last executing test programs: 1m33.999428717s ago: executing program 4 (id=1617): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x7, 0x18, 0x9, 0x3, 0x8, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0xd, 0xe}}]}}]}, 0x3c}}, 0x24044094) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0xa, 0x300) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03000b000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1m32.488523697s ago: executing program 4 (id=1626): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x812) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000180000000000fe0100", [0x0, 0x2000000000001]}}) 1m32.104934305s ago: executing program 4 (id=1631): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r1, 0x960, 0x20265}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x8014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x53b5, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 1m31.213235567s ago: executing program 4 (id=1639): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) lseek(r1, 0x7fffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x1a, 0x0, 0x0) unshare(0xc040400) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00002005000000040000000700000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x280000000000}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="66b82f018ee80f01dfb8010000000f01d9b8fbffffff0f23d80f21f835800000800f23f80f20d835200000000f22d8c4c1fe7069cc59acb8080000000f23c80f21f8350c0050000f23f8c74424002f3a0000c7442402be000000c7442406000000000f011c240f2090", 0x69}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x2}, {0xb1, 0x1, 0x0, 0xfffff034}, {0x6, 0x2, 0x6, 0x6}]}, 0x10) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x9ffc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r8, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r9, r9, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="b22041a342", 0x5}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000600)="b5cf31", 0x3}], 0x1}}], 0x2, 0x20000000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) 1m29.671251917s ago: executing program 4 (id=1645): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x4}) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x6, @raw_data="d839fdddfbabd076b5a855b7eb3bb66bdcd9466b9867365e39f9d2d70a0fc98b92d32b2c9059fde71184a2681f991f5c2254ab745148e56bf6ba95aed24c532374dd866306dddf6a3045e86dbc27ad6e4292826d53a190976f2148120c58144984d7359909eba0d807c4fe04cadc5868c436b7a15538fda427aec6621aadcdbf5ba25f7c7c459ae4246b0e5a6235107f5b0862431ac51f8836521b1681d74ff6957388604a70a82111450f6d8981ebb3c1b7474f7a13a211f12d3f368eeac428824369d9f4f3d7fe"}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x4, 0x31384142, 0x0, 0x2, [{0xfffffffc}, {}, {}, {}, {}, {}, {}, {0xfffffffe}], 0x0, 0x0, 0x0, 0x0, 0x7}}) 1m29.235572099s ago: executing program 4 (id=1646): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x6b, 0x10, 0xed, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a8202e0b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xdcc, 0xffff, 0x688f, 0x6}, {0x6, 0x24, 0x1a, 0x15, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf4, 0x8, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x50, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xe, 0xd8, 0x1, 0x20, 0x4}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0xa, [{0x5a, &(0x7f0000000440)=@string={0x5a, 0x3, "a552add2b919cc32f09d0cfa65a9b240ff946886b359fca9e978674664a9aaac50ebf8cdc0da25475cfef7788e72d96956a61beec11514dfe8427de94f994118b1d2868f0f3ae3d9a64d6ad7becea40e7858dc94e9afb3ed"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x48, &(0x7f0000000600)=@string={0x48, 0x3, "c11818dd5bd76ac12320a7e301fbadafe9f993c013a97d14dacf99f13d304d2780d30957bfbb507dcea39aab8860fd511a32936aae88b42fad56250322a03fb7ea9067e5ab92"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x843}}, {0xae, &(0x7f0000000780)=@string={0xae, 0x3, "7ad1187ea7b68ae8e4c60f369eda2b0b75744be7e61eb9c21ee1202df83c0b7d019ec8ae4e93625b74e47cd617f59130ff0031265d1cc6e2f9b1d03943bb58ddb98d727ac157fd2ba078680849f3b2835f175a80159b92d23c22b45fa19ae5d9ac06efebafe06416459ba924920def13a4a64612989c8b59cc719707f5313b2abc82a3e96fd8d48c7d5b9974d881dda066d800a2279e3645f7e988024cfcfba2184819fe940d3c60eb21f41a"}}, {0x73, &(0x7f0000000840)=@string={0x73, 0x3, "347b963e3f1008cdf9f47e3e691f4f8ca5564ea07c777e381b560b115622bbd32e61715c1dc895de0077a4a8e1d508464f7ef1ab930a59ae3cf7f1842a5a8b57bb720536b68c121a676146cac06ec2af336d1fcea2087a31cdc1c5fcdd31667864fe8f0734d5ee3783382004dbe803d9c7"}}, {0x9d, &(0x7f0000000940)=@string={0x9d, 0x3, "bb5007b3cfbc3664e3933725f56056b371b43b131a0a4a124e51a42e8ecea0826a52f64ff240697aa872fdec73326c0061edaabacafb7343b093d70f42c7fa5d8a7ddc40339a62c24f1904218feca49856d10c525017324732aae5538bf89f2113d0be105c50f7d83f26ddbecf52aef10b900adfc88d851713932093ae1eccf1e318b00254353d99079d7ef2cb3f93a1a4e69f7af1c4696410ad9c"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x80c}}]}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xa8) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) (rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000ffff27bd7000ffdb"], 0x20}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0)) restart_syscall() syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000080)={0x0, 0xe, 0x3, "042bf9"}, 0x0, 0x0}) (async) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x40000001, 0x0, 0x6, 0x2}) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1m29.002930082s ago: executing program 32 (id=1646): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x6b, 0x10, 0xed, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a8202e0b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xdcc, 0xffff, 0x688f, 0x6}, {0x6, 0x24, 0x1a, 0x15, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf4, 0x8, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x50, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xe, 0xd8, 0x1, 0x20, 0x4}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0xa, [{0x5a, &(0x7f0000000440)=@string={0x5a, 0x3, "a552add2b919cc32f09d0cfa65a9b240ff946886b359fca9e978674664a9aaac50ebf8cdc0da25475cfef7788e72d96956a61beec11514dfe8427de94f994118b1d2868f0f3ae3d9a64d6ad7becea40e7858dc94e9afb3ed"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x48, &(0x7f0000000600)=@string={0x48, 0x3, "c11818dd5bd76ac12320a7e301fbadafe9f993c013a97d14dacf99f13d304d2780d30957bfbb507dcea39aab8860fd511a32936aae88b42fad56250322a03fb7ea9067e5ab92"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x843}}, {0xae, &(0x7f0000000780)=@string={0xae, 0x3, "7ad1187ea7b68ae8e4c60f369eda2b0b75744be7e61eb9c21ee1202df83c0b7d019ec8ae4e93625b74e47cd617f59130ff0031265d1cc6e2f9b1d03943bb58ddb98d727ac157fd2ba078680849f3b2835f175a80159b92d23c22b45fa19ae5d9ac06efebafe06416459ba924920def13a4a64612989c8b59cc719707f5313b2abc82a3e96fd8d48c7d5b9974d881dda066d800a2279e3645f7e988024cfcfba2184819fe940d3c60eb21f41a"}}, {0x73, &(0x7f0000000840)=@string={0x73, 0x3, "347b963e3f1008cdf9f47e3e691f4f8ca5564ea07c777e381b560b115622bbd32e61715c1dc895de0077a4a8e1d508464f7ef1ab930a59ae3cf7f1842a5a8b57bb720536b68c121a676146cac06ec2af336d1fcea2087a31cdc1c5fcdd31667864fe8f0734d5ee3783382004dbe803d9c7"}}, {0x9d, &(0x7f0000000940)=@string={0x9d, 0x3, "bb5007b3cfbc3664e3933725f56056b371b43b131a0a4a124e51a42e8ecea0826a52f64ff240697aa872fdec73326c0061edaabacafb7343b093d70f42c7fa5d8a7ddc40339a62c24f1904218feca49856d10c525017324732aae5538bf89f2113d0be105c50f7d83f26ddbecf52aef10b900adfc88d851713932093ae1eccf1e318b00254353d99079d7ef2cb3f93a1a4e69f7af1c4696410ad9c"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x80c}}]}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xa8) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) (rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000ffff27bd7000ffdb"], 0x20}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0)) restart_syscall() syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000080)={0x0, 0xe, 0x3, "042bf9"}, 0x0, 0x0}) (async) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x40000001, 0x0, 0x6, 0x2}) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10.207434871s ago: executing program 1 (id=1924): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000d00)=[@nested_vmlaunch={0x12f, 0x18}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x90a3, 0x5}}, @out_dx={0x6a, 0x28, {0x1e21, 0x1, 0x962235b}}, @wr_crn={0x67, 0x20, {0x0, 0x7ff}}, @nested_load_code={0x12e, 0x6d, {0x1, "64430f01ca66bad104ec26420f83666800000f3266baf80cb808b48888ef66bafc0c66b8d70066ef3e450f850500000066470f3834c02666450f3881a86cfb86e1b9800000c00f3235001000000f30c4a17ee65a6b"}}, @wr_crn={0x67, 0x20, {0x4, 0xfffffffffffff801}}, @in_dx={0x69, 0x20, {0x17c6, 0x5}}, @wr_drn={0x68, 0x20, {0x3, 0x2}}, @out_dx={0x6a, 0x28, {0x4a30, 0x6, 0x6}}, @wr_drn={0x68, 0x20, {0x6, 0x800}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x7}, @set_irq_handler={0xc8, 0x20, {0xfd, 0x1}}, @cpuid={0x64, 0x18, {0x18, 0x7}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @rdmsr={0x66, 0x18, {0x20}}, @wr_crn={0x67, 0x20, {0x0, 0x3}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @wr_drn={0x68, 0x20, {0x1, 0x4}}, @cpuid={0x64, 0x18, {0x0, 0x1}}, @nested_load_code={0x12e, 0x4c, {0x3, "0f20da0f211e3e460f20826765f7b1614d00000f01c2c401c35dd9670f070fc442003366b878008ec00f20d835200000000f22d8"}}, @in_dx={0x69, 0x20, {0xf28e}}, @out_dx={0x6a, 0x28, {0x2deb, 0x0, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x7a, 0x2, 0x1, 0x800}}], 0x3d1}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x10}}, 0x4040090) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f00000003c0)="0f0092d0a30f01ca0f01c9baf80c66b80cbdf78066efbafc0c66b80070000066ef66b8f367ae450f23c80f21f866350000d0000f23f80f20e06635000400000f22e0660f38292e0000123236d837baf80c66b8e424728166efbafc0c66b80200000066ef", 0x64}], 0x1, 0x10, &(0x7f0000000440)=[@efer={0x2, 0x1}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x40, 0xb, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000480)={0x40, 0x8, 0x2, 'f\t'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.482604699s ago: executing program 2 (id=1930): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8.301859036s ago: executing program 2 (id=1932): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket(0x40000000015, 0x5, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000340)={0xff, 0x9}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r5, 0x5) socket$kcm(0x10, 0x2, 0x0) r6 = socket(0x1e, 0x3, 0x7) write(r6, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) dup(0xffffffffffffffff) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r7, &(0x7f0000000100)="050094e2000036", 0x7) socket(0x1e, 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000100)='cpuset\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) 7.959850617s ago: executing program 1 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000700)=0x2, 0x4) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000021000100000000000100000000000000000000000000000000000000fe"], 0x50}}, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async, rerun: 32) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$SEG6(&(0x7f0000000d00), r0) (async, rerun: 64) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) unshare(0x32020080) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x29, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}}, 0x0) 7.116414435s ago: executing program 3 (id=1938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a0101020000000000000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0xa801) 6.742072191s ago: executing program 3 (id=1939): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010329bd5f00fcffffff0400"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="20216b0000006b0f5a46f5346948d68ee9128f3a0f6494a77969417456989f67fbc1eaab86aa71e68d13a53aa86113257eac7d0fa8070045a80106215fa8ea152db6e36c7f8bfe8729606c008fb0941d0ba3a0b4f269a6dfd83dc5c22140f18e8c00ce59a673830369a1ab36a56a2f6afe507cbdba50f6a9305d139d795c5f17f816bcc8a04d0a0a2373cadd789a5605cd7c0000000000000000"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = syz_open_dev$vcsu(&(0x7f0000000500), 0x7, 0x240840) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000916010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000280)="f326075f81038b28a00d14fb1617ff9161c6f000"/44, 0x2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r4, 0x81, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 6.16392562s ago: executing program 5 (id=1943): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (async) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x5b03, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x19, 