401a957b76c5bea039c552b72151a7e6d4c00c599e9b39c13171b1ceb5949a34b2fe3fd3e56a9dbeb7cbdc82ae928a90b65d9f533075dd0d7cba12ffee7b3650373137fa8ae25f0e4237355e4a65577234f3f1345294234ae62ff1c899bbe6869afab2132dfc5e3c71670e59c488de7b8da39e9e29f64abd5151e486bf178ec193b72cfc93b362b41e099c78f22e81e6cb1b74922d715037ae015ea3c3834dd516221c5a446c34ac71aebdd8d8de9ad0d2e2c1d4a039c23f99a7256cbb9ccd8450d7a5a49854ce6f4b1f108824a7339c08ee6d21329a04f7024ffd48f081496e210a56e437ec073b78c7ed0ed0e235f256c18a680854195f450f733f6b0208fa2f9aa4d8d9d4c53690d02acc9d3f5f84a12eb2b27de105106e1f45ed8380001932b7b112d2137fc57be3d684260bea8c216249479ee578ca14de22622d54f7c0ccaa9486fe447d36116ad2b51d13a473c732c068244d6b6065ef191eae289a8c1dcc1264c5e9395996bdbdce6a6c8c303ed9a272c0f1e058e921e7d2cf83dd21a356ac9b1c2e8d4a6da22cfa3c6ae6c3b3ce3ce38bd569be66f0f30ccbff5930783d8f048874c36a6f1ea8b028c8cd1acaf828dabc10f2d912087bd4fc0bb016f90b06cc2d9cefec47daaf618dc4e44e2fb9dc11796dffc70316c990418a16752a42d31d0001d975d884e55fb46ae694bfa83be7d7537ce98525391376e844fe8fee3f7170fdcd05b09a2211a957f8e16c1ccb485d21c186bd88c383dda7731efc6e6fd7dc931b1517199af8d7cf8c3a3d5222c419e3c27d27872689df26bf65c9dd63110f12c9d03b4ebc661b7dc69da1e22575860220a3f54108a7bf08d2f48e5cbe473de2fda525c8a64a60561f6f5c1a15a0ffffba7adb488c6362f4914f2e6ead87dd5ea0a824b5b486755a24838f32b9dd00e92bfa0480a21b6562cb2e04fbb8a7c5dad3bbe5ac5f4d6213719e347961d198bbcfb99a50d7327c0f4f68058d0b46d71a4d64402062405dda774dca879920b2785a313e3c616e791c8687f54cb66fc4dc121dc0af9fcbbed360d180aee5008e604977873738b8d2f2400cc6cc0270541c0fee88430e01e201b917e151b2efbb332d66ace606edbe66ec49b911c1639d2b911c95ce00e82b01438bfd698fa271d18a1d6504529b7a113dbd3494365aa0112f4b350495f76c1529063744457b6518721eefbe8e27781467f63846cb0f4a5b48c184201d95d70e9d7423311f3c3833035bb47ba629ca707f42271d3cf7c47fc5266eb1dca27f5d70b2a177b64c6d5628c5764717d1db6d2ae13e13b9a8217e2f3d64d735bf2f19d68250d553ece5214b499b0ebb0d75fcaf8f6a46de37bac2155677582f419ef84f7e41a80fdc48c773269627f331c42afc2aa46712b55f3fc2c7e36b26add96fe03a56122042453e9a890ec3bc6bbb1813d90f0fa37d8551cab8862fe75171a01d1af4efa6be9146e521f704180a0da228b222e81de07c9b1f65415c4794a2a2a50c0385233ac19cf2a4236f5e526231867dded0869fb44b5762925a6416f660b5ed55608c1dbe1cfaa4706e181cdfb103a8e466c5c679322e22b911d0278f6105c402f39f28311bd1f64a47b3eb4d5a2d99e28308ebcf43581a654f647df956aabca459d146eb96ececad853babd92eb34a901488b56f3726641432ad334fa20accd363894fba5212247e6d8ef4c7f20e54ef1f1c81dfe2c6610231491b53856c0ba97ff7de37754ce0af03cb823630477decef2fdd2ae96f97dc5aae788be8be7b5d5e44239e7b39c75885869c00948de5261ec9e62d18ea80256e111e7f2ca6484270d13c29451b65096d526360c118129800367dd8debb2542594465e484eff349cc18c058d6dc5d91b2cac0b1293aaa58c9f4f816d3aac353c32b1d25d313072cc3e114fffdc2dea9cb133719467d8cb957e0d029ce0b82e77e7ffa2e98c8f4fa975680f996a8db08bfff8e9e7bbabed5d4572c43d22877b45b3fdefc90d61b0362258acd5950bd1ec7eaee8f2703ef50eab471580ad221e1437ca7b10234fa9ee59ffdddd1461612926a1557b79833039e72d39af31396448c03560355762195fe4b44c4d33e8aeca85b039bd2d79318d677bc4dfc9bbba27bb63adfb6e2f8e5933b9d2353bee5def42c89d5a6d9fc9f17066591cda89eae9e44a5b5e716eeba79fbbf176852758ed06b970b2ebc108f20a89c0e3eab82bd38aef15ba04f59ba97dc7f354bf5515d459b0890e0af945a5c7168001b9ecfc8c8509420916380bc790c3a26b16cb997002ee62539bc2216c0316676cab658fe812c94e72651627c501672271ef002870f887d9c574afbdd0887c32c190bea374044a2314377ce44090f18c946864be712bda210731eb4fb8a01e9c614bbe30772dee15f4504595fecf8729e52bf428ff9505c58c4ab296164ac092ffbf40f27e2c9f9865d7bab3692b6b3ef7ce96dedf87750b020ef58b4aeea1a881ceda3da5126545a468f7becea1d53533ad94930ee278f699301830d7e58aac459b7c3288c377c2be063ad501856b0b7b3e2270c2d830ca7c44c060dd70bdb91edd964b6c7fbcf1c772a559076fed0014b2f5a8678cae521a31e2c48ea75076894e3d1abfbbe16f14f6c0ce29e701fd339e2e7554f646128ae86999f766f294311318227a81eae02db71fe92f80c6aab822fcfb650e49d55ff38f972a2cdef50d244326bdb756cf28c4a84b7f5d8d0aa0876adacf20105db6bedc08838f125fc7409ea1f023fd375237a3b78dc9ef1e788e355be1ab9f827ccc1bdb140bd2230a9d5a6c0fff37ee521b9a5c0b7e5a5afc8d70cbf27715865411c517f8dcf0a8607f49db91dd763f1964be2caea29a763d8ca0c7bb53fb57b5e25d056916b756e255cca8cbd85d891ae9d9068ad6c267c1a7fca6582918f23c423773bc2fbf1a3db5a36b30f8386621de5d204591bc0aed068b60d11db8791f40a432c08334cdcacf6d1c63cb39a9c149c03cf7477a85b178ab2d5d87593cdcb4bfb13f90411dd8bd8917599e51a484f9d41139b257691a586c062933f29dcbefc012f4b940a995704ecf86542404da548f3915f21f33b56239177f6e4064d921094e1295de8fc30900000000000000eec9a49947327d7693da0ea4de8551d2145910baa3305bc9dd1e1e6eabf911e893f3e0dc7b2e44120ac6ca6497d8fc6301d96be488b01ceabb30e4d03c9b29bed0f506a8ea698411c53dbb066bff7e7104b377cccc3efcc2fcbd17f5a969efa8fb785cd5f1409c81d77ecc3dd09ee9d3cc7fef504a69c22701997bd2f8c27dcaf7f5a19e276db7e8d39383f3a6033b74176aa70fe6393dd9c743317336635ce216ff72d495b8687b5e637bffdcc2d3d9d97a982281f4c0212eaa34f0d54a17431689c037aa9cbd5cfb2d4bf08a69cde84459b181f66b7547b0a4d885e525ba107148c882e2ba555c8a19b55b34a73f36bd191ee16668a981f27df9d360dd555a99f033361493112ef201d7eda6ebee01dc87c10a8cdc63918eb554908fbfb309f2fe8890814ee97ec5d9832db8805805782a1e0dba713c6856308381bb6601c00b4c58c8729251a35595ff05e09951e89bd97996bb4a30c5af662ede04a252b514bb4040bceab78af8579fc2942ce5bcc4d68c68a8144a3adb438ecb74bff0056d298a6eaaa4654f97cd8bf3e87e168e900fee7e8ed0cd3632af256169e51c9f33431849a95d77c9798ffe846e8e193f401c69898ceb9bbd47062f545c65dcbdb3df046ee4e9b6671ed5035e09c886597a8a46eff7c4d972ff675e4428f08bac45659e423d00587cd31175f63e5f44fbb4a4084cb6af8425c9a77d8195de6888f7f911665cec1a222d20da812c9cba09194b2fc377326ccfb70a5b763f4a6fe7d6eec17362f5f6bcfd95de88832c8ba2ca04f241d02ae35acc945fd752bc5aad95b140102dee269fa26eaff2c2204022ca5a5feea60155dd274cf5d869fa0d40b13f72c0c839c1c39fbd0b0d645675670f2576e47118b395a916c64abca51478afa5b30796ec275501a6a826a47122f2ded90d121fc78f21807c9ec78e113de68496b7d9e713e19374edb69060e8562153aa10e587a61f73879084a8ed5e3614b79cf25ac9296d723c1344fff24639a93ca3304fd8a710b80199a7fb2086927e4f1c296e5daeadad06825a04476365a317ed74847c7bda20c00484ab599a415bfa26799d041e2ae28844a65a4469b842038f1b935b1c0d49cc6111afcb44e0d193da83d95f358e68fc03fae5e00d33b440876fb7dfd83ca760d61ac4ae3e3cfdea9286d4fb26876d7382ef947f91f318c6b393a678d66f191c9c4110cf177ada12fd907382b83047defe3a9bc357fceac8724afe9c2cca4f79f44e9acd1860676597b5f7325b96786e2c437ecb15ab8ca3cdb26d79d2557e858528638ca5322e3e37a180a4706ae5b780827f61e0f9d8bffe2d732418d891faa2cbbb33b29e6bdc93ebcccf3f3017cb265318d4d31afbeb43049a6f136448b5cbdeb9bfe34ca7d3c612dbf43df6a8868c8d8f7a3615238d3e9ab83e2be4df5d2be3c4ea640399e62f361ee1f34553afbf88f33972da827864af0589a0dc71e9b79802c021266b2107fe007c12842b1ed0bf1a77529e5a5bd9ca7a9e39a78dcf5b4723d66bb9791adecaadb8375410b8d5cc5823f339f0a1f3de3d84804b5014f1048473e719ea12d81aef9292f99c39f71d6ead8921942641c008a5ef87e752397579e6333ed2d889e6acf393e8c8e4577cd2c659ba2a6c58d8862215b5630dce04953b26c2403ee3dde05c9f71f8ec3577ea83cdc7fc889e264882fa4d9131ad58eb796f20ab1832bef5ace5db774f05b02f11a81aad9153785de483d4da2e917010bee84cc9a09e4b9a87966965ef5df1832ae1d52b80e1d931a2835f772524541ba1b71d9aba451782cb20be59cd13bc44ac41855643f614bec40167cce4336776517087921e6abe792ef61219852db78b49facb620f5157d6a78dca85c5c5ccdfa10ad0ed77844727294be6ae102a608e863b0ed0668e634729925714143d8126f3654f34171a91e35cae62d495ba4c48ed2b291c792d6b750c9fdbc5fd4ba7e8b28d5ab46fa91a1f3d345784eb4c1f558619e77f5a4840c584303a499eff1c2b100356a5bdf32dd4ada98329e6fc6383272e3e89f4d18a56b7cbb88e942d464702fea7d9f91912a901b2422c906c481c427659e91e62305b227635556b9d9f7d4771108044464aaab87bfc430671103b256975f097530cc46ddd14eeea17c17e285c10146322617ea20d6816f7a7a4b6fc9b90dd98e7b83c9aa3b1b8fc98cef0f74aad62ea2fc3e4fdf51832f3384b3b4a6b6b72d523052d8d933fc8e464e6766f95a19e29212d4b149e36501252554616b72e5d2c113c86530d2a43daf4ef4af38ad4f5009cac453a6ee507d39d30ba98cde7c798c7201a83391f4c8c2dbd0c6914974b24782ee78790cafa96bc661f3b51e8b68d3a24b859e5c127e0326ff5c14093015e24f5f8fdd940f31f6b583f1e4af4f7999b30b154f8f9971aea81d66b401850610ec11ce9b067f285b19cf3d12393ce1bb922b898899a946605e52f4f81493172050f24ee0b3e1aace86f66d7029c7cd91dcd6dc06dde09110a074b61e7a9b4d475336863dfd501246202454bef5898b3896ae378f09f9ac34f921d251c46a80f57dd6421751b00beacc8e09911f73eb5628da767d1cf46c46348092496350b1021be8dc4f6f82f26d6e7115845c1227f0252cfcf73155b75676ef6fe3451e8a2439408a71167f75796399b8c78e018ec155b7146a23bca3a3b13822a1f60063257404f119652a57a44b907063476a69d7b4ed675521690bf629c07290b3f5f3bd5624d043f94d25140c1f631d011f990c26b1f8b55ee5430a0914ba56d7e0b122a7f8c60b7cd8e5267336f01945d927ecc84cdbcc576643d2d9a4f812cd7027735d95fecf00e85e1865a6c493600a37ab3ca94542954dd19c91380692da8596f06f17a164396c505748e2e7a9f719d865ecbea331c6e6a2f6aa90443f3c952b2c5326b96ba1c2f060c6bd5947e06650b40b2ffda56ca869e5d2a1052a9923c85000d45226315d5b8d49f6d729a87cc5f1de62c6ad9e5e347e8540f6d685a2444e180f5dc388a0c02191d6a918e12e9cf5a802eac59ca6390258730e639daca48affa58665fd42e0286775eed9592352a3785cde2515f370960bb289ca8d3a0c7cac66274aba329e215a9b2be57696b71775cb55b2f836ec7408bb48006c512963d07a68d705cc2f1615a2a198d3517d3324502c67f035abc0f739d8398e0820aacb40b5e86bf0c21a34cd5a069e2653c9cee3245ae17eeb7517c1caddc385fc870acc86d951c7348710832ca5d2542f5a0b8467310dbb1b0874af96f92f0d3ab477ab49b9b0ef41ccb5e7a27d6c1e40cd47ecbf5304e8334ec3cbb56ddb0796a1a64a10b1971776f0ec30113ee266b59526dcdb3016d26e0c02001551c4f5b4293854a0b40da0945492da0ffc6010dadafc5f9e57bd24d5c95374387d8362240adbfa1a4c75a891059062042de77902dd557612a35a699924a909bf522a1a357e8c44ac3da80850ef071146d5dca52a21a9996d68a061891500ba7e60f400baf058004c7c226da0500dc172d611fb227f1ae4e49c93b97fd05e3854a7994676e1481579918257d9e76167ad1fa3e7dfd5982295e75177f6fbdab76e1dfc91d3b9fe9f272d981692e7947adecbfd5c821348f371d5cea4d13dabdaea04869376c742d18fd419f2d18e3f74b8ecd256ea02f15377a11004c21b61adfa6fed9391ae5336abb03b62f098f5985f257812a2c35aeb9ca5ff68a40838e2d2fbc4896724bcd84114ac6739b6fef9aa1c7b9d5ba0e7eb96679aa0974ee4d7093c818b3d3e01b5bb301abd95ac86acbc18d3e4162f3ac99f86f4df9e63b6a58c9d41afc903a1a7ac53f0b5f6e31b802367cef00c03d142f23a8bec76d62ffdf7cc8810e34230f76ce60970932aebb9d35f9f90f662f332c5e9226b7008c31c250082c6762214a14ae1ef73d1d7464d11adcafbe9ff4e163a8f8502ede5a9fb322a59a0647c4bbf7d5019ef994187069cd4a4a3a9598544521f64848a9b92dc8b4b1d16c0528db1da87a1edcae6e05d63bd6603c6ab177f398019b5c3c8c807ae46e4f301a553b73be391e21f06d8cba49886416d508187918d2f16d8085ab07612ab6499bd9fd1c4ee6d33ffc49b5588a54fe3d362a914094ecfc76fae5685f2d919a651c35c31954756dc6d5d369754755ac248851ab108c0284e0c69683c1a97206a85cc694b7b369e7bd07aa3c7d47f03f744ffe08ce7c3366ec1f8e320d1f85d832934688206ffeb203119a03fea67ed52fbdf91df4f2a1aef49e69f242766c1b3abd25d0d8f3b91b361107ac74a0c898593cba83754a55b78988ad1059f4bc8007a6643ea53e297e5e1e506e0d11ecf73d21e15a9182db19304aa0c057790e56f940159d1b0748d14e4986d15b2ad364f85db37724e6e3111ce291f35050cf3dcf50ec09100cbd7f3ad25306527423eb4d899d7f99e8d5b88ddf9be36d9a12a69fb5bffb8b539a3c20e7c83398c637f3d77d2a101b783833e71ab9f856a1f48c6ab164438f823419145af131f62c53ff3b95316c3d2a55c18e7df0b30f74208ec60abcbc671342328e70201c76192a9d33de0a7f5e17aaf4284096d86c3a8f86b1bf1c82191842a6015b0f29d3d4d85b92401200ee99190827f25e0b96c7be32a910d955d0f69d7b08bc0935b4cfb4ae7d2d6abfc94741b202717b5f7648bbc52993573449b455b425bb40b047d6e4bd4044ba93614efcf1ecc11e30ebd593fb", 0x2000, &(0x7f0000004340)={&(0x7f00000003c0)={0x50, 0x0, 0x8000000000000001, {0x7, 0x2d, 0x6, 0x495a802, 0x6, 0x7fc, 0x87aa8, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 6.921314062s ago: executing program 3 (id=4066): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0494993cfc0000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0b0004050002004185ab7d"], 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x5ff, 0x442) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000004c0)=""/4096) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 6.088948878s ago: executing program 8 (id=4068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="620afcff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150006000000000007000000cc0ffff3bf01000000000000b702000004000000b7030000c7000000b7040000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.934951621s ago: executing program 8 (id=4071): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b40)=""/4087, 0xff7}, {0x0}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000a80)=""/172, 0xac}, {&(0x7f0000000500)=""/176, 0xb0}], 0x6}, 0x10100) 5.8216597s ago: executing program 8 (id=4074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 5.672214552s ago: executing program 8 (id=4077): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 5.382362902s ago: executing program 3 (id=4081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 5.171481525s ago: executing program 8 (id=4083): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.023627522s ago: executing program 2 (id=4087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 4.958703434s ago: executing program 2 (id=4088): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100), 0x0, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 4.701606875s ago: executing program 2 (id=4090): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.548009373s ago: executing program 7 (id=4091): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xfffffef2, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f08", 0xd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 4.357761643s ago: executing program 7 (id=4092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 4.17259377s ago: executing program 7 (id=4093): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 3.2304885s ago: executing program 7 (id=4098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 3.180564649s ago: executing program 2 (id=4099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540ef"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200248b4}, 0x2002889c) 3.001796589s ago: executing program 7 (id=4101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 2.959160947s ago: executing program 2 (id=4102): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xfffffef2, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f08", 0xd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 2.787029993s ago: executing program 2 (id=4104): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r1 = openat(r0, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000380), 0xff7f) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x0, 0x5, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) r4 = msgget$private(0x0, 0x193) msgsnd(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgsnd(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r4, &(0x7f0000001240)={0x0, ""/144}, 0x98, 0x3, 0x2000) msgrcv(r4, &(0x7f0000000900)={0x0, ""/185}, 0xc1, 0x3, 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/223) 2.607934728s ago: executing program 7 (id=4105): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x1a4}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a"], 0xffe) 727.793352ms ago: executing program 4 (id=4115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 397.045924ms ago: executing program 4 (id=4116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) 324.435373ms ago: executing program 4 (id=4117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 203.197877ms ago: executing program 4 (id=4118): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000004580)=""/4075, 0xfeb}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000a80)=""/172, 0xac}, {&(0x7f0000000500)=""/176, 0xb0}], 0x6}, 0x10100) 121.475238ms ago: executing program 4 (id=4119): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0xffc00003}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 0s ago: executing program 4 (id=4120): r0 = syz_clone(0x140800, 0x0, 0x53, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc8100, 0x0) read(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='\x00', 0x0, r2) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x10002) ptrace$pokeuser(0x6, r0, 0x2c, 0xffffffffffffff81) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x6, &(0x7f00000003c0)="1860c16296f67b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19201006d1da0f35376724828ef31b353e71805205c3dceb44cc4c7b3664e29fb00"/137) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc8641, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x1c3001, 0x11) write$tcp_mem(r4, &(0x7f00000002c0)={0x17, 0x2d, 0x5, 0x3a, 0x73be, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xf, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB, @ANYRESOCT, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r7 = openat(r4, &(0x7f0000000140)='./cgroup.cpu/test\x00', 