0x8, "ffb3d741dd17c1ac0d38ef0200000000000000000000000000000000000000000000000000fe00", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xffffffffffffbffa, 0x53e]}}) (async) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x4, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896000000000100", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc]}) 5.776347846s ago: executing program 3 (id=1945): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='_\x00'/11, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a9000000003000b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6164000056080c00000000000000000240000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a00"/184], 0xb8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETFILTER(r4, 0x801054db, 0x0) unshare(0x22020600) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, &(0x7f00000002c0), 0x6, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000040a26e5775871bdf8f00010902240001000004000904000001ffffffffeff56fa1f26e51d00009058103"], 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000001140)=ANY=[@ANYRES32=0x0], 0x0) recvmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) read(r8, &(0x7f0000000140)=""/4096, 0x1000) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef"], 0x0) syz_usb_control_io(r7, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x113080) socket(0xa, 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000000040)=""/185) 5.616983321s ago: executing program 1 (id=1946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @remote}, &(0x7f0000000080)=0xc) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400f4ff", @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800050064000000"], 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}}) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x62053e1d}, 0x8) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvmmsg$unix(r7, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/5, 0x5}], 0x1}}], 0x1, 0x0, 0x0) accept$inet(r7, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x14, 0x300, 0x70bd26, 0x25dfdbfb, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x19, 0x1, "307b7e2d5fbc7abff9c68ebee674c7bfbe7cbf3cab"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xd0, 0x4, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0xa}, @NFTA_CHAIN_USERDATA={0x88, 0xc, "e0a136a532861b62c226a300fe48291fc5f9e4cca4030ea0e6274aba829e9b5c478cb9b8eab4a9409d0da56187b0231f15ab7f56225c814984d9a12e9f7f08847121eb15a94e007cd2b80c73f6494c6a04e944b410d2c659af0bca4a9745646d7dc4d02f7b7d5d65eafd73c64808ead3bc2f175a862a47c7c23f30074a9b638cdc056ffb"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000091) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x111, 0x2, 0x1, 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, &(0x7f0000000540)=0xeeee8000) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[], 0x0) 4.860793102s ago: executing program 5 (id=1948): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) (async) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x11, r0, 0x180000000) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r2, 0x7f}, 0x8) 4.79757875s ago: executing program 5 (id=1949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a0101020000000000000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 4.705065478s ago: executing program 5 (id=1950): getpriority(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000002940)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x9, 0xc, {0xc, 0xe, "1ddd9f0c201f552328ec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.412132511s ago: executing program 0 (id=1951): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000009}, 0xc880) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001200010000000000000500000000000000000200000000000000000000000000070a000000000000000000000000000000000000a53f20471be007bd72983547b842f2f7d28f747746cd8e062572e2b6b1a665cbef49f87b9e34471e578a9bb85700750c02f4a990033b8d0f371c71d77f9936c28a111202bf1b2fe4c9e8811873deccdc82b7e1adf7a8bf00e0aeea17470c61c4c2a4b45d79161f917ffe87119cb372e10ea0f663c83fd38812e72a07273f38f8b7d18b1d62bce26b2d8b0923b9b8e543dd89f475653a83770c2a1b22c6fa653d9f4dea0d08e8a800c6522df0e00000", @ANYRES32=0x0, @ANYBLOB="050000000300000008000000000000000800030011000000"], 0x54}}, 0x20004010) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 3.17254242s ago: executing program 0 (id=1952): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b3, 0x0, 0x80000000}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000000c0)=r5) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000000c0)=r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000bc0)={0x4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000600)={r8, 0xff, 0x8, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000002440)={{r0}, r5, 0x4, @unused=[0xfffffffffffffff1, 0x3, 0x3, 0x10000], @devid=r8}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000002440)={{r0}, r5, 0x4, @unused=[0xfffffffffffffff1, 0x3, 0x3, 0x10000], @devid=r8}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)="43735ec930d2be89360d0f25af1ee4a5d0fa2d07c8", 0x15}], 0x1, 0x0, 0x0, 0x881}], 0x1, 0x20041000) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r9, &(0x7f0000002380)=""/130, 0x82) mknodat(r9, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) mknodat(r9, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2.772187533s ago: executing program 3 (id=1954): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000003380)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x1000, 0x800}, {0x0}, &(0x7f0000003300)=[{&(0x7f0000002d40)=""/222, 0xde}], 0x1, 0x1}}], 0x90}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4074) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/13], 0x48) ftruncate(0xffffffffffffffff, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0xd) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020073797a310000000008000a40fffffffc400000000c0a0900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000000000000000000000009000000fe1895d7d317d930250328"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000180002801400018008000100ac1414aa08000200ac1e00015277c7f0bbd5a8076b9729a170953d9e145a680a8af809250d98fb1a5d5f84023bfd453b06ffb7bfb056b4a9764e43e9a2c2b5769c52b462493af9eec57fcc51b05402bff50f22c69afa4f147bc31ada1e2211ce11b76247c83bcdb85b3cd5f050a8d946d505abf30f94f3b5c8bf64"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYRES32=r4, @ANYRES16=r5], 0x0, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 2.444049538s ago: executing program 1 (id=1955): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x812) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800000000000000000400", [0x0, 0x2000000000001]}}) 2.18991394s ago: executing program 1 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f0005000000080026000816"], 0x40}}, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) syz_usb_disconnect(r3) 1.995480424s ago: executing program 2 (id=1957): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0xfff, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x7ffffffe) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000110}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000c0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x4, 0x3, @vifc_lcl_addr=@private=0xa010100, @local}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x801}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r8, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=@xfs={0x1c, 0x81, {0x5, 0x1000, 0xc, 0xfffffffc}}, &(0x7f0000001500), 0x200) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 1.899975828s ago: executing program 3 (id=1958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x9, @vifc_lcl_addr=@remote, @rand_addr=0x64010100}, 0x10) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) (async) r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000280)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) io_uring_enter(r4, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000040)={0x1, 0x3c0, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x0, 0xfffffffffffffffa, 0x1, 0x8, 0x2, 0x2, 0x700000000000000, 0x3, 0xffff, 0xfffffffffffffffe, 0x9, 0x7fffffff, 0x5, 0x4, 0x9883, 0x5, 0x6, 0x8, 0x2, 0x4, 0x9, 0x2, 0x1fd, 0x8, 0x81, 0x7, 0x5, 0x5, 0x2, 0x101, 0x40, 0xfffffffffffffff8, 0x4, 0xa, 0x81, 0x0, 0x6, 0x8, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x8, 0x401, 0x5, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x8, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xa, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x7, 0x7fffffffffffffff, 0x87f, 0x7, 0x7, 0xae8f, 0x1e30fa4c, 0xa, 0xfffffffffffffffd, 0x4, 0x49f, 0x3, 0x7, 0xfffffffffffffad7, 0x4, 0xba00, 0x3, 0xd, 0xad65, 0x1, 0x100, 0x7, 0xe, 0x3, 0x1000000003ff, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffe, 0x32, 0x8, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x1, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x2, 0x2000000006, 0x8, 0x401, 0x7f, 0x4, 0x7, 0xea7, 0x1]}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000000c0)={0x29}) (async) close(r5) 912.20737ms ago: executing program 0 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000100)=0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000240)={&(0x7f0000000180)=""/132, 0x84}) r2 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r2, &(0x7f0000001500)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/223, 0xdf}], 0x2, &(0x7f0000001440)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xb0}, 0x42) read$FUSE(r6, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000001540), &(0x7f0000001580)='./file0\x00', 0x800000, &(0x7f0000003600)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r12}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@measure}, {@fowner_lt={'fowner<', r10}}, {@dont_hash}, {@measure}]}}, 0x0, 0x0, &(0x7f0000003700)="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") ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000003800)) sendto$inet(r8, &(0x7f0000003840)="364edb67991d4f5ebbe93f14b864c9a30c2f5306e0520f1c08429fb9ee52611e9a583c1a0999afadd38137a604b79b8a313b71590b99ffd9cb73d71a73c89355be1111fa47dee57cee4de907a40017881b9c179f9e5b9447f9aa3e952c1f569453d861a7a4b378032290855ed35b535483728b0c129a43b37ed863bd25ccdd47fd5b1507509e37106c76223109e0725ffb3bc3393d02316419adfa6c65c704813a6809b8cd6cd169e98b74109f8c", 0xae, 0x40, &(0x7f0000003900)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000003940), &(0x7f0000003980)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x3, &(0x7f00000039c0)) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003a00)='/proc/bus/input/devices\x00', 0x0, 0x0) r14 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800000, 0x30, r13, 0x8000000) syz_io_uring_setup(0x690e, &(0x7f0000003a40)={0x0, 0x68e2, 0x100, 0x1, 0x326, 0x0, r5}, &(0x7f0000003ac0), &(0x7f0000003b00)=0x0) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r17 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r14, r15, &(0x7f0000004c80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r16, 0x0, &(0x7f0000004c40)={&(0x7f0000003b40)=@in6={0xa, 0x4e22, 0x400, @private1, 0x1}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000003bc0)="beffbb5563cab217fd95245821fc6b77d83f9fb134d19c931886f1d18f7ba01960552a1ca2774e22efd711ef70e6132e8b", 0x31}, {&(0x7f0000003c00)="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", 0x1000}], 0x2}, 0x0, 0x40, 0x1, {0x0, r17}}) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000004d80)={'gretap0\x00', &(0x7f0000004d00)={'sit0\x00', 0x0, 0x20, 0x1, 0x6, 0x4, {{0xc, 0x4, 0x0, 0xc, 0x30, 0x65, 0x0, 0x1b, 0x4, 0x0, @local, @multicast1, {[@rr={0x7, 0xf, 0x2e, [@multicast1, @multicast2, @loopback]}, @lsrr={0x83, 0xb, 0x4f, [@loopback, @loopback]}, @end]}}}}}) sendmsg$nl_route(r18, &(0x7f0000004e80)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004e40)={&(0x7f0000004dc0)=@ipv6_getaddrlabel={0x44, 0x4a, 0x8, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8, 0x0, r19, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) write$yama_ptrace_scope(r8, &(0x7f0000004ec0)='1\x00', 0x2) connect$inet6(r16, &(0x7f0000004f00)={0xa, 0x4e21, 0x6, @private2, 0x80000000}, 0x1c) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000005000)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x9, 0x4, 0xff, 0xf}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004080}, 0x4000000) ioctl$SG_IO(r6, 0x2285, &(0x7f0000005180)={0x53, 0xfffffffffffffffe, 0x27, 0xff, @buffer={0x0, 0x3f, &(0x7f0000005040)=""/63}, &(0x7f0000005080)="71c42a105c5220e753a055e0fdfca27ce879a945f16427252c886c99f623ed5bb499674da8d7f8", &(0x7f00000050c0)=""/104, 0x6, 0x10000, 0x0, &(0x7f0000005140)}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000005200), 0x123000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) r20 = openat$audio(0xffffffffffffff9c, &(0x7f0000005240), 0x800, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r20, 0xc020662a, &(0x7f0000005280)={0x6, 0x6b, 0x1, 0x101, 0x5, 0x0, [{0x7, 0x7, 0x400, '\x00', 0x1001}, {0x6, 0x1, 0xdc4, '\x00', 0x2}, {0x9, 0x3, 0x1, '\x00', 0x4}, {0xcea, 0x10000, 0x6, '\x00', 0x1004}, {0x2b2, 0x2a22, 0x0, '\x00', 0x881}]}) 852.468626ms ago: executing program 5 (id=1960): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) (async) rt_sigsuspend(0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r1 = socket$kcm(0xa, 0x2, 0x0) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x18, 0x40, 0x107, 0xfffffffc, 0x10000, {0xfe, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async, rerun: 64) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (rerun: 64) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0x85}], 0x1, 0xa3, 0x7400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0xe0, 0x13, 0x29, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x880}, [@IFLA_MAP={0x24, 0xe, {0x1, 0xe, 0x1, 0xd67a, 0xbd, 0x7}}, @IFLA_AF_SPEC={0x94, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}, @AF_INET6={0x84, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa0}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4081}, 0x4000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) (async) fcntl$setsig(r6, 0xa, 0x12) (async) dup2(r6, r7) (async) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "e4a253fb"}]}}, 0x0}, 0x0) 491.804216ms ago: executing program 0 (id=1961): r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000140)=""/112, &(0x7f0000000200)=0x70) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 365.696561ms ago: executing program 2 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00003b150007fffffffff10000000000", @ANYRES32=0x0, @ANYBLOB="0a00010000b401001c00128009000100626f6e64000000000c0002800500210004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 219.8704ms ago: executing program 2 (id=1963): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03000b000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) 219.467011ms ago: executing program 0 (id=1964): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc0}}], 0x1, 0x810) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r5, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) (async) shutdown(r5, 0x1) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000e, 0x204031, r5, 0xec776000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b503000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) 98.291039ms ago: executing program 1 (id=1965): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x4001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000e33000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000ac4000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) 76.470988ms ago: executing program 3 (id=1966): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x812) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800000000000000000500", [0x0, 0x2000000000001]}}) 1.724782ms ago: executing program 0 (id=1967): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000780)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x4, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0xc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x4, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffbfffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x120000000000, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="84010000100001000000000000000000fc020000000000000000000000000008000000000000000000000000000000000000ecdf000000000a00202000000000049d889f033b10f2645e8fd56d9a669262e8592fc723c9edd4859b1ae669d29e10e2f91409b5359763debba00abcd5ba0963c53507433ffb4686f4c65825c5c372bc37e2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000400)={{0x80}, 'port0\x00', 0xee, 0x1a1c17, 0x6, 0x0, 0x100000, 0xffffffff, 0x8}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r4, 0x5414, &(0x7f0000000040)) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000240)={0x6, 0x1}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x51, 0x0, @void}, 0x10) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc75700"}}, 0x48}}, 0x0) r7 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 0s ago: executing program 2 (id=1968): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020}, 0xfffffffffffffe49) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f000000e280)=ANY=[@ANYBLOB="00e909", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0xfffffffe, 0x4000010, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) fstat(r0, &(0x7f0000004ec0)) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id']) (async) read$FUSE(r6, &(0x7f00000102c0)={0x2020}, 0xfffffe5d) write$FUSE_INIT(r6, 0x0, 0x0) (async) syz_fuse_handle_req(r6, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691927694ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe45a40ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a582a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430fdfb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f76138ea0f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xd1, &(0x7f0000000580)={0x0, 0x0, 0x100, 0x0, 0x24c}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000240)=""/66, 0x42}], 0x2}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): vice number 118 using dummy_hcd [ 499.321766][T13040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.349885][ T5913] usb 4-1: device descriptor read/8, error -71 [ 499.553517][ T794] usb 2-1: 0:2 : does not exist [ 499.571330][T13044] loop2: detected capacity change from 0 to 7 [ 499.599724][ T6074] Dev loop2: unable to read RDB block 7 [ 499.608248][ T5913] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 499.616954][ T6074] loop2: AHDI p2 p3 [ 499.621143][ T6074] loop2: partition table partially beyond EOD, truncated [ 499.626050][ T794] usb 2-1: USB disconnect, device number 97 [ 499.629557][ T6074] loop2: p3 start 335544320 is beyond EOD, truncated [ 499.643203][T13044] Dev loop2: unable to read RDB block 7 [ 499.660892][T13044] loop2: AHDI p2 p3 [ 499.661983][ T5913] usb 4-1: device descriptor read/8, error -71 [ 499.682889][T13044] loop2: partition table partially beyond EOD, truncated [ 499.713827][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.733185][T13044] loop2: p3 start 335544320 is beyond EOD, truncated [ 499.777893][ T5913] usb usb4-port1: unable to enumerate USB device [ 500.157028][ T5913] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 500.311673][ T30] audit: type=1326 audit(1765648607.565:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13051 comm="syz.2.1595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd591d8f749 code=0x0 [ 500.356933][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 500.459701][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.470889][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.482092][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 500.511971][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.545211][ T5913] usb 1-1: config 0 descriptor?? [ 500.771851][ T30] audit: type=1326 audit(1765648607.905:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fbd8f749 code=0x7ffc0000 [ 500.805913][ T30] audit: type=1326 audit(1765648607.905:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fbd8f749 code=0x7ffc0000 [ 500.846991][ T30] audit: type=1326 audit(1765648607.905:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f85fbd8f749 code=0x7ffc0000 [ 500.873236][ T30] audit: type=1326 audit(1765648607.905:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fbd8f749 code=0x7ffc0000 [ 500.908754][T13060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 500.953206][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1597'. [ 501.308622][ T30] audit: type=1326 audit(1765648608.095:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85fbd8f749 code=0x7ffc0000 [ 501.517412][ T30] audit: type=1326 audit(1765648608.095:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fbd8f749 code=0x7ffc0000 [ 501.645114][ T5913] usbhid 1-1:0.0: can't add hid device: -71 [ 501.660956][ T30] audit: type=1326 audit(1765648608.095:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fbd8f749 code=0x7ffc0000 [ 501.661813][ T5913] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 501.860462][ T5913] usb 1-1: USB disconnect, device number 101 [ 501.959998][T13075] tipc: Enabled bearer , priority 0 [ 501.977037][ T30] audit: type=1326 audit(1765648608.635:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f85fbd8f749 code=0x7ffc0000 [ 502.017280][ T30] audit: type=1326 audit(1765648608.635:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85fbd8f749 code=0x7ffc0000 [ 502.058934][T13077] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1600'. [ 502.178535][T13075] tipc: Resetting bearer [ 502.209830][T13075] tipc: Enabled bearer , priority 10 [ 502.793821][T13073] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 502.837072][ T794] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 502.979595][ T891] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 503.006985][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 503.020604][ T794] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 503.037061][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.045407][ T794] usb 4-1: Product: syz [ 503.067048][ T794] usb 4-1: Manufacturer: syz [ 503.071953][ T794] usb 4-1: SerialNumber: syz [ 503.092422][ T794] usb 4-1: config 0 descriptor?? [ 503.137034][ T891] usb 2-1: Using ep0 maxpacket: 8 [ 503.150678][ T891] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 503.170852][ T891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.195210][ T891] usb 2-1: Product: syz [ 503.200532][ T891] usb 2-1: Manufacturer: syz [ 503.205542][ T891] usb 2-1: SerialNumber: syz [ 503.215198][ T891] usb 2-1: config 0 descriptor?? [ 503.227600][ T891] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 503.386650][ T794] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 503.431100][T13088] loop9: detected capacity change from 0 to 7 [ 503.439971][T13088] Dev loop9: unable to read RDB block 7 [ 503.445862][T13088] loop9: unable to read partition table [ 503.535741][T13088] loop9: partition table beyond EOD, truncated [ 503.553834][T13088] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 503.581682][ T794] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 503.618488][ T794] usb 4-1: USB disconnect, device number 120 [ 503.672501][ T891] gspca_vc032x: reg_r err -71 [ 503.711305][ T891] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 503.774408][ T891] usb 2-1: USB disconnect, device number 98 [ 504.080666][T13104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1608'. [ 504.624441][T13118] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1612'. [ 504.871401][T13122] netlink: 'syz.1.1614': attribute type 10 has an invalid length. [ 504.970167][ T5913] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 505.146665][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.157410][ T5913] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 505.166507][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.227485][ T5913] usb 3-1: config 0 descriptor?? [ 505.257265][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 505.622247][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 505.896000][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 505.925591][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.986249][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.088854][ T5913] pwc: recv_control_msg error -71 req 04 val 1000 [ 506.110502][ T5913] pwc: recv_control_msg error -71 req 04 val 1300 [ 506.126748][ T5913] pwc: recv_control_msg error -71 req 04 val 1400 [ 506.148097][ T5913] pwc: recv_control_msg error -71 req 02 val 2000 [ 506.170205][ T5913] pwc: recv_control_msg error -71 req 02 val 2100 [ 506.202485][ T5913] pwc: recv_control_msg error -71 req 04 val 1500 [ 506.214274][T13133] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 506.238434][ T5913] pwc: recv_control_msg error -71 req 02 val 2500 [ 506.260728][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 506.283117][T13161] loop4: detected capacity change from 0 to 8 [ 506.285088][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 506.311837][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 506.351402][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 506.385618][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 506.406622][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 506.429853][ T5913] pwc: Registered as video103. [ 506.454466][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 506.472069][T13161] Dev loop4: unable to read RDB block 8 [ 506.492370][ C1] invalid error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 506.502794][ C1] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 506.521439][T13161] loop4: unable to read partition table [ 506.558696][ T5913] usb 3-1: USB disconnect, device number 87 [ 506.572446][T13161] loop4: partition table beyond EOD, truncated [ 506.594322][T13161] loop_reread_partitions: partition scan of loop4 (Sj) failed (rc=-5) [ 506.822465][ T5199] Dev loop4: unable to read RDB block 8 [ 506.834085][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.846925][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.863205][ T5199] loop4: unable to read partition table [ 506.874113][ T5199] loop4: partition table beyond EOD, truncated [ 507.039990][T13177] loop2: detected capacity change from 0 to 7 [ 507.056453][ T5938] Dev loop2: unable to read RDB block 7 [ 507.068228][ T5938] loop2: AHDI p1 p2 [ 507.072244][ T5938] loop2: partition table partially beyond EOD, truncated [ 507.099006][ T5938] loop2: p1 start 1700753509 is beyond EOD, truncated [ 507.127174][T13177] Dev loop2: unable to read RDB block 7 [ 507.145037][T13177] loop2: AHDI p1 p2 [ 507.156313][T13177] loop2: partition table partially beyond EOD, truncated [ 507.176143][T13177] loop2: p1 start 1700753509 is beyond EOD, truncated [ 507.272121][T13185] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1630'. [ 507.378839][T13193] netlink: 'syz.4.1631': attribute type 12 has an invalid length. [ 507.417058][ T794] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 507.588362][ T794] usb 4-1: device descriptor read/64, error -71 [ 507.651901][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1634'. [ 507.661553][T13198] netlink: 'syz.2.1634': attribute type 7 has an invalid length. [ 507.670024][T13198] netlink: 'syz.2.1634': attribute type 8 has an invalid length. [ 507.678381][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 507.836999][ T794] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 507.986974][ T794] usb 4-1: device descriptor read/64, error -71 [ 508.108068][ T794] usb usb4-port1: attempt power cycle [ 508.367078][ T891] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 508.446964][ T794] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 508.477865][ T7016] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 508.486931][ T794] usb 4-1: device descriptor read/8, error -71 [ 508.527406][ T891] usb 2-1: Using ep0 maxpacket: 32 [ 508.536691][ T891] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 508.543854][T13218] erspan0: entered promiscuous mode [ 508.555680][ T891] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 508.557611][T13218] erspan0: left promiscuous mode [ 508.579304][ T891] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 508.592875][ T891] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 508.606548][ T891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 508.618614][ T891] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 508.629165][ T891] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 508.640879][ T891] usb 2-1: Product: syz [ 508.645121][ T891] usb 2-1: Manufacturer: syz [ 508.650186][ T891] usb 2-1: SerialNumber: syz [ 508.659552][ T891] usb 2-1: config 0 descriptor?? [ 508.665205][ T7016] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 508.678698][ T891] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 508.698670][ T7016] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 508.708981][ T7016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.719701][ T891] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 508.741603][ T7016] uvcvideo 5-1:250.0: Found UVC 0.00 device (046d:08c1) [ 508.759191][ T7016] uvcvideo 5-1:250.0: No valid video chain found. [ 508.766916][ T794] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 508.787816][ T794] usb 4-1: device descriptor read/8, error -71 [ 508.836611][T13222] loop2: detected capacity change from 0 to 7 [ 508.848424][T13222] Dev loop2: unable to read RDB block 7 [ 508.854091][T13222] loop2: AHDI p1 p2 [ 508.858672][T13222] loop2: partition table partially beyond EOD, truncated [ 508.867992][T13222] loop2: p1 start 1700753509 is beyond EOD, truncated [ 508.906581][ T794] usb usb4-port1: unable to enumerate USB device [ 509.187039][ T794] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 509.267869][ T891] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 509.350642][ T794] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 509.362520][ T794] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 509.371939][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.386039][ T794] usb 1-1: config 0 descriptor?? [ 509.393625][T13225] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 509.427040][ T891] usb 3-1: Using ep0 maxpacket: 32 [ 509.434246][ T891] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 509.443021][ T891] usb 3-1: config 0 has no interface number 0 [ 509.452385][ T891] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 509.461858][ T891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.470044][ T891] usb 3-1: Product: syz [ 509.474260][ T891] usb 3-1: Manufacturer: syz [ 509.479094][ T891] usb 3-1: SerialNumber: syz [ 509.486589][ T891] usb 3-1: config 0 descriptor?? [ 509.602487][ T794] ath6kl: Failed to submit usb control message: -71 [ 509.628641][ T794] ath6kl: unable to send the bmi data to the device: -71 [ 509.635871][ T794] ath6kl: Unable to send get target info: -71 [ 509.648875][ T794] ath6kl: Failed to init ath6kl core: -71 [ 509.656456][ T794] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 509.676282][ T794] usb 1-1: USB disconnect, device number 102 [ 509.695877][ T891] usb 3-1: ignoring: probably an ADSL modem [ 509.709375][ T5913] usb 5-1: USB disconnect, device number 102 [ 510.035181][ T1333] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.208248][ T1333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.430155][ T891] cxacru 3-1:0.36: usbatm_usb_probe: bind failed: -19! [ 510.458208][ T1333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.486482][ T891] usb 3-1: USB disconnect, device number 88 [ 511.112983][ T5913] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 511.165085][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 511.177685][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 511.192555][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 511.210162][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 511.218610][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 511.294596][ T5913] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 511.303257][ T5913] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 511.311810][ T5913] usb 1-1: config 0 has no interface number 0 [ 511.318245][ T5913] usb 1-1: config 0 has no interface number 1 [ 511.324404][ T5913] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 511.336635][ T5913] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 511.351037][ T5913] usb 1-1: config 0 interface 255 has no altsetting 0 [ 511.362515][ T5913] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 511.388277][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.413591][ T5913] usb 1-1: Product: syz [ 511.454865][ T5913] usb 1-1: Manufacturer: syz [ 511.469332][ T1333] bridge_slave_0: left allmulticast mode [ 511.475091][ T1333] bridge_slave_0: left promiscuous mode [ 511.499479][ T5913] usb 1-1: SerialNumber: syz [ 511.525859][ T5913] usb 1-1: config 0 descriptor?? [ 511.557146][ T5913] usb 1-1: selecting invalid altsetting 0 [ 511.577318][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.578152][ T5913] usb 1-1: Could not set interface, error -22 [ 511.644753][ T891] usb 2-1: USB disconnect, device number 99 [ 511.807616][ T891] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 511.810123][T13245] ======================================================= [ 511.810123][T13245] WARNING: The mand mount option has been deprecated and [ 511.810123][T13245] and is ignored by this kernel. Remove the mand [ 511.810123][T13245] option from the mount to silence this warning. [ 511.810123][T13245] ======================================================= [ 512.079500][ T7016] usb 1-1: USB disconnect, device number 103 [ 512.187251][ T891] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 513.212851][T13288] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1655'. [ 513.307037][ T52] Bluetooth: hci4: command tx timeout [ 513.360403][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 513.816133][ T52] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 514.218659][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.233334][ T1333] bond0 (unregistering): Released all slaves [ 514.326986][ T5912] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 514.478724][ T1333] bond1 (unregistering): Released all slaves [ 514.487042][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 514.494643][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.511588][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 514.552092][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 514.687606][ T5912] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 514.698468][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.720736][ T5912] usb 3-1: Product: syz [ 514.747530][ T5912] usb 3-1: Manufacturer: syz [ 514.759047][ T1333] tipc: Left network mode [ 514.765914][ T5912] usb 3-1: SerialNumber: syz [ 514.794779][ T5912] usb 3-1: config 0 descriptor?? [ 515.043174][ T5912] pegasus_notetaker 3-1:0.0: packet size is too small (0) [ 515.097078][ T5912] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 515.153274][ T5912] usb 3-1: USB disconnect, device number 89 [ 515.327025][ T5913] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 515.387141][ T52] Bluetooth: hci4: command tx timeout [ 515.522476][ T891] usb 2-1: device descriptor read/64, error -71 [ 515.537191][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 515.548788][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 515.558598][ T5913] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 515.571363][ T5913] usb 1-1: config 0 has no interface number 0 [ 515.582098][ T5913] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 515.598911][ T5913] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 515.615690][ T5913] usb 1-1: config 0 interface 88 has no altsetting 0 [ 515.641425][ T5913] usb 1-1: string descriptor 0 read error: -22 [ 515.655690][ T5913] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 515.714076][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 515.777042][ T891] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 515.783315][ T5913] usb 1-1: config 0 descriptor?? [ 515.832492][ T5913] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input31 [ 515.874022][ T1333] hsr_slave_0: left promiscuous mode [ 515.912917][ T1333] hsr_slave_1: left promiscuous mode [ 515.929579][ T891] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 515.937632][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.939771][ T891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.960349][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.984823][ T6074] udevd[6074]: Error opening device "/dev/input/event4": Input/output error [ 515.994384][ T891] usb 2-1: config 0 has no interface number 0 [ 515.995067][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.023842][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.028747][ T891] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 516.049791][ T6074] udevd[6074]: Unable to EVIOCGABS device "/dev/input/event4" [ 516.070301][ T6074] udevd[6074]: Unable to EVIOCGABS device "/dev/input/event4" [ 516.076778][T13322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.086362][ T891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.102744][ T891] usb 2-1: Product: syz [ 516.108268][T13322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.118705][ T891] usb 2-1: Manufacturer: syz [ 516.123394][ T1333] veth1_macvtap: left promiscuous mode [ 516.133745][ T891] usb 2-1: SerialNumber: syz [ 516.139617][ T1333] veth0_macvtap: left promiscuous mode [ 516.168054][ T891] usb 2-1: config 0 descriptor?? [ 516.203531][ T891] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 516.404515][T13310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.438276][T13310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.039756][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 517.198309][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 517.467419][ T52] Bluetooth: hci4: command tx timeout [ 518.222422][ T5913] usb 2-1: USB disconnect, device number 101 [ 518.439062][ T5913] usb 1-1: USB disconnect, device number 104 [ 518.502806][T13254] chnl_net:caif_netlink_parms(): no params data found [ 518.590436][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.622437][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.657910][T13356] netlink: 'syz.1.1667': attribute type 4 has an invalid length. [ 518.966926][ T5949] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 519.157369][ T5949] usb 2-1: device descriptor read/64, error -71 [ 519.190056][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.203094][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.221305][T13254] bridge_slave_0: entered allmulticast mode [ 519.272627][T13254] bridge_slave_0: entered promiscuous mode [ 519.301894][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.340337][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.348109][ T794] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 519.375336][T13254] bridge_slave_1: entered allmulticast mode [ 519.406001][T13254] bridge_slave_1: entered promiscuous mode [ 519.417570][ T5949] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 519.454688][T13382] loop2: detected capacity change from 0 to 7 [ 519.474630][ T5938] Dev loop2: unable to read RDB block 7 [ 519.491059][ T5938] loop2: AHDI p1 p2 [ 519.501203][ T5938] loop2: partition table partially beyond EOD, truncated [ 519.513345][ T5938] loop2: p1 start 1700753509 is beyond EOD, truncated [ 519.530188][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.546984][ T52] Bluetooth: hci4: command tx timeout [ 519.555616][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.571750][ T794] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 519.583271][T13382] Dev loop2: unable to read RDB block 7 [ 519.588774][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.596978][ T5949] usb 2-1: device descriptor read/64, error -71 [ 519.602942][ T794] usb 3-1: config 0 descriptor?? [ 519.613884][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.625335][T13382] loop2: AHDI p1 p2 [ 519.638326][T13382] loop2: partition table partially beyond EOD, truncated [ 519.663759][T13382] loop2: p1 start 1700753509 is beyond EOD, truncated [ 519.737955][ T5949] usb usb2-port1: attempt power cycle [ 519.791528][T13254] team0: Port device team_slave_0 added [ 519.823000][T13254] team0: Port device team_slave_1 added [ 519.868388][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 519.928036][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 519.968138][ T794] usb 3-1: USB disconnect, device number 90 [ 520.216972][ T5949] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 520.247604][ T5949] usb 2-1: device descriptor read/8, error -71 [ 520.341057][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.350096][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.430879][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.470984][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.516940][ T794] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 520.516940][ T5949] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 520.579611][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.675742][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.688819][ T5949] usb 2-1: device descriptor read/8, error -71 [ 520.739642][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.779235][ T794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.808358][ T794] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.817393][ T5949] usb usb2-port1: unable to enumerate USB device [ 520.835378][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.858070][ T794] usb 3-1: config 0 descriptor?? [ 520.880834][T13254] hsr_slave_0: entered promiscuous mode [ 520.924075][T13254] hsr_slave_1: entered promiscuous mode [ 520.936140][T13254] debugfs: 'hsr0' already exists in 'hsr' [ 520.944579][T13254] Cannot create hsr debugfs directory [ 521.548164][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.198672][T13254] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 522.391283][T13254] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 522.544045][T13254] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 522.713353][T13254] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 523.347044][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 523.387289][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 523.487313][ T794] usb 3-1: USB disconnect, device number 91 [ 523.532789][T13254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.641742][T13254] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.692805][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.700033][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.774275][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.781462][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.243136][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 524.250740][T13254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.628981][T13254] veth0_vlan: entered promiscuous mode [ 524.712432][T13254] veth1_vlan: entered promiscuous mode [ 524.879767][T13254] veth0_macvtap: entered promiscuous mode [ 524.983187][T13254] veth1_macvtap: entered promiscuous mode [ 525.065165][T13254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.121178][T13254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.156605][ T5913] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 525.234805][ T5941] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.275930][ T5941] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.304742][ T5941] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.316991][ T5912] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 525.336596][ T5941] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.365927][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 525.374798][ T5913] usb 2-1: not running at top speed; connect to a high speed hub [ 525.385794][ T5913] usb 2-1: config 1 has an invalid interface number: 94 but max is 0 [ 525.405475][ T5913] usb 2-1: config 1 has no interface number 0 [ 525.432502][ T5913] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=51.70 [ 525.462012][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.485036][ T5912] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.526443][ T5912] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.541244][ T5913] usb 2-1: Product: syz [ 525.545580][ T5913] usb 2-1: Manufacturer: syz [ 525.566863][ T5913] usb 2-1: SerialNumber: syz [ 525.588952][ T5912] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 525.617042][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.689431][ T5941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.726600][ T5941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.888894][ T5912] usb 4-1: usb_control_msg returned -32 [ 525.894869][ T5912] usbtmc 4-1:16.0: can't read capabilities [ 525.898596][ T6176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.988505][ T6176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.270678][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.304535][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.336434][T13483] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 526.388538][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.422749][T13487] netlink: 'syz.5.1647': attribute type 1 has an invalid length. [ 526.437806][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.447152][ T794] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 526.462201][ T5912] usb 4-1: USB disconnect, device number 125 [ 526.619364][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 526.630566][ T794] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 526.646900][ T794] usb 3-1: config 0 has no interface number 0 [ 526.664053][ T794] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 526.721622][ T794] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 526.808126][ T794] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 526.894862][ T794] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 526.948471][ T794] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 527.007027][ T794] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 527.068616][ T794] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 527.133521][ T794] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 527.227954][ T794] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.288926][ T794] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 527.310533][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.343278][ T794] usb 3-1: Product: syz [ 527.347815][ T794] usb 3-1: Manufacturer: syz [ 527.355451][ T794] usb 3-1: SerialNumber: syz [ 527.379471][ T794] usb 3-1: config 0 descriptor?? [ 527.397629][T13481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 527.430033][ T794] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 527.451970][ T794] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 527.637843][ T794] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 527.855810][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 527.903698][ T794] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 527.916978][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.933069][ T5913] usb 2-1: Invalid firmware size=18. [ 527.940253][ T794] usb 4-1: Product: syz [ 527.945654][ T794] usb 4-1: Manufacturer: syz [ 527.952504][T13506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.964441][ T794] usb 4-1: SerialNumber: syz [ 527.977805][ T5913] usb 2-1: USB disconnect, device number 106 [ 528.057775][ T794] usb 4-1: config 0 descriptor?? [ 528.078506][T13506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.272112][ T794] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 529.339962][T13498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.348948][T13498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.362639][ T794] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 529.437414][ T794] usb 4-1: USB disconnect, device number 126 [ 530.082094][ T5949] usb 3-1: USB disconnect, device number 92 [ 530.402539][T13529] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1696'. [ 530.621903][T13533] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1697'. [ 531.230853][ T912] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 531.407164][ T912] usb 2-1: Using ep0 maxpacket: 32 [ 531.434559][ T912] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.462447][ T912] usb 2-1: config 1 has an invalid descriptor of length 39, skipping remainder of the config [ 531.482997][ T912] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 531.507006][ T5949] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 531.523179][ T912] usb 2-1: language id specifier not provided by device, defaulting to English [ 531.566144][ T912] usb 2-1: New USB device found, idVendor=ffca, idProduct=a4a8, bcdDevice= 0.40 [ 531.628408][ T912] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 531.646884][ T912] usb 2-1: Manufacturer: 得㇩ឈ謆⿢ [ 531.660739][ T912] usb 2-1: SerialNumber: syz [ 531.687481][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 531.695097][ T5949] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 531.710725][ T5949] usb 3-1: config 0 has no interface number 0 [ 531.732401][ T5949] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 531.984870][ T5949] usb 3-1: config 0 interface 196 has no altsetting 0 [ 532.146761][ T912] usb 2-1: USB disconnect, device number 107 [ 532.241829][ T5949] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 532.304091][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.340650][ T5949] usb 3-1: Product: syz [ 532.369620][ T5949] usb 3-1: Manufacturer: syz [ 532.374294][ T5949] usb 3-1: SerialNumber: syz [ 532.456294][ T5949] usb 3-1: config 0 descriptor?? [ 532.478321][T13540] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 532.987628][ T891] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 533.103663][ T5949] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 533.147042][ T891] usb 2-1: Using ep0 maxpacket: 8 [ 533.161939][ T891] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 533.187047][ T891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.201746][ T891] usb 2-1: Product: syz [ 533.211887][ T891] usb 2-1: Manufacturer: syz [ 533.222726][ T891] usb 2-1: SerialNumber: syz [ 533.233110][ T5949] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 533.250840][ T891] usb 2-1: config 0 descriptor?? [ 533.282193][ T891] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 533.809747][T13566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.939770][T13566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.999550][ T891] gspca_sonixj: reg_w1 err -110 [ 534.054361][ T891] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 