0x2002, 0xa2) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write(r7, &(0x7f0000000180)='10000', 0x5) kernel console output (not intermixed with test programs): ] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1668.678939][T19472] syz_tun: entered allmulticast mode [ 1668.759997][T19471] syz_tun: left allmulticast mode [ 1668.877184][T19437] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1668.879665][T17673] usb 3-1: USB disconnect, device number 83 [ 1668.880972][T17673] em28xx 3-1:0.0: Disconnecting em28xx [ 1669.001036][T18301] em28xx 3-1:0.0: Registering input extension [ 1669.011586][T17673] em28xx 3-1:0.0: Closing input extension [ 1669.136501][T17673] em28xx: Freeing device [ 1669.885577][T19526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.895425][T19526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.223802][ T5686] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1670.365137][ T31] kauditd_printk_skb: 106 callbacks suppressed [ 1670.365178][ T31] audit: type=1800 audit(1788757045.370:8405): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1670.401111][ T5686] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1670.402070][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.429111][ T5686] usb 5-1: config 0 descriptor?? [ 1670.431978][ T5686] cp210x 5-1:0.0: cp210x converter detected [ 1670.448995][ T31] audit: type=1800 audit(1788757045.450:8406): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1670.470331][T18301] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1670.482964][ T31] audit: type=1800 audit(1788757045.480:8407): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288372 res=0 errno=0 [ 1670.511829][ T31] audit: type=1800 audit(1788757045.510:8408): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=288401 res=0 errno=0 [ 1670.514667][ T31] audit: type=1800 audit(1788757045.520:8409): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=288379 res=0 errno=0 [ 1670.519255][ T31] audit: type=1800 audit(1788757045.520:8410): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=288380 res=0 errno=0 [ 1670.521860][ T31] audit: type=1800 audit(1788757045.520:8411): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=288381 res=0 errno=0 [ 1670.531938][ T31] audit: type=1800 audit(1788757045.530:8412): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1670.537396][ T31] audit: type=1800 audit(1788757045.540:8413): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288421 res=0 errno=0 [ 1670.626247][T18301] usb 3-1: Using ep0 maxpacket: 16 [ 1670.626996][T18301] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1670.629617][T18301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1670.637660][T18301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.637685][T18301] usb 3-1: Product: syz [ 1670.637700][T18301] usb 3-1: Manufacturer: syz [ 1670.637714][T18301] usb 3-1: SerialNumber: syz [ 1670.655489][T18301] usb 3-1: config 0 descriptor?? [ 1670.682030][T18301] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1670.682066][T18301] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1670.691243][ T31] audit: type=1800 audit(1788757045.690:8414): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1670.876125][ T5686] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1670.884081][ T5686] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1670.884125][ T5686] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1670.902071][ T5686] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1670.911101][ T5686] usb 5-1: USB disconnect, device number 87 [ 1670.921070][ T5686] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1670.929458][ T5686] cp210x 5-1:0.0: device disconnected [ 1671.277402][T18301] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1671.347259][T19562] syzkaller0: entered promiscuous mode [ 1671.352890][T19562] syzkaller0: entered allmulticast mode [ 1671.411313][T19564] netlink: 'syz.8.3414': attribute type 13 has an invalid length. [ 1671.691069][T18301] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1671.691119][T18301] em28xx 3-1:0.0: board has no eeprom [ 1671.944144][T15630] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1672.034059][T18301] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1672.034101][T18301] em28xx 3-1:0.0: dvb set to bulk mode. [ 1672.052192][T18302] em28xx 3-1:0.0: Binding DVB extension [ 1672.096594][T15630] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1672.108278][T15630] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.108340][T15630] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1672.108387][T15630] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1672.108428][T15630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.224049][ T5717] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1672.338907][T18301] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1672.353187][T19597] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3428'. [ 1672.395907][T11596] block nbd0: Possible stuck request ffff888028135080: control (read@0,1024B). Runtime 930 seconds [ 1672.395965][T11596] block nbd0: Possible stuck request ffff888028135240: control (read@1024,1024B). Runtime 930 seconds [ 1672.485877][T18301] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1672.487238][T18301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.490805][T18301] usb 5-1: config 0 descriptor?? [ 1672.494455][T18301] cp210x 5-1:0.0: cp210x converter detected [ 1672.797689][T15630] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 1672.798052][T15630] ATM dev 0: poll status: error -71 [ 1672.798080][T15630] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 1672.831951][T15630] usb 4-1: USB disconnect, device number 97 [ 1672.906897][T18301] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1672.907186][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 1672.909476][T18301] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 1672.909501][T18301] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 1672.936724][T18301] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1672.952450][T18301] usb 5-1: USB disconnect, device number 88 [ 1672.978247][T18301] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1672.978850][T18301] cp210x 5-1:0.0: device disconnected [ 1673.036606][T19538] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1673.046023][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1673.055388][T18799] usb 3-1: USB disconnect, device number 84 [ 1673.068567][T18799] em28xx 3-1:0.0: Disconnecting em28xx [ 1673.140737][T18302] em28xx 3-1:0.0: Registering input extension [ 1673.147969][T18799] em28xx 3-1:0.0: Closing input extension [ 1673.258661][T18799] em28xx: Freeing device [ 1673.541060][T19613] syz.3.3434(19613): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1673.582285][T18300] usb usb50-port8: attempt power cycle [ 1673.903057][T19629] loop4: detected capacity change from 0 to 7 [ 1673.914350][T19629] Dev loop4: unable to read RDB block 7 [ 1673.921693][T19629] loop4: unable to read partition table [ 1673.921903][T19629] loop4: partition table beyond EOD, truncated [ 1673.921946][T19629] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1674.085818][T18799] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1674.155356][T18300] usb usb50-port8: unable to enumerate USB device [ 1674.156917][T19636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.157299][T19636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.180472][T19636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.187656][T19636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.189265][T19636] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3444'. [ 1674.224901][T19636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.235854][T18799] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1674.250713][T18799] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1674.250756][T18799] usb 5-1: config 0 has no interface number 0 [ 1674.274742][T18799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.274784][T18799] usb 5-1: Product: syz [ 1674.274814][T18799] usb 5-1: Manufacturer: syz [ 1674.274831][T18799] usb 5-1: SerialNumber: syz [ 1674.302905][T19636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.310049][T18799] usb 5-1: config 0 descriptor?? [ 1674.327302][T19636] bond0 (unregistering): Released all slaves [ 1674.361024][T19638] syzkaller0: entered promiscuous mode [ 1674.361050][T19638] syzkaller0: entered allmulticast mode [ 1674.541414][T18799] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1674.542818][T18799] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1674.542857][T18799] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1674.866647][T19652] binder: 19651:19652 ioctl 4018620d 0 returned -22 [ 1674.985090][T19655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.985540][T19655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.008755][T19656] loop4: detected capacity change from 0 to 7 [ 1675.010227][T19656] Dev loop4: unable to read RDB block 7 [ 1675.010262][T19656] loop4: unable to read partition table [ 1675.010421][T19656] loop4: partition table beyond EOD, truncated [ 1675.010436][T19656] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1675.034671][T18302] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1675.184547][T18302] usb 4-1: Using ep0 maxpacket: 16 [ 1675.186058][T18302] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1675.187027][T18302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1675.188950][T18302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.188974][T18302] usb 4-1: Product: syz [ 1675.188989][T18302] usb 4-1: Manufacturer: syz [ 1675.189004][T18302] usb 4-1: SerialNumber: syz [ 1675.216262][T18302] usb 4-1: config 0 descriptor?? [ 1675.242558][T18302] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1675.242600][T18302] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1675.479354][ T31] kauditd_printk_skb: 102 callbacks suppressed [ 1675.479397][ T31] audit: type=1800 audit(1788757050.480:8511): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1675.526573][ T31] audit: type=1326 audit(1788757050.530:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19665 comm="syz.8.3458" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b1d9e159 code=0x7ffc0000 [ 1675.555375][ T31] audit: type=1326 audit(1788757050.560:8513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19665 comm="syz.8.3458" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b1d9e159 code=0x7ffc0000 [ 1675.586218][ T31] audit: type=1326 audit(1788757050.590:8514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19665 comm="syz.8.3458" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f99b1d9e159 code=0x7ffc0000 [ 1675.586282][ T31] audit: type=1326 audit(1788757050.590:8515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19665 comm="syz.8.3458" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b1d9e159 code=0x7ffc0000 [ 1675.586345][ T31] audit: type=1326 audit(1788757050.590:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19665 comm="syz.8.3458" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b1d9e159 code=0x7ffc0000 [ 1675.710880][ T31] audit: type=1800 audit(1788757050.710:8517): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1675.739578][ T31] audit: type=1800 audit(1788757050.740:8518): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1675.782047][ T31] audit: type=1800 audit(1788757050.780:8519): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1675.832896][ T31] audit: type=1800 audit(1788757050.830:8520): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1675.841739][T18302] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1675.913196][T19676] binder: 19675:19676 ioctl 4018620d 0 returned -22 [ 1675.987084][T19679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.998350][T19679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.011133][T19679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.020072][T19679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.028530][T19679] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3464'. [ 1676.036646][T19681] loop4: detected capacity change from 0 to 7 [ 1676.048053][T19681] Dev loop4: unable to read RDB block 7 [ 1676.048107][T19681] loop4: unable to read partition table [ 1676.048297][T19681] loop4: partition table beyond EOD, truncated [ 1676.048313][T19681] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1676.262861][T18302] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1676.262910][T18302] em28xx 4-1:0.0: board has no eeprom [ 1676.403694][T11108] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1676.555760][T11108] usb 3-1: Using ep0 maxpacket: 32 [ 1676.556418][T11108] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1676.557309][T11108] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1676.557335][T11108] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1676.557358][T11108] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1676.560000][T11108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.560023][T11108] usb 3-1: Product: syz [ 1676.560038][T11108] usb 3-1: Manufacturer: syz [ 1676.560053][T11108] usb 3-1: SerialNumber: syz [ 1676.575867][T11108] usb 3-1: config 0 descriptor?? [ 1676.615552][T18302] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1676.615579][T18302] em28xx 4-1:0.0: dvb set to bulk mode. [ 1676.621172][ T1183] em28xx 4-1:0.0: Binding DVB extension [ 1676.877511][T19690] bridge0: port 3(dummy0) entered disabled state [ 1676.877670][T19690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.878148][T19690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.996347][T11108] gs_usb 3-1:0.0: Configuring for 16 interfaces [ 1677.113863][T15894] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.122946][T15894] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.122988][T15894] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.123020][T15894] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.198814][T11108] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1677.207522][T11108] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1677.244324][T17673] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1677.394354][T17673] usb 9-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1677.395340][T17673] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1677.395370][T17673] usb 9-1: config 0 has no interface number 0 [ 1677.395404][T17673] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid maxpacket 32134, setting to 64 [ 1677.395430][T17673] usb 9-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1677.395454][T17673] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1677.395482][T17673] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.397907][T17673] usb 9-1: config 0 descriptor?? [ 1677.398650][T19692] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 1677.411490][ T5717] usb 3-1: USB disconnect, device number 85 [ 1677.604687][T19650] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1677.618238][T18300] usb 4-1: USB disconnect, device number 98 [ 1677.634038][T18300] em28xx 4-1:0.0: Disconnecting em28xx [ 1677.653790][ T1183] em28xx 4-1:0.0: Registering input extension [ 1677.661950][T18300] em28xx 4-1:0.0: Closing input extension [ 1677.724043][T18300] em28xx: Freeing device [ 1677.955308][T17673] usbhid 9-1:0.1: can't add hid device: -71 [ 1677.955415][T17673] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1677.961297][T17673] usb 9-1: USB disconnect, device number 8 [ 1678.453747][T17673] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1678.471430][T19722] syzkaller0: entered promiscuous mode [ 1678.471456][T19722] syzkaller0: entered allmulticast mode [ 1678.604492][T17673] usb 3-1: Using ep0 maxpacket: 16 [ 1678.610272][T17673] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1678.621253][T17673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1678.632411][T17673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.642441][T17673] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1678.642474][T17673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.665329][T17673] usb 3-1: config 0 descriptor?? [ 1678.784102][ T1183] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1678.934371][ T1183] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1678.935262][ T1183] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.935329][ T1183] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.947354][ T1183] usb 9-1: config 0 descriptor?? [ 1678.959750][ T1183] pwc: Askey VC010 type 2 USB webcam detected. [ 1679.074765][T19734] fuse: Bad value for 'fd' [ 1679.107737][T17673] hid_parser_main: 1 callbacks suppressed [ 1679.113826][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x2 [ 1679.121677][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x0 [ 1679.129525][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x0 [ 1679.137324][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x0 [ 1679.145183][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x0 [ 1679.152889][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x0 [ 1679.152919][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x0 [ 1679.152942][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x0 [ 1679.152964][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x0 [ 1679.152988][T17673] hid-multitouch 0003:045E:9994.00A7: unknown main item tag 0x0 [ 1679.187437][ T1183] pwc: send_video_command error -71 [ 1679.187453][ T1183] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1679.187571][ T1183] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1679.201812][ T1183] usb 9-1: USB disconnect, device number 9 [ 1679.223655][T17673] hid-multitouch 0003:045E:9994.00A7: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.2-1/input0 [ 1679.318172][T19715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.318557][T19715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.338081][T18300] usb 3-1: USB disconnect, device number 86 [ 1679.391501][T19738] fido_id[19738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1679.499465][T19744] loop4: detected capacity change from 0 to 7 [ 1679.502902][T19744] Dev loop4: unable to read RDB block 7 [ 1679.502937][T19744] loop4: unable to read partition table [ 1679.504659][T19744] loop4: partition table beyond EOD, truncated [ 1679.504690][T19744] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1679.615593][T19748] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3492'. [ 1679.714560][ T1183] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1679.874592][ T1183] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1679.875564][ T1183] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.875606][ T1183] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.895514][ T1183] usb 9-1: config 0 descriptor?? [ 1679.905704][ T1183] pwc: Askey VC010 type 2 USB webcam detected. [ 1680.240593][T19775] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3501'. [ 1680.260586][T19775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1680.300405][ T1183] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1680.301526][ T1183] pwc: recv_control_msg error -32 req 02 val 2700 [ 1680.302122][ T1183] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1680.302837][ T1183] pwc: recv_control_msg error -32 req 04 val 1000 [ 1680.303383][ T1183] pwc: recv_control_msg error -32 req 04 val 1300 [ 1680.305001][ T1183] pwc: recv_control_msg error -32 req 04 val 1400 [ 1680.305543][ T1183] pwc: recv_control_msg error -32 req 02 val 2000 [ 1680.306089][ T1183] pwc: recv_control_msg error -32 req 02 val 2100 [ 1680.306694][ T1183] pwc: recv_control_msg error -32 req 04 val 1500 [ 1680.307252][ T1183] pwc: recv_control_msg error -32 req 02 val 2500 [ 1680.307964][ T1183] pwc: recv_control_msg error -32 req 02 val 2400 [ 1680.509725][ T1183] pwc: recv_control_msg error -32 req 02 val 2900 [ 1680.711244][ T1183] pwc: recv_control_msg error -71 req 04 val 1100 [ 1680.711641][ T1183] pwc: recv_control_msg error -71 req 04 val 1200 [ 1680.727685][ T1183] pwc: Registered as video103. [ 1680.729242][ T31] kauditd_printk_skb: 93 callbacks suppressed [ 1680.729257][ T31] audit: type=1800 audit(1788757055.730:8614): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290235 res=0 errno=0 [ 1680.730731][ T1183] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input40 [ 1680.741292][ T31] audit: type=1800 audit(1788757055.740:8615): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=290239 res=0 errno=0 [ 1680.743194][ T1183] usb 9-1: USB disconnect, device number 10 [ 1680.763539][ T31] audit: type=1800 audit(1788757055.760:8616): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290252 res=0 errno=0 [ 1680.825897][ T31] audit: type=1800 audit(1788757055.830:8617): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=290268 res=0 errno=0 [ 1680.848972][ T31] audit: type=1800 audit(1788757055.850:8618): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=290271 res=0 errno=0 [ 1680.871482][ T31] audit: type=1800 audit(1788757055.870:8619): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=290270 res=0 errno=0 [ 1680.894107][ T31] audit: type=1800 audit(1788757055.900:8620): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=290269 res=0 errno=0 [ 1680.917462][ T31] audit: type=1800 audit(1788757055.910:8621): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1680.920710][ T31] audit: type=1800 audit(1788757055.920:8622): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=290260 res=0 errno=0 [ 1680.929472][ T31] audit: type=1800 audit(1788757055.930:8623): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=290263 res=0 errno=0 [ 1681.925543][T19804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3512'. [ 1681.945504][T19804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1681.983223][T19809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1681.995348][T19809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1682.012926][T19809] tipc: Enabled bearer , priority 0 [ 1682.015090][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1682.015118][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1682.015142][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1682.015196][ T4972] loop0: [ 1682.049392][T19807] tipc: Disabling bearer [ 1683.326432][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1683.326476][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1683.326488][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1683.326529][ T4972] loop0: [ 1683.617614][T19827] syz_tun: entered allmulticast mode [ 1683.703764][T18300] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1683.733958][ T30] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1683.855254][T18300] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1683.856439][T18300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.856461][T18300] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1683.856502][T18300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.860483][T18300] usb 3-1: config 0 descriptor?? [ 1683.878457][T18300] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1683.878499][T18300] dvb-usb: bulk message failed: -22 (3/0) [ 1683.880976][T18300] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1683.882935][T18300] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1683.882975][T18300] usb 3-1: media controller created [ 1683.884767][T18300] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1683.922784][ T30] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1683.927435][T18300] dvb-usb: bulk message failed: -22 (6/0) [ 1683.927523][T18300] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1683.941193][T18300] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 1683.950943][T18300] dvb-usb: schedule remote query interval to 150 msecs. [ 1683.950961][T18300] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1683.982588][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.982621][ T30] usb 9-1: Product: syz [ 1683.982642][ T30] usb 9-1: Manufacturer: syz [ 1683.982671][ T30] usb 9-1: SerialNumber: syz [ 1684.046871][ T30] usb 9-1: config 0 descriptor?? [ 1684.107048][T18302] dvb-usb: bulk message failed: -22 (1/0) [ 1684.107115][T18302] dvb-usb: error while querying for an remote control event. [ 1684.178918][T19874] dibusb: i2c wr: len=8192 is too big! [ 1684.178918][T19874] [ 1684.179055][T19874] dibusb: i2c wr: len=8192 is too big! [ 1684.179055][T19874] [ 1684.179152][T19874] dibusb: i2c wr: len=8192 is too big! [ 1684.179152][T19874] [ 1684.179228][T19874] dibusb: i2c wr: len=8192 is too big! [ 1684.179228][T19874] [ 1684.267153][T18300] dvb-usb: bulk message failed: -22 (1/0) [ 1684.267200][T18300] dvb-usb: error while querying for an remote control event. [ 1684.313977][T19861] tipc: Enabled bearer , priority 0 [ 1684.321332][ T30] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1684.427356][T18300] dvb-usb: bulk message failed: -22 (1/0) [ 1684.427391][T18300] dvb-usb: error while querying for an remote control event. [ 1684.562376][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1684.572343][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1684.572361][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1684.572416][ T4972] loop0: [ 1684.583804][T18300] dvb-usb: bulk message failed: -22 (1/0) [ 1684.606211][T18300] dvb-usb: error while querying for an remote control event. [ 1684.625071][T18300] usb 3-1: USB disconnect, device number 87 [ 1684.701128][T18300] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1684.738102][T19892] binder: 19888:19892 ioctl c0306201 0 returned -14 [ 1685.423702][T18300] tipc: Node number set to 1193834481 [ 1685.522959][T19912] binder: 19911:19912 ioctl 4018620d 0 returned -22 [ 1685.581007][T19857] tipc: Disabling bearer [ 1685.691576][ T30] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1685.711454][ T30] usb 9-1: USB disconnect, device number 11 [ 1685.764914][ T31] kauditd_printk_skb: 86 callbacks suppressed [ 1685.764955][ T31] audit: type=1800 audit(1788757060.770:8710): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1685.769650][T19920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.770043][T19920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.799799][T19920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.800202][T19920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.896914][ T31] audit: type=1800 audit(1788757060.900:8711): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1685.928441][ T31] audit: type=1800 audit(1788757060.930:8712): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1685.969450][T19927] binder: 19924:19927 ioctl c0306201 0 returned -14 [ 1685.998872][ T31] audit: type=1800 audit(1788757061.000:8713): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1686.032240][ T31] audit: type=1800 audit(1788757061.030:8714): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1686.098477][ T31] audit: type=1800 audit(1788757061.100:8715): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1686.122283][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1686.131858][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1686.139218][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1686.139276][ T4972] loop0: [ 1686.158162][ T31] audit: type=1800 audit(1788757061.160:8716): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 1686.189377][ T31] audit: type=1800 audit(1788757061.190:8717): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1686.312739][ T31] audit: type=1800 audit(1788757061.310:8718): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1686.365156][T18302] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1686.469469][ T31] audit: type=1800 audit(1788757061.470:8719): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1686.515730][T18302] usb 4-1: Using ep0 maxpacket: 16 [ 1686.517170][T18302] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1686.520490][T18302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1686.532478][T18302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.532503][T18302] usb 4-1: Product: syz [ 1686.532517][T18302] usb 4-1: Manufacturer: syz [ 1686.532532][T18302] usb 4-1: SerialNumber: syz [ 1686.541208][T18302] usb 4-1: config 0 descriptor?? [ 1686.561393][T18302] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1686.561427][T18302] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1686.563348][T19947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.568396][T19947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.739410][T19952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3564'. [ 1686.745143][T19952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1686.806760][T19947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.807305][T19947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.971320][T19960] binder: 19959:19960 ioctl c0306201 0 returned -14 [ 1687.029774][T19962] syzkaller0: entered promiscuous mode [ 1687.029802][T19962] syzkaller0: entered allmulticast mode [ 1687.160427][T18302] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1687.208874][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1687.218505][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1687.227788][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1687.234845][ T4972] loop0: [ 1687.484118][ T5717] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1687.588935][T19978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1687.598702][T18302] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1687.598744][T18302] em28xx 4-1:0.0: board has no eeprom [ 1687.649285][ T5717] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1687.652367][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.652391][ T5717] usb 3-1: Product: syz [ 1687.652406][ T5717] usb 3-1: Manufacturer: syz [ 1687.652421][ T5717] usb 3-1: SerialNumber: syz [ 1687.657171][ T5717] usb 3-1: config 0 descriptor?? [ 1687.735292][T19985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.746538][T19985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.899132][T19966] tipc: Enabled bearer , priority 0 [ 1687.901284][ T5717] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1687.953683][T18302] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1687.953727][T18302] em28xx 4-1:0.0: dvb set to bulk mode. [ 1687.962508][ T1183] em28xx 4-1:0.0: Binding DVB extension [ 1688.552379][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1688.552416][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1688.552441][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1688.552496][ T4972] loop0: [ 1688.779424][T20002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.783186][T20002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.961791][T19933] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1688.972318][T18301] usb 4-1: USB disconnect, device number 99 [ 1688.979888][T18301] em28xx 4-1:0.0: Disconnecting em28xx [ 1688.991514][T20002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.000633][T20002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.019909][ T1183] em28xx 4-1:0.0: Registering input extension [ 1689.026472][T18301] em28xx 4-1:0.0: Closing input extension [ 1689.052476][T18301] em28xx: Freeing device [ 1689.136324][T19965] tipc: Disabling bearer [ 1689.196326][ T5717] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1689.200007][ T5717] usb 3-1: USB disconnect, device number 88 [ 1689.438306][T20007] syzkaller0: entered promiscuous mode [ 1689.438330][T20007] syzkaller0: entered allmulticast mode [ 1689.575050][T20009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1689.745944][T20017] tipc: Enabled bearer , priority 0 [ 1689.758584][T20017] syzkaller0: entered promiscuous mode [ 1689.758622][T20017] syzkaller0: entered allmulticast mode [ 1689.787517][T20017] tipc: Resetting bearer [ 1689.868626][T20017] tipc: Resetting bearer [ 1689.948352][T20017] tipc: Disabling bearer [ 1690.102755][T20034] binder_alloc: 20033: binder_alloc_buf, no vma [ 1690.129582][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1690.129630][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1690.129654][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1690.129695][ T4972] loop0: [ 1690.825326][ T5717] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1690.983672][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 1690.984444][ T5717] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1690.986259][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1690.988358][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.988386][ T5717] usb 3-1: Product: syz [ 1690.988402][ T5717] usb 3-1: Manufacturer: syz [ 1690.988417][ T5717] usb 3-1: SerialNumber: syz [ 1690.990886][ T5717] usb 3-1: config 0 descriptor?? [ 1690.993136][ T31] kauditd_printk_skb: 68 callbacks suppressed [ 1690.993149][ T31] audit: type=1800 audit(1788757065.990:8788): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291656 res=0 errno=0 [ 1690.999027][ T31] audit: type=1800 audit(1788757066.000:8789): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=291688 res=0 errno=0 [ 1691.000018][ T5717] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1691.000048][ T5717] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1691.001357][ T31] audit: type=1800 audit(1788757066.000:8790): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=291663 res=0 errno=0 [ 1691.002429][ T31] audit: type=1800 audit(1788757066.000:8791): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=291664 res=0 errno=0 [ 1691.186890][ T31] audit: type=1800 audit(1788757066.190:8792): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1691.220975][T20046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1691.232133][T20046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.453151][T20046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1691.453524][T20046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.525426][ T31] audit: type=1800 audit(1788757066.530:8793): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1691.572984][T20048] syzkaller0: entered promiscuous mode [ 1691.573008][T20048] syzkaller0: entered allmulticast mode [ 1691.608763][ T5717] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1691.691040][ T31] audit: type=1800 audit(1788757066.690:8794): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1691.742783][T20050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1691.744545][ T31] audit: type=1800 audit(1788757066.740:8795): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291818 res=0 errno=0 [ 1691.762725][ T31] audit: type=1800 audit(1788757066.750:8796): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1691.823128][ T31] audit: type=1800 audit(1788757066.820:8797): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1692.028414][ T5717] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1692.028459][ T5717] em28xx 3-1:0.0: board has no eeprom [ 1692.065054][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3603'. [ 1692.299115][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1692.299156][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1692.299181][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1692.299247][ T4972] loop0: [ 1692.323997][ T5717] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1692.324025][ T5717] em28xx 3-1:0.0: dvb set to bulk mode. [ 1692.324859][ T5734] em28xx 3-1:0.0: Binding DVB extension [ 1692.663171][ T5717] usb 3-1: USB disconnect, device number 89 [ 1692.682422][ T5717] em28xx 3-1:0.0: Disconnecting em28xx [ 1692.725902][ T5734] em28xx 3-1:0.0: Registering input extension [ 1692.738902][ T5717] em28xx 3-1:0.0: Closing input extension [ 1692.775685][ T5717] em28xx: Freeing device [ 1693.213745][ T5717] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1693.343706][ T5717] usb 4-1: device descriptor read/64, error -71 [ 1693.426893][T20086] loop5: detected capacity change from 0 to 7 [ 1693.442979][T20086] loop5: [ 1693.443024][T20086] loop5: partition table partially beyond EOD, truncated [ 1693.585270][ T5717] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1693.596942][T20088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.606219][T20088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.743859][ T5717] usb 4-1: device descriptor read/64, error -71 [ 1693.854130][ T5717] usb usb4-port1: attempt power cycle [ 1693.994015][ T5734] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1694.144813][ T5734] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1694.146852][ T5734] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.146892][ T5734] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1694.146914][ T5734] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1694.149590][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1694.149613][ T5734] usb 9-1: Product: syz [ 1694.149627][ T5734] usb 9-1: Manufacturer: syz [ 1694.149649][ T5734] usb 9-1: SerialNumber: syz [ 1694.153467][ T5734] usb 9-1: config 0 descriptor?? [ 1694.160878][ T5734] usb 9-1: no audio or video endpoints found [ 1694.216469][ T5717] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1694.249098][ T5717] usb 4-1: device descriptor read/8, error -71 [ 1694.337090][T20095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.339660][T20095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.400963][ T5734] usb 9-1: USB disconnect, device number 12 [ 1694.494141][ T5717] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1694.525431][ T5717] usb 4-1: device descriptor read/8, error -71 [ 1694.548928][T20095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.549323][T20095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.572241][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1694.572406][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1694.572430][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1694.572484][ T4972] loop0: [ 1694.643963][ T5717] usb usb4-port1: unable to enumerate USB device [ 1695.136078][T18301] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1695.294530][T18301] usb 3-1: Using ep0 maxpacket: 16 [ 1695.300441][T18301] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1695.313519][T18301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1695.327840][T18301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.327877][T18301] usb 3-1: Product: syz [ 1695.327910][T18301] usb 3-1: Manufacturer: syz [ 1695.327948][T18301] usb 3-1: SerialNumber: syz [ 1695.353250][T18301] usb 3-1: config 0 descriptor?? [ 1695.366556][T18301] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1695.376664][T18301] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1695.793927][T20127] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1695.970362][T18301] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1696.041177][ T31] kauditd_printk_skb: 64 callbacks suppressed [ 1696.041216][ T31] audit: type=1800 audit(1788757071.040:8862): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1696.137195][ T31] audit: type=1800 audit(1788757071.140:8863): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1696.184001][ T31] audit: type=1800 audit(1788757071.190:8864): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1696.255615][ T31] audit: type=1800 audit(1788757071.260:8865): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1696.393667][ T31] audit: type=1800 audit(1788757071.380:8866): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1696.424204][ T5686] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1696.457861][T18301] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1696.457903][T18301] em28xx 3-1:0.0: board has no eeprom [ 1696.569461][ T31] audit: type=1800 audit(1788757071.570:8867): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1696.599015][ T5686] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1696.611031][ T5686] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.611087][ T5686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1696.611114][ T5686] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1696.611185][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.632303][ T31] audit: type=1800 audit(1788757071.630:8868): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292359 res=0 errno=0 [ 1696.646078][ T31] audit: type=1800 audit(1788757071.640:8869): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=292388 res=0 errno=0 [ 1696.646127][ T31] audit: type=1800 audit(1788757071.640:8870): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=292366 res=0 errno=0 [ 1696.646165][ T31] audit: type=1800 audit(1788757071.640:8871): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=292367 res=0 errno=0 [ 1696.793689][T18301] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1696.793729][T18301] em28xx 3-1:0.0: dvb set to bulk mode. [ 1696.808257][T18300] em28xx 3-1:0.0: Binding DVB extension [ 1697.132844][ T5734] usb 3-1: USB disconnect, device number 90 [ 1697.138500][ T5734] em28xx 3-1:0.0: Disconnecting em28xx [ 1697.174741][T18300] em28xx 3-1:0.0: Registering input extension [ 1697.186277][ T5734] em28xx 3-1:0.0: Closing input extension [ 1697.267964][ T5734] em28xx: Freeing device [ 1697.598268][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1697.598295][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1697.598701][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1697.598757][ T4972] loop0: [ 1697.827674][T20171] fuse: Bad value for 'group_id' [ 1697.834043][T20171] fuse: Bad value for 'group_id' [ 1697.977041][T20174] loop4: detected capacity change from 0 to 7 [ 1697.979710][T20174] Dev loop4: unable to read RDB block 7 [ 1697.979750][T20174] loop4: unable to read partition table [ 1697.979928][T20174] loop4: partition table beyond EOD, truncated [ 1697.979944][T20174] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1698.138116][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3645'. [ 1698.338096][T20185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.338614][T20185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.933741][T20191] netlink: 'syz.8.3648': attribute type 13 has an invalid length. [ 1699.123231][ T5686] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 1699.123553][ T5686] ATM dev 0: poll status: error -71 [ 1699.123567][ T5686] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 1699.165132][ T5686] usb 4-1: USB disconnect, device number 104 [ 1699.229893][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1699.229926][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1699.229952][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1699.229995][ T4972] loop0: [ 1699.625381][T20203] fuse: Bad value for 'group_id' [ 1699.625408][T20203] fuse: Bad value for 'group_id' [ 1699.653741][ T5686] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1699.663689][T18300] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1699.708970][T20205] loop4: detected capacity change from 0 to 7 [ 1699.716873][T20205] Dev loop4: unable to read RDB block 7 [ 1699.716927][T20205] loop4: unable to read partition table [ 1699.717116][T20205] loop4: partition table beyond EOD, truncated [ 1699.718867][T20205] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1699.816707][ T5686] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1699.820164][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.820194][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.820216][ T5686] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1699.820252][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.827194][ T5686] usb 4-1: config 0 descriptor?? [ 1699.837824][T18300] usb 3-1: Using ep0 maxpacket: 16 [ 1699.848859][T18300] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1699.877201][T18300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1699.908137][T18300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.908188][T18300] usb 3-1: Product: syz [ 1699.908217][T18300] usb 3-1: Manufacturer: syz [ 1699.908235][T18300] usb 3-1: SerialNumber: syz [ 1699.935695][T18300] usb 3-1: config 0 descriptor?? [ 1699.949299][T18300] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1699.959268][T18300] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1700.238025][ T5686] usbhid 4-1:0.0: can't add hid device: -71 [ 1700.238134][ T5686] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1700.241877][ T5686] usb 4-1: USB disconnect, device number 105 [ 1700.550421][T18300] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1700.964986][T18300] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1700.975699][T18300] em28xx 3-1:0.0: board has no eeprom [ 1701.069698][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1701.069727][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1701.069753][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1701.069798][ T4972] loop0: [ 1701.093943][ T31] kauditd_printk_skb: 68 callbacks suppressed [ 1701.093961][ T31] audit: type=1800 audit(1788757076.090:8934): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 1701.131730][ T31] audit: type=1800 audit(1788757076.130:8935): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1701.266608][T18300] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1701.277444][T18300] em28xx 3-1:0.0: dvb set to bulk mode. [ 1701.288265][T18301] em28xx 3-1:0.0: Binding DVB extension [ 1701.309698][ T31] audit: type=1800 audit(1788757076.310:8936): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=292772 res=0 errno=0 [ 1701.333066][ T31] audit: type=1800 audit(1788757076.330:8937): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=292773 res=0 errno=0 [ 1701.356691][ T31] audit: type=1800 audit(1788757076.360:8938): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=292752 res=0 errno=0 [ 1701.366912][ T31] audit: type=1800 audit(1788757076.370:8939): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=292774 res=0 errno=0 [ 1701.385023][ T31] audit: type=1800 audit(1788757076.390:8940): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293066 res=0 errno=0 [ 1701.388795][ T31] audit: type=1800 audit(1788757076.390:8941): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292814 res=0 errno=0 [ 1701.443707][ T31] audit: type=1800 audit(1788757076.440:8942): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293029 res=0 errno=0 [ 1701.448928][ T31] audit: type=1800 audit(1788757076.450:8943): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293052 res=0 errno=0 [ 1701.694481][T18300] usb 3-1: USB disconnect, device number 91 [ 1701.695794][T18300] em28xx 3-1:0.0: Disconnecting em28xx [ 1701.803156][T18301] em28xx 3-1:0.0: Registering input extension [ 1701.815158][T18300] em28xx 3-1:0.0: Closing input extension [ 1701.888634][T18300] em28xx: Freeing device [ 1701.892499][T20230] fuse: Bad value for 'group_id' [ 1701.892519][T20230] fuse: Bad value for 'group_id' [ 1702.001003][T20234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.001403][T20234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.086562][T20238] loop4: detected capacity change from 0 to 7 [ 1702.087235][T20238] Dev loop4: unable to read RDB block 7 [ 1702.087267][T20238] loop4: unable to read partition table [ 1702.087432][T20238] loop4: partition table beyond EOD, truncated [ 1702.087449][T20238] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1702.326801][T20247] syzkaller0: entered promiscuous mode [ 1702.332424][T20247] syzkaller0: entered allmulticast mode [ 1702.356914][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1702.356952][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1702.356975][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1702.357026][ T4972] loop0: [ 1702.479572][T11596] block nbd0: Possible stuck request ffff888028135080: control (read@0,1024B). Runtime 960 seconds [ 1702.493127][T11596] block nbd0: Possible stuck request ffff888028135240: control (read@1024,1024B). Runtime 960 seconds [ 1703.132875][T20268] loop4: detected capacity change from 0 to 7 [ 1703.143354][T20268] Dev loop4: unable to read RDB block 7 [ 1703.152201][T20268] loop4: unable to read partition table [ 1703.159848][T20268] loop4: partition table beyond EOD, truncated [ 1703.168453][T20268] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1703.618819][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1703.618864][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1703.618875][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1703.618919][ T4972] loop0: [ 1703.650456][T20283] syzkaller0: entered promiscuous mode [ 1703.650498][T20283] syzkaller0: entered allmulticast mode [ 1704.390169][T20300] syzkaller0: entered promiscuous mode [ 1704.390208][T20300] syzkaller0: entered allmulticast mode [ 1704.477692][T20304] macsec1: entered promiscuous mode [ 1704.477732][T20304] macsec0: entered promiscuous mode [ 1704.539109][T20304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.539534][T20304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.003731][T18301] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1705.139666][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1705.143701][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1705.143718][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1705.143775][ T4972] loop0: [ 1705.164488][T18301] usb 9-1: Using ep0 maxpacket: 8 [ 1705.173032][T18301] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1705.183805][T18301] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1705.192083][T18301] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1705.192132][T18301] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1705.192159][T18301] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1705.192187][T18301] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1705.192227][T18301] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.349904][T20319] loop4: detected capacity change from 0 to 7 [ 1705.365476][T20319] Dev loop4: unable to read RDB block 7 [ 1705.365534][T20319] loop4: unable to read partition table [ 1705.365708][T20319] loop4: partition table beyond EOD, truncated [ 1705.365725][T20319] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1705.473192][T18301] usb 9-1: usb_control_msg returned -32 [ 1705.478977][T18301] usbtmc 9-1:16.0: can't read capabilities [ 1705.510390][T20321] syzkaller0: entered promiscuous mode [ 1705.510438][T20321] syzkaller0: entered allmulticast mode [ 1705.831999][T20338] usbtmc 9-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1706.096506][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1706.106103][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1706.113719][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1706.113815][ T4972] loop0: [ 1706.140578][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 1706.140615][ T31] audit: type=1800 audit(1788757081.140:9011): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 1706.226681][ T31] audit: type=1800 audit(1788757081.230:9012): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1706.548756][T20340] syz_tun: entered allmulticast mode [ 1706.557287][T20339] syz_tun: left allmulticast mode [ 1706.600302][ T31] audit: type=1800 audit(1788757081.600:9013): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1706.665556][ T31] audit: type=1800 audit(1788757081.670:9014): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1706.719276][ T31] audit: type=1800 audit(1788757081.720:9015): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1706.771460][ T31] audit: type=1800 audit(1788757081.770:9016): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1706.805967][T20360] syzkaller0: entered promiscuous mode [ 1706.805992][T20360] syzkaller0: entered allmulticast mode [ 1706.896041][ T31] audit: type=1800 audit(1788757081.900:9017): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1706.975941][ T31] audit: type=1800 audit(1788757081.980:9018): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1707.038944][ T31] audit: type=1800 audit(1788757082.040:9019): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1707.102860][ T31] audit: type=1800 audit(1788757082.100:9020): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1707.270481][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1707.270522][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1707.270534][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1707.270575][ T4972] loop0: [ 1707.470913][T20383] syzkaller0: entered promiscuous mode [ 1707.470943][T20383] syzkaller0: entered allmulticast mode [ 1707.596053][T20386] syzkaller0: entered promiscuous mode [ 1707.596087][T20386] syzkaller0: entered allmulticast mode [ 1707.816373][ T30] usb 9-1: USB disconnect, device number 13 [ 1708.432292][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1708.432337][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1708.432348][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1708.432398][ T4972] loop0: [ 1708.732170][T20415] syzkaller0: entered promiscuous mode [ 1708.732201][T20415] syzkaller0: entered allmulticast mode [ 1708.977987][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3738'. [ 1709.270356][T20418] syzkaller0: entered promiscuous mode [ 1709.270396][T20418] syzkaller0: entered allmulticast mode [ 1709.641442][T20427] tipc: Enabled bearer , priority 0 [ 1709.649348][T20427] syzkaller0: entered promiscuous mode [ 1709.649371][T20427] syzkaller0: entered allmulticast mode [ 1709.680317][T20427] tipc: Resetting bearer [ 1709.718825][T20430] tipc: Resetting bearer [ 1709.820045][T20433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.823438][T20433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.838204][T20430] tipc: Disabling bearer [ 1709.838546][T20438] fuse: Unknown parameter 'grou00000000000000000000' [ 1710.032022][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1710.032060][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1710.032348][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1710.032596][ T4972] loop0: [ 1710.317365][T20455] loop4: detected capacity change from 0 to 7 [ 1710.326509][T20455] Dev loop4: unable to read RDB block 7 [ 1710.332187][T20455] loop4: unable to read partition table [ 1710.338174][T20455] loop4: partition table beyond EOD, truncated [ 1710.344496][T20455] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1710.465356][T18301] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1710.585878][T20459] syzkaller0: entered promiscuous mode [ 1710.592680][T20459] syzkaller0: entered allmulticast mode [ 1710.658293][T18301] usb 9-1: Using ep0 maxpacket: 16 [ 1710.659098][T18301] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1710.660144][T18301] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1710.661960][T18301] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.661984][T18301] usb 9-1: Product: syz [ 1710.662000][T18301] usb 9-1: Manufacturer: syz [ 1710.662014][T18301] usb 9-1: SerialNumber: syz [ 1710.666608][T18301] usb 9-1: config 0 descriptor?? [ 1710.692880][T18301] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1710.692913][T18301] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1711.196254][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 1711.196287][ T31] audit: type=1800 audit(1788757086.200:9066): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1711.287785][T20467] fuse: Unknown parameter 'grou00000000000000000000' [ 1711.300800][T18301] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1711.343171][ T31] audit: type=1800 audit(1788757086.340:9067): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1711.418535][ T31] audit: type=1800 audit(1788757086.420:9068): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1711.496663][ T31] audit: type=1800 audit(1788757086.500:9069): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1711.558521][ T31] audit: type=1800 audit(1788757086.560:9070): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1711.662438][ T31] audit: type=1800 audit(1788757086.660:9071): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1711.701527][T20478] loop4: detected capacity change from 0 to 7 [ 1711.706152][T20478] Dev loop4: unable to read RDB block 7 [ 1711.706208][T20478] loop4: unable to read partition table [ 1711.706399][T20478] loop4: partition table beyond EOD, truncated [ 1711.706416][T20478] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1711.714180][ T5734] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1711.744257][T18301] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1711.744290][T18301] em28xx 9-1:0.0: board has no eeprom [ 1711.805869][ T31] audit: type=1800 audit(1788757086.800:9072): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1711.849153][ T31] audit: type=1800 audit(1788757086.850:9073): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1711.870349][ T5734] usb 3-1: device descriptor read/64, error -71 [ 1711.897919][T20482] syzkaller0: entered promiscuous mode [ 1711.903492][T20482] syzkaller0: entered allmulticast mode [ 1711.920463][T20484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1711.979819][ T31] audit: type=1800 audit(1788757086.980:9074): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1712.033698][T18301] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1712.033746][T18301] em28xx 9-1:0.0: dvb set to bulk mode. [ 1712.034547][ T1183] em28xx 9-1:0.0: Binding DVB extension [ 1712.053101][ T31] audit: type=1800 audit(1788757087.040:9075): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=295568 res=0 errno=0 [ 1712.134270][ T5734] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1712.170913][T18300] usb 9-1: USB disconnect, device number 14 [ 1712.174558][T18300] em28xx 9-1:0.0: Disconnecting em28xx [ 1712.243911][ T1183] em28xx 9-1:0.0: Registering input extension [ 1712.245137][T18300] em28xx 9-1:0.0: Closing input extension [ 1712.264503][ T5734] usb 3-1: device descriptor read/64, error -71 [ 1712.277809][T18300] em28xx: Freeing device [ 1712.326429][T20493] fuse: Unknown parameter 'grou00000000000000000000' [ 1712.397336][ T5734] usb usb3-port1: attempt power cycle [ 1712.643770][T17673] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1712.744004][ T5734] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1712.765885][ T5734] usb 3-1: device descriptor read/8, error -71 [ 1712.803702][T17673] usb 4-1: Using ep0 maxpacket: 32 [ 1712.806619][T17673] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1712.810886][T17673] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1712.810912][T17673] usb 4-1: config 0 has no interface number 0 [ 1712.813156][T17673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.813178][T17673] usb 4-1: Product: syz [ 1712.813193][T17673] usb 4-1: Manufacturer: syz [ 1712.813208][T17673] usb 4-1: SerialNumber: syz [ 1712.827334][T17673] usb 4-1: config 0 descriptor?? [ 1712.983760][T18301] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1713.003915][ T5734] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1713.024366][ T5734] usb 3-1: device descriptor read/8, error -71 [ 1713.113884][T18301] usb 9-1: device descriptor read/64, error -71 [ 1713.134289][ T5734] usb usb3-port1: unable to enumerate USB device [ 1713.244956][T17673] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1713.245006][T17673] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1713.348143][T20517] fuse: Unknown parameter 'group_i00000000000000000000' [ 1713.355777][T18301] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1713.493740][T18301] usb 9-1: device descriptor read/64, error -71 [ 1713.605784][T18301] usb usb9-port1: attempt power cycle [ 1713.639775][T20525] netlink: Conntrack attr has 8 unknown bytes [ 1713.639827][T20525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1713.650330][T17673] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1713.650548][T17673] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1713.657203][T17673] usb 4-1: USB disconnect, device number 106 [ 1713.953743][T18301] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1713.974884][T18301] usb 9-1: device descriptor read/8, error -71 [ 1714.233783][T18301] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1714.254343][T18301] usb 9-1: device descriptor read/8, error -71 [ 1714.367382][T18301] usb usb9-port1: unable to enumerate USB device [ 1714.853115][T20547] fuse: Unknown parameter 'group_i00000000000000000000' [ 1715.126860][T20552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.136521][T20552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.695869][T20559] netlink: Conntrack attr has 8 unknown bytes [ 1715.695914][T20559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1716.166009][T20576] fuse: Unknown parameter 'group_i00000000000000000000' [ 1716.204953][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 1716.204993][ T31] audit: type=1800 audit(1788757091.210:9137): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1716.254588][ T31] audit: type=1800 audit(1788757091.260:9138): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1716.355497][ T31] audit: type=1800 audit(1788757091.360:9139): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1716.516080][ T31] audit: type=1800 audit(1788757091.520:9140): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1716.628997][ T31] audit: type=1800 audit(1788757091.630:9141): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1716.685992][ T31] audit: type=1800 audit(1788757091.690:9142): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1716.753841][ T31] audit: type=1800 audit(1788757091.760:9143): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1716.810629][ T31] audit: type=1800 audit(1788757091.810:9144): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1716.871604][ T31] audit: type=1800 audit(1788757091.870:9145): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1716.921638][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1716.921680][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1716.921691][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1716.921742][ T4972] loop0: [ 1716.960253][ T31] audit: type=1800 audit(1788757091.960:9146): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 1716.982405][ T5734] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1717.067766][T20602] fuse: Unknown parameter 'group_id00000000000000000000' [ 1717.113830][ T5734] usb 3-1: device descriptor read/64, error -71 [ 1717.364027][ T5734] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1717.503669][ T5734] usb 3-1: device descriptor read/64, error -71 [ 1717.560967][T20614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.561385][T20614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.615812][ T5734] usb usb3-port1: attempt power cycle [ 1717.769411][T20620] kernel profiling enabled (shift: 23) [ 1717.857804][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1717.867553][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1717.874845][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1717.874917][ T4972] loop0: [ 1717.964941][ T5734] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1717.984231][ T5734] usb 3-1: device descriptor read/8, error -71 [ 1718.029170][T20629] fuse: Unknown parameter 'group_id00000000000000000000' [ 1718.234246][ T5734] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1718.255869][ T5734] usb 3-1: device descriptor read/8, error -71 [ 1718.371207][ T5734] usb usb3-port1: unable to enumerate USB device [ 1719.250544][T20651] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1719.260514][T20651] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1719.614064][T18302] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1719.773707][T18302] usb 4-1: Using ep0 maxpacket: 16 [ 1719.774366][T18302] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1719.775325][T18302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1719.777086][T18302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.777108][T18302] usb 4-1: Product: syz [ 1719.777123][T18302] usb 4-1: Manufacturer: syz [ 1719.777138][T18302] usb 4-1: SerialNumber: syz [ 1719.783049][T18302] usb 4-1: config 0 descriptor?? [ 1719.791490][T18302] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1719.791525][T18302] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1720.403290][T18302] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1720.707680][T20713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.708490][T20713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.837465][T18302] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1720.837517][T18302] em28xx 4-1:0.0: board has no eeprom [ 1721.123957][T18302] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1721.124003][T18302] em28xx 4-1:0.0: dvb set to bulk mode. [ 1721.124983][T18301] em28xx 4-1:0.0: Binding DVB extension [ 1721.216550][ T31] kauditd_printk_skb: 62 callbacks suppressed [ 1721.224355][ T31] audit: type=1800 audit(1788757096.220:9209): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296634 res=0 errno=0 [ 1721.246072][ T31] audit: type=1800 audit(1788757096.220:9210): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=296612 res=0 errno=0 [ 1721.246142][ T31] audit: type=1800 audit(1788757096.230:9211): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=296635 res=0 errno=0 [ 1721.270680][T18300] usb 4-1: USB disconnect, device number 107 [ 1721.272022][T18300] em28xx 4-1:0.0: Disconnecting em28xx [ 1721.336251][ T31] audit: type=1800 audit(1788757096.340:9212): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1721.393090][T18301] em28xx 4-1:0.0: Registering input extension [ 1721.395590][T18300] em28xx 4-1:0.0: Closing input extension [ 1721.430300][T18300] em28xx: Freeing device [ 1721.525514][ T31] audit: type=1800 