534.237291][ T7016] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 534.427310][ T7016] usb 1-1: Using ep0 maxpacket: 32 [ 534.436618][ T7016] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 534.453475][ T7016] usb 1-1: config 0 has no interface number 0 [ 534.536558][ T7016] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 534.546044][ T7016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.592729][ T7016] usb 1-1: Product: syz [ 534.611818][ T7016] usb 1-1: Manufacturer: syz [ 534.639270][ T7016] usb 1-1: SerialNumber: syz [ 534.665992][ T7016] usb 1-1: config 0 descriptor?? [ 534.685167][ T7016] redrat3 1-1:0.83: Couldn't find all endpoints [ 535.371990][ T7016] usb 2-1: USB disconnect, device number 108 [ 535.480580][ T891] usb 3-1: USB disconnect, device number 93 [ 535.619607][ T891] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 536.031052][ T891] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 536.200992][ T891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.229976][ T891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.246911][ T5949] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 536.263640][ T891] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.294050][ T891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.314862][ T891] usb 3-1: Product: syz [ 536.329986][ T891] usb 3-1: Manufacturer: syz [ 536.352932][ T891] usb 3-1: SerialNumber: syz [ 536.420528][ T5949] usb 6-1: no configurations [ 536.425191][ T5949] usb 6-1: can't read configurations, error -22 [ 536.586990][ T5949] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 536.750735][ T5949] usb 6-1: no configurations [ 536.756033][ T5949] usb 6-1: can't read configurations, error -22 [ 536.765238][ T5949] usb usb6-port1: attempt power cycle [ 536.804175][ T891] usb 3-1: 0:2 : does not exist [ 536.816938][ T912] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 536.948152][ T912] usb 2-1: device descriptor read/64, error -71 [ 536.961329][ T24] usb 1-1: USB disconnect, device number 106 [ 536.977245][ T7016] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 537.117034][ T5949] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 537.148417][ T5949] usb 6-1: no configurations [ 537.153095][ T5949] usb 6-1: can't read configurations, error -22 [ 537.163595][ T7016] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 537.174462][ T7016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.184686][ T7016] usb 4-1: Product: syz [ 537.189263][ T7016] usb 4-1: Manufacturer: syz [ 537.194050][ T7016] usb 4-1: SerialNumber: syz [ 537.196913][ T912] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 537.205219][ T7016] usb 4-1: config 0 descriptor?? [ 537.224203][ T7016] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 537.245433][ T891] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 537.281577][ T891] usb 3-1: USB disconnect, device number 94 [ 537.296996][ T5949] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 537.318800][ T5949] usb 6-1: no configurations [ 537.323493][ T5949] usb 6-1: can't read configurations, error -22 [ 537.333962][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.341577][ T5949] usb usb6-port1: unable to enumerate USB device [ 537.357029][ T912] usb 2-1: device descriptor read/64, error -71 [ 537.477743][ T912] usb usb2-port1: attempt power cycle [ 537.946928][ T912] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 537.967501][ T912] usb 2-1: device descriptor read/8, error -71 [ 538.042984][T13654] syzkaller0: entered promiscuous mode [ 538.048708][T13654] syzkaller0: entered allmulticast mode [ 538.081521][T13654] tipc: Enabled bearer , priority 0 [ 538.129478][T13653] tipc: Resetting bearer [ 538.190539][T13653] tipc: Disabling bearer [ 538.207026][ T912] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 538.228125][ T912] usb 2-1: device descriptor read/8, error -71 [ 538.339145][ T912] usb usb2-port1: unable to enumerate USB device [ 538.868369][T13661] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 539.346054][ T7016] gspca_sunplus: reg_r err -71 [ 539.361550][ T7016] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 539.447600][ T7016] usb 4-1: USB disconnect, device number 127 [ 539.567064][ T912] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 539.753359][ T912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.785759][ T912] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.857918][ T912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.902967][T13694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1725'. [ 539.913888][ T912] usb 6-1: config 0 descriptor?? [ 539.921821][T13696] kvm: MONITOR instruction emulated as NOP! [ 540.367991][ T912] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x6 [ 540.388379][ T912] plantronics 0003:047F:FFFF.0020: item fetching failed at offset 14/15 [ 540.417164][ T912] plantronics 0003:047F:FFFF.0020: parse failed [ 540.461676][ T912] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22 [ 540.567139][T13711] kvm: Disabled LAPIC found during irq injection [ 540.900502][T13727] IPv6: Can't replace route, no match found [ 541.077829][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 541.096299][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 541.647106][ T7016] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 541.821951][ T7016] usb 2-1: unable to get BOS descriptor or descriptor too short [ 541.830922][ T7016] usb 2-1: not running at top speed; connect to a high speed hub [ 541.845294][ T7016] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 541.862970][ T7016] usb 2-1: config 0 has no interface number 0 [ 541.883130][ T7016] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 541.896376][ T7016] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 541.942357][ T7016] usb 2-1: config 0 interface 88 has no altsetting 0 [ 541.976142][T13753] binder: 13743:13753 ioctl 4018620d 0 returned -22 [ 541.983146][ T891] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 541.991891][T13753] binder: 13743:13753 ioctl c018620c 200000000380 returned -1 [ 542.558102][ T5937] usb 6-1: USB disconnect, device number 6 [ 542.576962][ T891] usb 1-1: Using ep0 maxpacket: 32 [ 542.618261][ T891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.644280][ T891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.675576][ T891] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 542.688191][ T7016] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 542.709343][ T7016] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 542.722134][ T891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.740784][ T7016] usb 2-1: Product: syz [ 542.758266][ T891] usb 1-1: config 0 descriptor?? [ 542.763322][ T7016] usb 2-1: Manufacturer: syz [ 542.779577][ T7016] usb 2-1: SerialNumber: syz [ 542.818360][ T7016] usb 2-1: config 0 descriptor?? [ 542.983143][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1737'. [ 543.136376][T13740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1734'. [ 543.266976][ T891] usbhid 1-1:0.0: can't add hid device: -71 [ 543.351628][ T891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 543.393071][ T891] usb 1-1: USB disconnect, device number 107 [ 544.062065][T13774] geneve2: entered promiscuous mode [ 544.118981][ T6003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.139027][ T6003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.224967][ T6003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.234825][ T6003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.856529][ T7016] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input32 [ 544.946540][ T7016] usb 2-1: USB disconnect, device number 113 [ 545.260217][ T6074] udevd[6074]: Error opening device "/dev/input/event4": No such file or directory [ 545.456969][ T6074] udevd[6074]: Unable to EVIOCGABS device "/dev/input/event4" [ 545.468299][ T6074] udevd[6074]: Unable to EVIOCGABS device "/dev/input/event4" [ 545.475815][ T6074] udevd[6074]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 545.546103][ T5199] udevd[5199]: worker [6074] terminated by signal 6 (Aborted) [ 545.567235][ T5199] udevd[5199]: worker [6074] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input32/event4' [ 545.696977][ T7016] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 545.819802][T13807] input: syz1 as /devices/virtual/input/input33 [ 545.865903][ T912] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 545.924760][ T7016] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 545.942647][ T7016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.046542][ T7016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.066719][ T7016] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.099715][ T7016] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.119312][ T7016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.140452][ T7016] usb 2-1: config 0 descriptor?? [ 546.146941][ T912] usb 3-1: Using ep0 maxpacket: 8 [ 546.158565][ T5949] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 546.170767][ T912] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 546.195410][ T912] usb 3-1: config 0 has an invalid interface number: 150 but max is 64 [ 546.229978][ T912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.240769][ T912] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 546.250314][ T912] usb 3-1: config 0 has no interface number 0 [ 546.256907][ T912] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.296128][ T912] usb 3-1: config 0 interface 150 has no altsetting 0 [ 546.307359][ T912] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 546.327232][ T5949] usb 1-1: device descriptor read/64, error -71 [ 546.421305][T13814] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1748'. [ 546.501264][T13815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.503128][ T7016] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 546.562150][T13815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.602926][ T912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.611586][ T5949] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 546.620187][ T7016] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 546.643459][ T912] usb 3-1: config 0 descriptor?? [ 546.732944][ T7016] usb 2-1: USB disconnect, device number 114 [ 546.857790][ T5949] usb 1-1: device descriptor read/64, error -71 [ 546.970852][T13817] fido_id[13817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 546.999018][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 546.999441][ T5949] usb usb1-port1: attempt power cycle [ 547.566891][ T5949] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 547.591766][ T5949] usb 1-1: device descriptor read/8, error -71 [ 547.826914][ T5949] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 547.867162][ T5949] usb 1-1: device descriptor read/8, error -71 [ 547.977225][ T5949] usb usb1-port1: unable to enumerate USB device [ 548.569402][ T7016] usb 3-1: USB disconnect, device number 95 [ 549.096969][ T7016] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 549.225580][T13852] dlm: no locking on control device [ 549.231888][T13852] netlink: 'syz.0.1758': attribute type 12 has an invalid length. [ 549.240234][T13852] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1758'. [ 549.302515][ T7016] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 549.319593][ T7016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.335391][ T7016] usb 3-1: Product: syz [ 549.351022][ T7016] usb 3-1: Manufacturer: syz [ 549.365250][ T7016] usb 3-1: SerialNumber: syz [ 549.384049][ T7016] usb 3-1: config 0 descriptor?? [ 549.401740][ T7016] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 549.411723][T13854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1760'. [ 549.456705][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 549.573266][T13858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1761'. [ 549.698561][ T7016] gspca_sunplus: reg_r err -71 [ 549.714119][ T7016] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 549.738355][ T7016] usb 3-1: USB disconnect, device number 96 [ 549.827629][ T794] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 549.896977][ T5949] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 549.996993][ T794] usb 1-1: Using ep0 maxpacket: 32 [ 550.006034][ T794] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 550.025794][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.057030][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 550.058242][ T794] usb 1-1: Product: syz [ 550.066904][ T5949] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 550.073670][ T794] usb 1-1: Manufacturer: syz [ 550.094294][ T794] usb 1-1: SerialNumber: syz [ 550.100689][ T5949] usb 6-1: config 179 has no interface number 0 [ 550.116916][ T794] usb 1-1: config 0 descriptor?? [ 550.129560][ T5949] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 550.193317][ T5949] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 550.213958][ T5949] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.225401][ T5949] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 550.242842][ T5949] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 550.257859][ T5949] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 550.268741][T13875] netlink: 'syz.2.1768': attribute type 23 has an invalid length. [ 550.297044][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.333763][ T912] usb 1-1: USB disconnect, device number 112 [ 550.365697][T13862] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 550.556968][ T5949] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 550.610806][ T912] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input36 [ 550.743671][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 550.768263][ T5949] usb 3-1: config 182 has an invalid interface number: 132 but max is 0 [ 550.778877][ T5949] usb 3-1: config 182 has no interface number 0 [ 550.785269][ T5949] usb 3-1: config 182 interface 132 has no altsetting 0 [ 550.802217][ T5949] usb 3-1: string descriptor 0 read error: -22 [ 550.823783][ T5949] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 550.834670][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.847045][ T912] usb 6-1: USB disconnect, device number 7 [ 550.847101][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 550.861208][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 551.098706][ T5949] usb 3-1: USB disconnect, device number 97 [ 551.201611][T13882] IPVS: length: 201 != 8 [ 551.484343][T13892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1771'. [ 551.648106][ T794] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 551.766952][ T7016] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 551.826193][ T794] usb 1-1: config 0 has no interfaces? [ 551.850590][ T794] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 551.865266][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.907562][ T891] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 551.977291][ T794] usb 1-1: Product: syz [ 552.007748][ T7016] usb 3-1: Using ep0 maxpacket: 8 [ 552.126951][ T891] usb 6-1: Using ep0 maxpacket: 8 [ 552.137651][ T794] usb 1-1: Manufacturer: syz [ 552.148571][ T7016] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 552.160732][ T891] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.178705][ T794] usb 1-1: SerialNumber: syz [ 552.186932][ T7016] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.197554][ T891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.210650][ T794] usb 1-1: config 0 descriptor?? [ 552.229448][ T891] usb 6-1: Product: syz [ 552.235902][ T7016] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 552.255992][ T891] usb 6-1: Manufacturer: syz [ 552.273584][ T891] usb 6-1: SerialNumber: syz [ 552.279830][ T7016] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.299543][ T891] usb 6-1: config 0 descriptor?? [ 552.356150][ T7016] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.430050][ T7016] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 552.461408][ T7016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.504075][T13896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.518655][T13896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.547422][ T891] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 552.642446][ T891] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 552.668300][ T891] usb 6-1: USB disconnect, device number 8 [ 552.771028][T13900] loop2: detected capacity change from 0 to 7 [ 552.789927][T13900] Dev loop2: unable to read RDB block 7 [ 552.809322][ T7016] usb 3-1: usb_control_msg returned -32 [ 552.816319][ T7016] usbtmc 3-1:16.0: can't read capabilities [ 552.823779][T13900] loop2: AHDI p1 p2 [ 552.834159][T13900] loop2: partition table partially beyond EOD, truncated [ 552.852531][T13900] loop2: p1 start 1700753509 is beyond EOD, truncated [ 552.919476][T13896] netlink: 'syz.0.1772': attribute type 5 has an invalid length. [ 553.429045][T13906] delete_channel: no stack [ 553.547804][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 554.346715][T13909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1777'. [ 554.422024][ T5949] usb 1-1: USB disconnect, device number 113 [ 554.876607][ T7016] usb 3-1: USB disconnect, device number 98 [ 555.079381][T13936] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.086756][T13936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.147539][T13936] 8021q: adding VLAN 0 to HW filter on device .` [ 555.177561][T13936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.329622][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 555.395045][T13936] vim2m vim2m.0: vidioc_s_fmt queue busy [ 555.528281][T13941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 555.580361][T13950] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1788'. [ 556.507109][ T7016] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 556.646951][ T7016] usb 4-1: device descriptor read/64, error -71 [ 556.847253][T13973] netlink: 'syz.1.1795': attribute type 21 has an invalid length. [ 556.855791][T13973] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1795'. [ 556.875541][T13973] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1795'. [ 556.901897][ T7016] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 556.902015][ T5949] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 557.037211][ T7016] usb 4-1: device descriptor read/64, error -71 [ 557.117113][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 557.145826][ T5949] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 557.156324][ T7016] usb usb4-port1: attempt power cycle [ 557.161920][ T5949] usb 1-1: config 0 has no interface number 0 [ 557.179857][ T5949] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 557.241844][ T5949] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 557.260906][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 557.351930][ T5949] usb 1-1: Manufacturer: syz [ 557.357261][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 557.361850][ T5949] usb 1-1: SerialNumber: syz [ 557.379685][ T5949] usb 1-1: config 0 descriptor?? [ 557.477326][ T794] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 557.542752][ T7016] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 557.568561][ T7016] usb 4-1: device descriptor read/8, error -71 [ 557.636963][ T794] usb 3-1: Using ep0 maxpacket: 16 [ 557.644284][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.680912][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.729388][ T794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 557.792928][ T5949] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 557.803442][ T794] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 557.837041][ T7016] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 557.840102][ T5949] usb 1-1: USB disconnect, device number 114 [ 557.857019][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.875690][ T7016] usb 4-1: device descriptor read/8, error -71 [ 557.978727][ T794] usb 3-1: config 0 descriptor?? [ 557.993913][ T7016] usb usb4-port1: unable to enumerate USB device [ 558.247837][T13989] macvtap0: entered promiscuous mode [ 558.263790][T13989] macvtap0: entered allmulticast mode [ 558.283870][T13989] veth1_vlan: entered allmulticast mode [ 558.324964][T13990] macvlan0: entered allmulticast mode [ 558.362770][T13990] macvlan0: left allmulticast mode [ 558.391367][T13983] random: crng reseeded on system resumption [ 558.609966][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 558.617045][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 558.639240][ T794] usb 3-1: USB disconnect, device number 99 [ 558.726945][ T5949] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 558.786984][ T24] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 558.912893][ T5949] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 558.923043][ T5949] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.935162][ T5949] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.946190][ T5949] usb 1-1: config 0 interface 0 has no altsetting 0 [ 558.957751][ T5949] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 558.969039][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.977730][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1803'. [ 558.979395][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 558.986671][T13998] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 559.001630][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.013123][ T5949] usb 1-1: config 0 descriptor?? [ 559.022379][ T24] usb 2-1: Product: syz [ 559.039824][ T24] usb 2-1: Manufacturer: syz [ 559.049266][ T24] usb 2-1: SerialNumber: syz [ 559.066374][ T24] usb 2-1: config 0 descriptor?? [ 559.277671][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 559.319156][T14002] loop2: detected capacity change from 0 to 7 [ 559.339290][T14002] Dev loop2: unable to read RDB block 7 [ 559.344938][T14002] loop2: AHDI p2 p3 [ 559.395867][T14002] loop2: partition table partially beyond EOD, truncated [ 559.431443][T14002] loop2: p3 start 335544320 is beyond EOD, truncated [ 559.443774][ T5949] usbhid 1-1:0.0: can't add hid device: -71 [ 559.458969][ T5949] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 559.496435][ T5949] usb 1-1: USB disconnect, device number 115 [ 559.660284][T14007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.912997][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.932565][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.997731][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 560.114379][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 560.401937][ T7016] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 560.479419][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 560.726946][ T7016] usb 6-1: Using ep0 maxpacket: 32 [ 560.746273][ T7016] usb 6-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 560.757377][ T7016] usb 6-1: too many endpoints for config 0 interface 0 altsetting 205: 250, using maximum allowed: 30 [ 560.768833][ T7016] usb 6-1: config 0 interface 0 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 560.782419][ T7016] usb 6-1: config 0 interface 0 has no altsetting 0 [ 560.817468][ T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 560.862866][ T7016] usb 6-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 560.926960][ T5949] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 560.965533][ T7016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.979236][ T24] usb 4-1: config 0 has no interface number 0 [ 560.982609][ T7016] usb 6-1: config 0 descriptor?? [ 561.001168][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 561.011317][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.019528][ T24] usb 4-1: Product: syz [ 561.041379][ T24] usb 4-1: Manufacturer: syz [ 561.046283][ T24] usb 4-1: SerialNumber: syz [ 561.072686][ T24] usb 4-1: config 0 descriptor?? [ 561.165312][ T5949] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 561.184453][ T5949] usb 1-1: config 0 has no interface number 0 [ 561.191108][ T5949] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 561.263153][ T5949] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 561.311328][T14025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.323888][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.379117][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.395298][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 561.407334][ T24] usb 4-1: Please update to version 0.2 or newer [ 561.426422][ T5949] usb 1-1: Product: syz [ 561.446653][ T5949] usb 1-1: Manufacturer: syz [ 561.479138][ T5949] usb 1-1: SerialNumber: syz [ 561.596084][ T24] usb 4-1: Firmware: build [ 561.608341][ T5949] usb 1-1: config 0 descriptor?? [ 561.631562][T14032] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 561.697219][ T912] usb 2-1: USB disconnect, device number 115 [ 561.744432][ T5949] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 46:45:11:7c:f1:b9 [ 562.074375][ T912] usb 4-1: USB disconnect, device number 6 [ 562.216991][ T794] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 562.371560][ T794] usb 2-1: device descriptor read/64, error -71 [ 562.626988][ T794] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 562.772925][T14062] fuse: Bad value for 'fd' [ 562.777821][ T794] usb 2-1: device descriptor read/64, error -71 [ 562.904623][ T794] usb usb2-port1: attempt power cycle [ 563.006096][T14065] loop2: detected