audit(1788757096.530:9213): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1721.555510][T18302] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1721.579279][T20734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1721.588466][ T31] audit: type=1800 audit(1788757096.590:9214): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296727 res=0 errno=0 [ 1721.640239][ T31] audit: type=1800 audit(1788757096.640:9215): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1721.646228][T20736] binder: BINDER_SET_CONTEXT_MGR already set [ 1721.646240][T20736] binder: 20735:20736 ioctl 4018620d 200000004a80 returned -16 [ 1721.684065][T18302] usb 9-1: device descriptor read/64, error -71 [ 1721.816881][ T31] audit: type=1800 audit(1788757096.820:9216): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1721.922600][ T31] audit: type=1800 audit(1788757096.920:9217): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1721.925433][T18302] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1721.967761][ T31] audit: type=1800 audit(1788757096.970:9218): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1722.061080][T18302] usb 9-1: device descriptor read/64, error -71 [ 1722.062983][T20747] tipc: Enabling of bearer rejected, failed to enable media [ 1722.168434][T18302] usb usb9-port1: attempt power cycle [ 1722.503766][T18302] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1722.525498][T18302] usb 9-1: device descriptor read/8, error -71 [ 1722.639430][T20780] netlink: Conntrack attr has 8 unknown bytes [ 1722.639463][T20780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1722.713754][ T30] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1722.764864][T18302] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1722.784239][T18302] usb 9-1: device descriptor read/8, error -71 [ 1722.884842][ T30] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1722.895418][T18302] usb usb9-port1: unable to enumerate USB device [ 1722.902732][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.902776][ T30] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1722.923082][ T30] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1722.923123][ T30] usb 4-1: Manufacturer: syz [ 1722.930307][ T30] usb 4-1: config 0 descriptor?? [ 1722.975617][T20787] binder: 20786:20787 ioctl c0306201 0 returned -14 [ 1723.220831][T20797] tipc: Enabling of bearer rejected, failed to enable media [ 1723.390331][T20806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1723.508796][T20814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.514592][T20814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.614052][T18302] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1723.754379][T18302] usb 9-1: device descriptor read/64, error -71 [ 1723.775042][T20826] binder: 20825:20826 ioctl c0306201 0 returned -14 [ 1723.993726][T18302] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1724.167901][T18302] usb 9-1: device descriptor read/64, error -71 [ 1724.275647][T18302] usb usb9-port1: attempt power cycle [ 1724.384670][T20842] tipc: Enabling of bearer rejected, failed to enable media [ 1724.875099][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1724.894355][T18302] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1724.914384][T18302] usb 9-1: Using ep0 maxpacket: 32 [ 1724.914901][T18302] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1724.915794][T18302] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.915833][T18302] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1724.915860][T18302] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1724.917624][T18302] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.917648][T18302] usb 9-1: Product: syz [ 1724.917663][T18302] usb 9-1: Manufacturer: syz [ 1724.917678][T18302] usb 9-1: SerialNumber: syz [ 1724.921532][T18302] usb 9-1: config 0 descriptor?? [ 1724.923942][T18302] gs_usb 9-1:0.0: Required endpoints not found [ 1725.043016][T20852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.053496][T20852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.326996][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1725.327025][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1725.327057][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1725.327098][ T4972] loop0: [ 1725.528813][ T30] usb 4-1: USB disconnect, device number 108 [ 1725.869451][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1725.869492][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1725.869516][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1725.869570][ T4972] loop0: [ 1726.030056][T20887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.030427][T20887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.263239][T20887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.274816][T20887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.696082][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 1726.696122][ T31] audit: type=1800 audit(1788757101.700:9282): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1726.810139][ T31] audit: type=1800 audit(1788757101.810:9283): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1726.878936][ T31] audit: type=1800 audit(1788757101.880:9284): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1726.977771][ T31] audit: type=1800 audit(1788757101.970:9285): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1727.052190][ T31] audit: type=1800 audit(1788757102.050:9286): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1727.131609][ T31] audit: type=1800 audit(1788757102.130:9287): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1727.200142][ T31] audit: type=1800 audit(1788757102.200:9288): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1727.259730][ T31] audit: type=1800 audit(1788757102.250:9289): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1727.348356][ T31] audit: type=1800 audit(1788757102.350:9290): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1727.351158][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1727.351180][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1727.351192][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1727.351241][ T4972] loop0: [ 1727.393298][ T31] audit: type=1800 audit(1788757102.390:9291): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 1727.608654][T18302] usb 9-1: USB disconnect, device number 25 [ 1729.153732][T15630] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1729.193968][T18302] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1729.304219][T15630] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1729.305339][T15630] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.305381][T15630] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1729.305418][T15630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.343861][T18302] usb 3-1: Using ep0 maxpacket: 16 [ 1729.347108][T18302] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1729.359140][T18302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1729.364521][T18302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.364545][T18302] usb 3-1: Product: syz [ 1729.364580][T18302] usb 3-1: Manufacturer: syz [ 1729.364595][T18302] usb 3-1: SerialNumber: syz [ 1729.380371][T18302] usb 3-1: config 0 descriptor?? [ 1729.393160][T18302] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1729.393212][T18302] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1729.835073][T15630] ttusb_dec_send_command: result bulk message failed: error -71 [ 1729.835261][T15630] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -71 [ 1729.854745][T15630] usb 4-1: USB disconnect, device number 109 [ 1729.990662][T18302] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1730.413763][T18302] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1730.413806][T18302] em28xx 3-1:0.0: board has no eeprom [ 1730.556393][ T5734] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1730.703674][T18302] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1730.703703][T18302] em28xx 3-1:0.0: dvb set to bulk mode. [ 1730.704763][T18301] em28xx 3-1:0.0: Binding DVB extension [ 1730.754983][ T5734] usb 9-1: Using ep0 maxpacket: 8 [ 1730.760653][ T5734] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1730.778167][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.778208][ T5734] usb 9-1: Product: syz [ 1730.778245][ T5734] usb 9-1: Manufacturer: syz [ 1730.778264][ T5734] usb 9-1: SerialNumber: syz [ 1730.805485][ T5734] usb 9-1: config 0 descriptor?? [ 1730.814393][ T5734] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1730.835858][ T30] usb 3-1: USB disconnect, device number 100 [ 1730.845312][ T30] em28xx 3-1:0.0: Disconnecting em28xx [ 1730.872052][T18301] em28xx 3-1:0.0: Registering input extension [ 1730.878337][ T30] em28xx 3-1:0.0: Closing input extension [ 1730.901610][ T30] em28xx: Freeing device [ 1730.987701][T20974] loop4: detected capacity change from 0 to 7 [ 1731.012603][T20974] Dev loop4: unable to read RDB block 7 [ 1731.012650][T20974] loop4: AHDI p1 p2 p3 [ 1731.012684][T20974] loop4: partition table partially beyond EOD, truncated [ 1731.017962][T20974] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1731.017989][T20974] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1731.249442][ T5734] gspca_sq930x: ucbus_write failed -71 [ 1731.468379][ T5734] gspca_sq930x: Sensor ov9630 not yet treated [ 1731.468462][ T5734] sq930x 9-1:0.0: probe with driver sq930x failed with error -22 [ 1731.477735][ T5734] usb 9-1: USB disconnect, device number 26 [ 1731.749681][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 1731.756311][ T31] audit: type=1800 audit(1788757106.750:9348): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1731.832128][ T31] audit: type=1800 audit(1788757106.830:9349): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1731.901512][ T31] audit: type=1800 audit(1788757106.900:9350): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1731.968924][ T31] audit: type=1800 audit(1788757106.970:9351): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1732.004499][ T31] audit: type=1800 audit(1788757107.010:9352): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1732.034364][ T31] audit: type=1800 audit(1788757107.040:9353): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1732.123054][ T31] audit: type=1800 audit(1788757107.120:9354): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1732.147043][ T31] audit: type=1800 audit(1788757107.150:9355): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1732.184654][ T31] audit: type=1800 audit(1788757107.190:9356): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297855 res=0 errno=0 [ 1732.215456][ T31] audit: type=1800 audit(1788757107.220:9357): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297865 res=0 errno=0 [ 1732.363707][ T5734] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1732.471755][T21020] netlink: Conntrack attr has 8 unknown bytes [ 1732.478600][T21020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1732.519002][ T5734] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1732.519934][ T5734] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.519974][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.524702][ T5734] usb 9-1: config 0 descriptor?? [ 1732.554811][T11596] block nbd0: Possible stuck request ffff888028135080: control (read@0,1024B). Runtime 990 seconds [ 1732.554837][T11596] block nbd0: Possible stuck request ffff888028135240: control (read@1024,1024B). Runtime 990 seconds [ 1732.747226][ T5734] usbhid 9-1:0.0: can't add hid device: -71 [ 1732.747341][ T5734] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1732.759850][ T5734] usb 9-1: USB disconnect, device number 27 [ 1733.053787][T18302] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1733.073797][ T30] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1733.194768][ T5734] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1733.204620][T18302] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1733.205548][T18302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.205590][T18302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.215616][T18302] usb 4-1: config 0 descriptor?? [ 1733.222754][T18302] pwc: Askey VC010 type 2 USB webcam detected. [ 1733.244402][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 1733.245162][ T30] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1733.246218][ T30] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1733.246258][ T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1733.246282][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1733.246305][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1733.246329][ T30] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1733.246366][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.355366][ T5734] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1733.357563][ T5734] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.357605][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.361880][ T5734] usb 9-1: config 0 descriptor?? [ 1733.367797][ T5734] hub 9-1:0.0: USB hub found [ 1733.419585][T18302] pwc: send_video_command error -71 [ 1733.419610][T18302] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1733.419710][T18302] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1733.433298][T18302] usb 4-1: USB disconnect, device number 110 [ 1733.456187][ T30] usb 3-1: usb_control_msg returned -32 [ 1733.461854][ T30] usbtmc 3-1:16.0: can't read capabilities [ 1733.474647][ T30] usb 3-1: USB disconnect, device number 101 [ 1733.562568][T21038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1733.571163][ T5734] hub 9-1:0.0: 1 port detected [ 1733.772742][T21047] netlink: Conntrack attr has 8 unknown bytes [ 1733.772791][T21047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1733.874219][ T5686] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1734.034238][ T5686] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1734.044545][ T5686] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.054811][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.070616][ T5686] usb 4-1: config 0 descriptor?? [ 1734.082987][ T5686] pwc: Askey VC010 type 2 USB webcam detected. [ 1734.115820][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1734.115866][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1734.115890][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1734.115931][ T4972] loop0: [ 1734.231546][T21065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.478615][ T5686] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1734.486368][ T5686] pwc: recv_control_msg error -32 req 02 val 2700 [ 1734.493694][ T5686] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1734.502630][ T5686] pwc: recv_control_msg error -32 req 04 val 1000 [ 1734.509734][ T5686] pwc: recv_control_msg error -32 req 04 val 1300 [ 1734.516858][ T5686] pwc: recv_control_msg error -32 req 04 val 1400 [ 1734.528437][ T5686] pwc: recv_control_msg error -32 req 02 val 2000 [ 1734.535542][ T5686] pwc: recv_control_msg error -32 req 02 val 2100 [ 1734.543898][ T5686] pwc: recv_control_msg error -32 req 04 val 1500 [ 1734.551059][ T5686] pwc: recv_control_msg error -32 req 02 val 2500 [ 1734.686246][T21001] blkio.reset_stats is deprecated [ 1734.688924][T15630] usb 9-1: USB disconnect, device number 28 [ 1734.763456][ T5686] pwc: recv_control_msg error -32 req 02 val 2600 [ 1734.776790][ T5686] pwc: recv_control_msg error -32 req 02 val 2900 [ 1734.909535][T21088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.912601][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1734.912624][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1734.912636][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1734.912683][ T4972] loop0: [ 1734.988878][ T5686] pwc: recv_control_msg error -71 req 04 val 1100 [ 1735.000428][ T5686] pwc: recv_control_msg error -71 req 04 val 1200 [ 1735.015925][ T5686] pwc: Registered as video103. [ 1735.030029][ T5686] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input49 [ 1735.087334][ T5686] usb 4-1: USB disconnect, device number 111 [ 1735.221532][T18799] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1735.221614][T18799] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1735.253452][T18799] usb 5-1: USB disconnect, device number 89 [ 1735.727450][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1735.736854][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1735.744212][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1735.751018][ T4972] loop0: [ 1735.835565][T21121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1735.934686][T21119] netlink: 'syz.2.4002': attribute type 13 has an invalid length. [ 1736.265918][T21132] loop4: detected capacity change from 0 to 7 [ 1736.275675][T21132] Dev loop4: unable to read RDB block 7 [ 1736.275713][T21132] loop4: AHDI p1 p2 p3 [ 1736.275742][T21132] loop4: partition table partially beyond EOD, truncated [ 1736.275920][T21132] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1736.275939][T21132] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1736.789294][ T31] kauditd_printk_skb: 108 callbacks suppressed [ 1736.789324][ T31] audit: type=1800 audit(1788757111.790:9466): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1736.848510][T21152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1736.869458][ T31] audit: type=1800 audit(1788757111.870:9467): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298973 res=0 errno=0 [ 1736.884864][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1736.884890][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1736.884901][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1736.884950][ T4972] loop0: [ 1736.945271][ T31] audit: type=1800 audit(1788757111.950:9468): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 1736.993502][ T31] audit: type=1800 audit(1788757111.990:9469): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1737.065555][ T31] audit: type=1800 audit(1788757112.070:9470): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1737.119164][T21156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.119614][T21156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.139602][T21156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.149257][T21156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.201574][ T31] audit: type=1800 audit(1788757112.200:9471): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1737.368893][T21156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.369532][T21156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.410702][ T31] audit: type=1800 audit(1788757112.410:9472): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1737.782006][ T31] audit: type=1800 audit(1788757112.780:9473): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1737.860228][ T31] audit: type=1800 audit(1788757112.860:9474): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1737.958824][ T31] audit: type=1800 audit(1788757112.960:9475): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1738.030531][T21172] netlink: 1864 bytes leftover after parsing attributes in process `syz.3.4026'. [ 1738.030576][T21172] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1738.236134][T21179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1738.292473][T21177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.292838][T21177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.559121][T21177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1738.576079][T21177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1738.814313][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.814365][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.814451][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.814486][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.232897][T21203] netlink: 1864 bytes leftover after parsing attributes in process `syz.7.4037'. [ 1739.243684][T21203] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1739.466513][T18302] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1739.474325][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1739.474349][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1739.474360][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1739.474411][ T4972] loop0: [ 1739.615976][T18302] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1739.616026][T18302] usb 5-1: no configurations [ 1739.616054][T18302] usb 5-1: can't read configurations, error -22 [ 1739.626032][ T5686] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1739.746194][T18302] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1739.793915][ T5686] usb 4-1: Using ep0 maxpacket: 32 [ 1739.802850][ T5686] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1739.814052][ T5686] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1739.814090][ T5686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1739.834947][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.843071][ T5686] usb 4-1: Product: syz [ 1739.843089][ T5686] usb 4-1: Manufacturer: syz [ 1739.843103][ T5686] usb 4-1: SerialNumber: syz [ 1739.869097][ T5686] usb 4-1: config 0 descriptor?? [ 1739.885876][ T5686] gs_usb 4-1:0.0: Required endpoints not found [ 1739.894214][T18302] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1739.894259][T18302] usb 5-1: no configurations [ 1739.894284][T18302] usb 5-1: can't read configurations, error -22 [ 1739.894681][T18302] usb usb5-port1: attempt power cycle [ 1740.097583][T21228] netlink: 1864 bytes leftover after parsing attributes in process `syz.7.4048'. [ 1740.097626][T21228] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1740.103708][T15630] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1740.156799][T21232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1740.196255][T21230] syzkaller0: entered promiscuous mode [ 1740.196303][T21230] syzkaller0: entered allmulticast mode [ 1740.235223][T18302] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1740.254539][T15630] usb 9-1: Using ep0 maxpacket: 32 [ 1740.256568][T15630] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1740.258590][T18302] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1740.258624][T18302] usb 5-1: no configurations [ 1740.258657][T18302] usb 5-1: can't read configurations, error -22 [ 1740.260769][T15630] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 1740.260793][T15630] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.260811][T15630] usb 9-1: config 0 has no interface number 0 [ 1740.260845][T15630] usb 9-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1740.266994][T15630] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.267017][T15630] usb 9-1: Product: syz [ 1740.267039][T15630] usb 9-1: Manufacturer: syz [ 1740.267054][T15630] usb 9-1: SerialNumber: syz [ 1740.283066][T15630] usb 9-1: config 0 descriptor?? [ 1740.296087][T15630] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 1740.296153][T15630] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 1740.384523][T18302] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1740.406344][T18302] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1740.406432][T18302] usb 5-1: no configurations [ 1740.406444][T18302] usb 5-1: can't read configurations, error -22 [ 1740.406640][T18302] usb usb5-port1: unable to enumerate USB device [ 1740.408597][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1740.408620][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1740.408632][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1740.408698][ T4972] loop0: [ 1740.500441][T15630] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1740.708117][T15630] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 1740.724619][T21239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.733439][T21239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.270706][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 1742.270748][ T31] audit: type=1800 audit(1788757117.270:9536): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1742.366436][ T31] audit: type=1800 audit(1788757117.370:9537): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1742.458221][T15630] usb 4-1: USB disconnect, device number 112 [ 1742.510693][ T31] audit: type=1800 audit(1788757117.510:9538): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1742.551282][ T31] audit: type=1800 audit(1788757117.550:9539): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1742.617837][ T31] audit: type=1800 audit(1788757117.620:9540): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1742.647631][T21262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4060'. [ 1742.683523][T21264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1742.706057][ T31] audit: type=1800 audit(1788757117.690:9541): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299739 res=0 errno=0 [ 1742.804943][ T31] audit: type=1800 audit(1788757117.790:9542): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1742.875516][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1742.875557][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1742.891446][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1742.891514][ T4972] loop0: [ 1742.899299][T18300] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1742.900630][ T31] audit: type=1800 audit(1788757117.900:9543): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 1743.006991][ T31] audit: type=1800 audit(1788757117.990:9544): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1743.083692][T18300] usb 5-1: Using ep0 maxpacket: 32 [ 1743.109676][T18300] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1743.120439][T18300] usb 5-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config [ 1743.120477][T18300] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1743.192699][T18300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.192743][T18300] usb 5-1: Product: syz [ 1743.192771][T18300] usb 5-1: Manufacturer: syz [ 1743.192789][T18300] usb 5-1: SerialNumber: syz [ 1743.208105][T18300] usb 5-1: config 0 descriptor?? [ 1743.247021][ T31] audit: type=1800 audit(1788757118.230:9545): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299766 res=0 errno=0 [ 1743.368928][ T5717] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1743.547475][T21270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.547899][T21270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.550459][ T5717] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1743.551642][ T5717] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.551683][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1743.551709][ T5717] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1743.551746][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.825251][T18300] usb 5-1: USB disconnect, device number 94 [ 1744.244271][ T5717] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 1744.261207][ T5717] ATM dev 0: poll status: error -71 [ 1744.262677][ T5717] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 1744.269385][ T5717] usb 4-1: USB disconnect, device number 113 [ 1745.105147][T18302] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1745.123242][ T5717] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1745.273807][T18302] usb 4-1: Using ep0 maxpacket: 16 [ 1745.274878][T18302] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1745.276361][T18302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.276401][T18302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.276443][T18302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1745.276489][T18302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.284730][T18302] usb 4-1: config 0 descriptor?? [ 1745.322041][ T5717] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1745.323336][ T5717] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1745.323366][ T5717] usb 5-1: can't read configurations, error -61 [ 1745.458544][ T5717] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1745.574529][T18300] usb 9-1: USB disconnect, device number 29 [ 1745.575271][T18300] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 1745.626182][ T5717] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1745.632582][ T5717] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1745.632617][ T5717] usb 5-1: can't read configurations, error -61 [ 1745.632883][ T5717] usb usb5-port1: attempt power cycle [ 1745.710344][T18302] usbhid 4-1:0.0: can't add hid device: -71 [ 1745.710460][T18302] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1745.728700][T18302] usb 4-1: USB disconnect, device number 114 [ 1745.809515][T21287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1745.964654][ T5717] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1745.987281][ T5717] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1745.991203][ T5717] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1745.991236][ T5717] usb 5-1: can't read configurations, error -61 [ 1745.992448][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1745.992469][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1745.992481][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1745.992531][ T4972] loop0: [ 1746.124278][ T5717] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1746.157204][ T5717] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1746.164297][ T5717] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1746.164331][ T5717] usb 5-1: can't read configurations, error -61 [ 1746.164675][ T5717] usb usb5-port1: unable to enumerate USB device [ 1746.489005][T21307] syzkaller0: entered promiscuous mode [ 1746.495943][T21307] syzkaller0: entered allmulticast mode [ 1746.610623][T21320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1746.726674][T21324] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4086'. [ 1746.914247][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1746.914292][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1746.914316][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1746.914356][ T4972] loop0: [ 1747.322208][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 1747.322269][ T31] audit: type=1800 audit(1788757122.310:9596): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1747.531475][ T31] audit: type=1800 audit(1788757122.520:9597): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1747.958854][ T31] audit: type=1800 audit(1788757122.960:9598): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1748.138970][ T31] audit: type=1800 audit(1788757123.140:9599): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1748.271149][ T31] audit: type=1800 audit(1788757123.270:9600): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1748.332795][T21357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1748.335748][ T31] audit: type=1800 audit(1788757123.340:9601): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300407 res=0 errno=0 [ 1748.405833][ T31] audit: type=1800 audit(1788757123.410:9602): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1748.460838][ T31] audit: type=1800 audit(1788757123.460:9603): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 1748.533931][ T31] audit: type=1800 audit(1788757123.540:9604): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1748.628025][ T31] audit: type=1800 audit(1788757123.630:9605): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1748.671909][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4099'. [ 1748.787997][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1748.788045][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1748.788069][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1748.788116][ T4972] loop0: [ 1749.253705][ T5734] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1749.416166][ T5734] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1749.445407][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.456820][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.485723][ T5734] usb 3-1: config 0 descriptor?? [ 1749.717031][ T5734] usbhid 3-1:0.0: can't add hid device: -71 [ 1749.718018][ T5734] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1749.742109][ T5734] usb 3-1: USB disconnect, device number 102 [ 1750.263308][ T5734] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1750.483050][ T5734] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1750.510757][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.521779][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.524084][ T5734] usb 3-1: config 0 descriptor?? [ 1750.543658][ T5734] hub 3-1:0.0: USB hub found [ 1750.639814][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'. [ 1750.745554][ T5734] hub 3-1:0.0: 1 port detected [ 1750.795665][ T4972] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1750.795707][ T4972] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1750.795731][ T4972] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1750.795801][ T4972] loop0: [ 1751.589950][T21416] loop4: detected capacity change from 0 to 7 [ 1751.598685][T21416] Dev loop4: unable to read RDB block 7 [ 1751.604415][T21416] loop4: unable to read partition table [ 1751.610438][T21416] loop4: partition table beyond EOD, truncated [ 1751.617337][T21416] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1751.789685][ T32] INFO: task syz.0.3006:18265 blocked for more than 143 seconds. [ 1751.789728][ T32] Tainted: G L syzkaller #0 [ 1751.789750][ T32] "echo 0 > /proc/sys/kerne ** replaying previous printk message ** [ 1751.789750][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1751.789761][ T32] task:syz.0.3006 state:D stack:26568 pid:18265 tgid:18264 ppid:17590 task_flags:0x400040 flags:0x00080002 [ 1751.789841][ T32] Call Trace: [ 1751.789850][ T32] [ 1751.789865][ T32] __schedule+0x1259/0x6920 [ 1751.789892][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1751.789937][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1751.789967][ T32] ? lock_acquire+0x1d1/0x380 [ 1751.789988][ T32] ? __pfx___schedule+0x10/0x10 [ 1751.790007][ T32] ? find_held_lock+0x2b/0x80 [ 1751.790034][ T32] ? schedule+0x225/0x2c0 [ 1751.790076][ T32] schedule+0xdd/0x2c0 [ 1751.790098][ T32] schedule_preempt_disabled+0x13/0x30 [ 1751.790120][ T32] __mutex_lock+0xccb/0x1bd0 [ 1751.790144][ T32] ? sync_bdevs+0x153/0x480 [ 1751.790173][ T32] ? sync_bdevs+0x1ff/0x480 [ 1751.790219][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1751.790254][ T32] ? iput.part.0+0x1a0/0x1050 [ 1751.790291][ T32] ? sync_bdevs+0x77/0x480 [ 1751.790323][ T32] ? sync_bdevs+0x153/0x480 [ 1751.790365][ T32] sync_bdevs+0x153/0x480 [ 1751.790397][ T32] ksys_sync+0xb0/0xf0 [ 1751.790423][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 1751.790447][ T32] ? kcov_ioctl+0x17a/0x760 [ 1751.790473][ T32] ? do_syscall_64+0xae/0x790 [ 1751.790515][ T32] __do_sys_sync+0xe/0x20 [ 1751.790540][ T32] do_syscall_64+0x123/0x790 [ 1751.790565][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.790586][ T32] RIP: 0033:0x7f8859f9e159 [ 1751.790604][ T32] RSP: 002b:00007f885af11028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1751.790626][ T32] RAX: ffffffffffffffda RBX: 00007f885a225fa0 RCX: 00007f8859f9e159 [ 1751.790658][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1751.790672][ T32] RBP: 00007f885a225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.790685][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.790698][ T32] R13: 00007f885a226038 R14: 00007f885a225fa0 R15: 00007fffbb13b278 [ 1751.790728][ T32] [ 1751.790738][ T32] INFO: task syz.0.3006:18269 blocked for more than 143 seconds. [ 1751.790755][ T32] Tainted: G L syzkaller #0 [ 1751.790767][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1751.790794][ T32] task:syz.0.3006 state:D stack:28728 pid:18269 tgid:18264 ppid:17590 task_flags:0x400040 flags:0x00080002 [ 1751.790856][ T32] Call Trace: [ 1751.790864][ T32] [ 1751.790877][ T32] __schedule+0x1259/0x6920 [ 1751.790899][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1751.790944][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1751.790972][ T32] ? lock_acquire+0x1d1/0x380 [ 1751.790994][ T32] ? __pfx___schedule+0x10/0x10 [ 1751.791013][ T32] ? find_held_lock+0x2b/0x80 [ 1751.791040][ T32] ? schedule+0x225/0x2c0 [ 1751.791082][ T32] schedule+0xdd/0x2c0 [ 1751.791104][ T32] schedule_preempt_disabled+0x13/0x30 [ 1751.791125][ T32] __mutex_lock+0xccb/0x1bd0 [ 1751.791150][ T32] ? sync_bdevs+0x153/0x480 [ 1751.791179][ T32] ? sync_bdevs+0x1ff/0x480 [ 1751.791225][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1751.791260][ T32] ? iput.part.0+0x1a0/0x1050 [ 1751.791293][ T32] ? sync_bdevs+0x77/0x480 [ 1751.791325][ T32] ? sync_bdevs+0x153/0x480 [ 1751.791368][ T32] sync_bdevs+0x153/0x480 [ 1751.791400][ T32] ksys_sync+0xb0/0xf0 [ 1751.791426][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 1751.791450][ T32] ? kcov_ioctl+0x17a/0x760 [ 1751.791475][ T32] ? do_syscall_64+0xae/0x790 [ 1751.791513][ T32] __do_sys_sync+0xe/0x20 [ 1751.791538][ T32] do_syscall_64+0x123/0x790 [ 1751.802813][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.802869][ T32] RIP: 0033:0x7f8859f9e159 [ 1751.802898][ T32] RSP: 002b:00007f885aef0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1751.802921][ T32] RAX: ffffffffffffffda RBX: 00007f885a226090 RCX: 00007f8859f9e159 [ 1751.802936][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1751.802949][ T32] RBP: 00007f885a226090 R08: 0000000000000000 R09: 0000000000000000 [ 1751.802962][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.802975][ T32] R13: 00007f885a226128 R14: 00007f885a226090 R15: 00007fffbb13b278 [ 1751.803023][ T32] [ 1751.803035][ T32] INFO: task syz.0.3006:18272 blocked for more than 143 seconds. [ 1751.803052][ T32] Tainted: G L syzkaller #0 [ 1751.803065][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1751.803074][ T32] task:syz.0.3006 state:D stack:28728 pid:18272 tgid:18264 ppid:17590 task_flags:0x400040 flags:0x00080002 [ 1751.803151][ T32] Call Trace: [ 1751.803160][ T32] [ 1751.803173][ T32] __schedule+0x1259/0x6920 [ 1751.803196][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1751.803223][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1751.803250][ T32] ? lock_acquire+0x1d1/0x380 [ 1751.803295][ T32] ? __pfx___schedule+0x10/0x10 [ 1751.803314][ T32] ? find_held_lock+0x2b/0x80 [ 1751.803340][ T32] ? schedule+0x225/0x2c0 [ 1751.803366][ T32] schedule+0xdd/0x2c0 [ 1751.803388][ T32] schedule_preempt_disabled+0x13/0x30 [ 1751.803428][ T32] __mutex_lock+0xccb/0x1bd0 [ 1751.803453][ T32] ? sync_bdevs+0x153/0x480 [ 1751.803487][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1751.803522][ T32] ? iput.part.0+0x1a0/0x1050 [ 1751.804337][ T32] ? sync_bdevs+0x77/0x480 [ 1751.804375][ T32] ? sync_bdevs+0x153/0x480 [ 1751.804419][ T32] sync_bdevs+0x153/0x480 [ 1751.804452][ T32] ksys_sync+0xb0/0xf0 [ 1751.804478][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 1751.804502][ T32] ? kcov_ioctl+0x17a/0x760 [ 1751.804527][ T32] ? do_syscall_64+0xae/0x790 [ 1751.804570][ T32] __do_sys_sync+0xe/0x20 [ 1751.804594][ T32] do_syscall_64+0x123/0x790 [ 1751.804620][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.804641][ T32] RIP: 0033:0x7f8859f9e159 [ 1751.804657][ T32] RSP: 002b:00007f885aecf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1751.804676][ T32] RAX: ffffffffffffffda RBX: 00007f885a226180 RCX: 00007f8859f9e159 [ 1751.804708][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1751.804720][ T32] RBP: 00007f885a226180 R08: 0000000000000000 R09: 0000000000000000 [ 1751.804732][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.804745][ T32] R13: 00007f885a226218 R14: 00007f885a226180 R15: 00007fffbb13b278 [ 1751.804772][ T32] [ 1751.807847][ T32] [ 1751.807847][ T32] Showing all locks held in the system: [ 1751.807881][ T32] locks held by kworker/u8:0/12: 3, on CPU#1: [ 1751.807897][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1751.807955][ T32] #1: ffffc90000117d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1751.808028][ T32] #2: ffffffff90cd0400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1751.808082][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 1751.808095][ T32] #0: ffffffff8edd85b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1751.808144][ T32] #1: ffffffff9bc67c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1751.808214][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1751.808228][ T32] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1751.810921][ T32] locks held by kworker/u8:4/59: 5, last CPU#1: [ 1751.810935][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1751.811008][ T32] #1: ffffc9000201fd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1751.811061][ T32] #2: ffffffff8ec7ca50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 1751.811132][ T32] #3: ffffffff8ef40bc0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x110/0x1c0 [ 1751.811187][ T32] #4: ffffffff8ec9c340 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1751.811287][ T32] locks held by klogd/4961: 1, last CPU#1: [ 1751.811300][ T32] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600 [ 1751.811343][ T32] locks held by kworker/1:7/5734: 5, on CPU#1: [ 1751.811355][ T32] #0: ffff888021ac9940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1751.811423][ T32] #1: ffffc900047efd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1751.811475][ T32] #2: ffff888026c421d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1751.811523][ T32] #3: ffff88802f1a9568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0xb38/0x4420 [ 1751.811590][ T32] #4: ffff88802bb63090 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x5e/0x690 [ 1751.811644][ T32] locks held by udevd/5854: 1, on CPU#1: [ 1751.811658][ T32] #0: ffff8880268cb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1751.811735][ T32] locks held by getty/16688: 2, on CPU#0: [ 1751.811749][ T32] #0: ffff888037c7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1751.811801][ T32] #1: ffffc900059352e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1751.811875][ T32] locks held by syz.0.3006/18265: 1, on CPU#0: [ 1751.811888][ T32] #0: ffff8880268cb350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1751.811940][ T32] locks held by syz.0.3006/18269: 1, on CPU#1: [ 1751.811953][ T32] #0: ffff8880268cb350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1751.812023][ T32] locks held by syz.0.3006/18272: 1, on CPU#1: [ 1751.812036][ T32] #0: ffff8880268cb350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1751.812091][ T32] locks held by syz.3.4081/21306: 1, last CPU#0: [ 1751.812123][ T32] #0: ffffffff90cd0400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1751.812176][ T32] locks held by syz.8.4083/21318: 1, on CPU#1: [ 1751.812190][ T32] #0: ffffffff90cd0400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1751.812260][ T32] locks held by syz.8.4083/21321: 1, on CPU#0: [ 1751.812279][ T32] #0: ffffffff90cd0400 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x331/0x10e0 [ 1751.812323][ T32] locks held by syz.8.4083/21327: 1, on CPU#0: [ 1751.812337][ T32] #0: ffffffff90cd0400 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1751.812402][ T32] locks held by syz.8.4083/21338: 1, on CPU#1: [ 1751.812415][ T32] #0: ffffffff90cd0400 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1751.812462][ T32] locks held by syz.7.4105/21379: 1, on CPU#0: [ 1751.812476][ T32] #0: ffffffff90cd0400 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x23d/0x4880 [ 1751.812519][ T32] locks held by syz.7.4105/21381: 1, on CPU#1: [ 1751.812551][ T32] #0: ffffffff90cd0400 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x331/0x10e0 [ 1751.812596][ T32] [ 1751.812601][ T32] ============================================= [ 1751.812601][ T32] [ 1751.812622][ T32] NMI backtrace for cpu 1 [ 1751.812637][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1751.812663][ T32] Tainted: [L]=SOFTLOCKUP [ 1751.812672][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1751.812683][ T32] Call Trace: [ 1751.812690][ T32] [ 1751.812698][ T32] dump_stack_lvl+0x100/0x190 [ 1751.812727][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1751.812755][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1751.812777][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1751.812809][ T32] sys_info+0x141/0x190 [ 1751.812834][ T32] watchdog+0xcb1/0x1030 [ 1751.812860][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1751.812881][ T32] ? __pfx_watchdog+0x10/0x10 [ 1751.812902][ T32] ? __kthread_parkme+0x18f/0x230 [ 1751.812928][ T32] ? kthread+0x13a/0x450 [ 1751.812950][ T32] ? __pfx_watchdog+0x10/0x10 [ 1751.812969][ T32] kthread+0x373/0x450 [ 1751.812992][ T32] ? __pfx_kthread+0x10/0x10 [ 1751.813018][ T32] ret_from_fork+0x730/0xd60 [ 1751.813040][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1751.813062][ T32] ? __switch_to+0x800/0x10f0 [ 1751.813088][ T32] ? __pfx_kthread+0x10/0x10 [ 1751.813114][ T32] ret_from_fork_asm+0x1a/0x30 [ 1751.813148][ T32] [ 1751.813177][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1751.813204][ C0] NMI backtrace for cpu 0 [ 1751.813217][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1751.813242][ C0] Tainted: [L]=SOFTLOCKUP [ 1751.813248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1751.813258][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 1751.813285][ C0] Code: d4 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 cd 39 23 06 e8 78 08 cf fc eb a2 e8 01 09 [ 1751.813301][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 1751.813316][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1751.813328][ C0] RDX: 00000000000003fd RSI: ffffffff85b03ce0 RDI: ffffffff9bc67ca0 [ 1751.813340][ C0] RBP: ffffffff9bc67c60 R08: 0000000000000001 R09: 000000000000001f [ 1751.813352][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 1751.813363][ C0] R13: 0000000000000020 R14: fffffbfff378cfe9 R15: dffffc0000000000 [ 1751.813375][ C0] FS: 0000000000000000(0000) GS:ffff888123b5d000(0000) knlGS:0000000000000000 [ 1751.813392][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1751.813405][ C0] CR2: 0000200000001000 CR3: 0000000044fc1000 CR4: 00000000003526f0 [ 1751.813417][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1751.813427][ C0] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1751.813438][ C0] Call Trace: [ 1751.813444][ C0] [ 1751.813453][ C0] wait_for_lsr+0x13a/0x210 [ 1751.813474][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1751.813495][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 1751.813514][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 1751.813542][ C0] serial8250_console_write+0xf46/0x1330 [ 1751.813567][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1751.813591][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1751.813618][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1751.813649][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 1751.813678][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1751.813704][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1751.813728][ C0] ? do_raw_spin_lock+0x70/0x260 [ 1751.813752][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 1751.813781][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1751.813801][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 1751.813826][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1751.813856][ C0] nbcon_kthread_func+0x613/0x7d0 [ 1751.813875][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1751.813896][ C0] ? __kthread_parkme+0x18f/0x230 [ 1751.813918][ C0] ? kthread+0x13a/0x450 [ 1751.813939][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1751.813955][ C0] kthread+0x373/0x450 [ 1751.813977][ C0] ? __pfx_kthread+0x10/0x10 [ 1751.814000][ C0] ret_from_fork+0x730/0xd60 [ 1751.814019][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1751.814040][ C0] ? __switch_to+0x800/0x10f0 [ 1751.814063][ C0] ? __pfx_kthread+0x10/0x10 [ 1751.814086][ C0] ret_from_fork_asm+0x1a/0x30 [ 1751.814112][ C0] [ 1751.822065][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1753.282333][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1753.292997][ T32] Tainted: [L]=SOFTLOCKUP [ 1753.297311][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1753.307365][ T32] Call Trace: [ 1753.310639][ T32] [ 1753.313568][ T32] dump_stack_lvl+0x100/0x190 [ 1753.318257][ T32] vpanic+0x553/0x970 [ 1753.322243][ T32] ? __pfx_vpanic+0x10/0x10 [ 1753.326749][ T32] panic+0xd1/0xe0 [ 1753.330465][ T32] ? __pfx_panic+0x10/0x10 [ 1753.334882][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1753.341035][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1753.347197][ T32] ? watchdog.cold+0x1ec/0x234 [ 1753.351963][ T32] watchdog.cold+0x1fd/0x234 [ 1753.356549][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1753.362349][ T32] ? __pfx_watchdog+0x10/0x10 [ 1753.367022][ T32] ? __kthread_parkme+0x18f/0x230 [ 1753.372037][ T32] ? kthread+0x13a/0x450 [ 1753.376271][ T32] ? __pfx_watchdog+0x10/0x10 [ 1753.380934][ T32] kthread+0x373/0x450 [ 1753.384992][ T32] ? __pfx_kthread+0x10/0x10 [ 1753.389571][ T32] ret_from_fork+0x730/0xd60 [ 1753.394148][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1753.399251][ T32] ? __switch_to+0x800/0x10f0 [ 1753.403923][ T32] ? __pfx_kthread+0x10/0x10 [ 1753.408509][ T32] ret_from_fork_asm+0x1a/0x30 [ 1753.413279][ T32] [ 1753.416508][ T32] Kernel Offset: disabled [ 1753.420815][ T32] Rebooting in 86400 seconds..