capacity change from 0 to 7 [ 563.022530][T14065] Dev loop2: unable to read RDB block 7 [ 563.028854][T14065] loop2: AHDI p2 p3 [ 563.039737][T14065] loop2: partition table partially beyond EOD, truncated [ 563.087480][T14065] loop2: p3 start 335544320 is beyond EOD, truncated [ 563.267387][ T794] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 563.278011][ T7016] usb 6-1: string descriptor 0 read error: -71 [ 563.306836][ T7016] usb 6-1: USB disconnect, device number 9 [ 563.321192][ T794] usb 2-1: device descriptor read/8, error -71 [ 563.564740][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 563.564757][ T30] audit: type=1326 audit(1765648670.815:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 563.647008][ T794] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 563.676934][ T30] audit: type=1326 audit(1765648670.845:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 563.700349][ T794] usb 2-1: device descriptor read/8, error -71 [ 563.764216][ T30] audit: type=1326 audit(1765648670.895:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 563.807217][ T7016] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 563.815663][ T794] usb usb2-port1: unable to enumerate USB device [ 563.843387][ T30] audit: type=1326 audit(1765648670.895:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 563.871209][ T30] audit: type=1326 audit(1765648670.895:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 563.906135][ T30] audit: type=1326 audit(1765648670.895:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 563.947327][ T30] audit: type=1326 audit(1765648670.895:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 563.975192][ T30] audit: type=1326 audit(1765648670.895:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 564.008316][ T30] audit: type=1326 audit(1765648670.895:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 564.045206][ T7016] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.075908][ T7016] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 564.087012][ T30] audit: type=1326 audit(1765648670.895:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd591d8f749 code=0x7ffc0000 [ 564.135253][ T7016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 564.147554][ T7016] usb 6-1: Product: syz [ 564.151924][ T7016] usb 6-1: Manufacturer: syz [ 564.162755][ T7016] usb 6-1: SerialNumber: syz [ 564.183410][ T7016] usb 6-1: config 0 descriptor?? [ 564.199258][ T7016] ch341 6-1:0.0: ch341-uart converter detected [ 564.342231][ T5949] usb 1-1: USB disconnect, device number 116 [ 564.393668][ T5949] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 564.533207][ T7016] usb 6-1: failed to receive control message: -71 [ 564.548066][ T7016] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 564.578515][ T7016] usb 6-1: USB disconnect, device number 10 [ 564.600433][ T7016] ch341 6-1:0.0: device disconnected [ 564.927384][ T912] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 565.089557][ T912] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 565.098239][ T912] usb 3-1: config 0 has no interface number 0 [ 565.115165][ T912] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 565.132633][ T794] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 565.142788][ T912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.186352][ T912] usb 3-1: Product: syz [ 565.215891][T14106] FAULT_INJECTION: forcing a failure. [ 565.215891][T14106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.216867][ T912] usb 3-1: Manufacturer: syz [ 565.257404][ T912] usb 3-1: SerialNumber: syz [ 565.392622][T14106] CPU: 1 UID: 0 PID: 14106 Comm: syz.3.1826 Not tainted syzkaller #0 PREEMPT(full) [ 565.392653][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.392672][T14106] Call Trace: [ 565.392682][T14106] [ 565.392692][T14106] dump_stack_lvl+0x189/0x250 [ 565.392727][T14106] ? __pfx____ratelimit+0x10/0x10 [ 565.392759][T14106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.392786][T14106] ? __pfx__printk+0x10/0x10 [ 565.392819][T14106] ? __might_fault+0xb0/0x130 [ 565.392865][T14106] should_fail_ex+0x414/0x560 [ 565.392900][T14106] _copy_from_user+0x2d/0xb0 [ 565.392925][T14106] ___sys_sendmsg+0x158/0x2a0 [ 565.392952][T14106] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.392983][T14106] ? rcu_read_lock_any_held+0xb3/0x120 [ 565.393040][T14106] ? __fget_files+0x2a/0x420 [ 565.393068][T14106] ? __fget_files+0x3a0/0x420 [ 565.393105][T14106] __x64_sys_sendmsg+0x19b/0x260 [ 565.393131][T14106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.393163][T14106] ? __pfx_ksys_write+0x10/0x10 [ 565.393190][T14106] ? do_syscall_64+0xbe/0xf80 [ 565.393227][T14106] do_syscall_64+0xfa/0xf80 [ 565.393260][T14106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.393282][T14106] ? clear_bhb_loop+0x60/0xb0 [ 565.393317][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.393345][T14106] RIP: 0033:0x7f6a42f8f749 [ 565.393365][T14106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.393385][T14106] RSP: 002b:00007f6a43ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.393408][T14106] RAX: ffffffffffffffda RBX: 00007f6a431e5fa0 RCX: 00007f6a42f8f749 [ 565.393425][T14106] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 565.393439][T14106] RBP: 00007f6a43ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 565.393452][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.393464][T14106] R13: 00007f6a431e6038 R14: 00007f6a431e5fa0 R15: 00007f6a4330fa28 [ 565.393496][T14106] [ 565.406955][ T794] usb 1-1: Using ep0 maxpacket: 16 [ 565.614993][ T912] usb 3-1: config 0 descriptor?? [ 565.717900][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.729290][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.739474][ T794] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 565.747030][ T5913] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 565.776960][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.845851][ T794] usb 1-1: config 0 descriptor?? [ 565.913648][ T912] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 565.928253][ T912] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 565.939945][ T5913] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 565.949036][ T5913] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 565.962810][ T912] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 565.971237][ T5913] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 565.982976][ T912] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 565.994480][ T5913] usb 2-1: config 220 has no interface number 2 [ 566.002955][ T5913] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 566.018674][ T912] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 566.072696][ T912] usb 3-1: USB disconnect, device number 100 [ 566.082300][ T5913] usb 2-1: config 220 interface 0 has no altsetting 0 [ 566.124935][ T5913] usb 2-1: config 220 interface 76 has no altsetting 0 [ 566.139972][ T912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 566.159785][ T5913] usb 2-1: config 220 interface 1 has no altsetting 0 [ 566.226697][T14122] binder: BINDER_SET_CONTEXT_MGR already set [ 566.232928][T14122] binder: 14117:14122 ioctl 4018620d 2000000002c0 returned -16 [ 566.248679][ T912] keyspan 3-1:0.133: device disconnected [ 566.259981][ T5913] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 566.270831][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.282742][ T5913] usb 2-1: Product: syz [ 566.290100][ T5913] usb 2-1: Manufacturer: syz [ 566.295034][ T5913] usb 2-1: SerialNumber: syz [ 566.681444][T14126] fuse: blksize only supported for fuseblk [ 566.704537][T14127] fuse: blksize only supported for fuseblk [ 566.989719][T14130] loop2: detected capacity change from 0 to 7 [ 567.015435][ T5938] Dev loop2: unable to read RDB block 7 [ 567.035030][ T5938] loop2: AHDI p2 p3 [ 567.066417][ T5938] loop2: partition table partially beyond EOD, truncated [ 567.101197][ T5938] loop2: p3 start 335544320 is beyond EOD, truncated [ 567.156622][T14130] Dev loop2: unable to read RDB block 7 [ 567.179759][T14130] loop2: AHDI p2 p3 [ 567.196921][T14130] loop2: partition table partially beyond EOD, truncated [ 567.235356][T14130] loop2: p3 start 335544320 is beyond EOD, truncated [ 567.849319][T14140] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 567.905102][T14140] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 567.911788][T14140] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 568.000355][T14140] vhci_hcd vhci_hcd.0: Device attached [ 568.109173][T14138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.167279][T14138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.246941][ T891] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 568.275742][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.282332][ T7016] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 568.290210][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.460754][ T7016] usb 3-1: config index 0 descriptor too short (expected 2511, got 27) [ 568.527050][ T7016] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.564092][ T7016] usb 3-1: config 0 has no interfaces? [ 568.584476][ T7016] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 568.618074][ T7016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.670811][ T7016] usb 3-1: config 0 descriptor?? [ 568.901793][T14142] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 568.918973][ T912] usb 3-1: USB disconnect, device number 101 [ 568.929901][ T5959] vhci_hcd vhci_hcd.2: stop threads [ 568.993545][ T5959] vhci_hcd vhci_hcd.2: release socket [ 569.038246][ T5959] vhci_hcd vhci_hcd.2: disconnect device [ 569.133295][ T5913] usb 2-1: selecting invalid altsetting 0 [ 569.159618][ T5913] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 569.199970][ T5913] uvcvideo 2-1:220.0: No valid video chain found. [ 569.216951][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 569.259230][ T5913] usb 2-1: selecting invalid altsetting 0 [ 569.265067][ T5913] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 569.326958][ T5913] usb 2-1: USB disconnect, device number 120 [ 569.378166][T14161] input: syz0 as /devices/virtual/input/input38 [ 569.417176][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 569.438786][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 569.477023][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 569.535300][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.576482][ T24] usb 6-1: config 0 descriptor?? [ 569.618032][ T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input39 [ 569.803570][ T5184] bcm5974 6-1:0.0: could not read from device [ 569.863341][ T794] usbhid 1-1:0.0: can't add hid device: -71 [ 569.869180][ T5913] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 569.888739][ T5184] bcm5974 6-1:0.0: could not read from device [ 569.901586][ T794] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 569.909940][ T24] usb 6-1: USB disconnect, device number 11 [ 569.993712][ T794] usb 1-1: USB disconnect, device number 117 [ 570.044158][ T6070] udevd[6070]: Error opening device "/dev/input/event4": No such file or directory [ 570.079817][T14172] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1840'. [ 570.100420][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 570.117055][ T6070] udevd[6070]: Unable to EVIOCGABS device "/dev/input/event4" [ 570.137885][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 570.168291][ T6070] udevd[6070]: Unable to EVIOCGABS device "/dev/input/event4" [ 570.175962][ T6070] udevd[6070]: Unable to EVIOCGABS device "/dev/input/event4" [ 570.192700][ T5913] usb 2-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16 [ 570.220667][ T5913] usb 2-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023 [ 570.237056][ T6070] udevd[6070]: Unable to EVIOCGABS device "/dev/input/event4" [ 570.264245][ T5913] usb 2-1: config 1 interface 0 has no altsetting 0 [ 570.299601][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.333194][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.368029][ T5913] usb 2-1: Product: syz [ 570.372315][ T5913] usb 2-1: Manufacturer: syz [ 570.396837][ T5913] usb 2-1: SerialNumber: syz [ 570.429714][T14161] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 570.447269][T14161] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 570.502079][T14179] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 570.570612][T14179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 570.659161][T14190] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1842'. [ 571.827017][ T912] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 571.967096][ T912] usb 4-1: device descriptor read/64, error -71 [ 572.227158][ T912] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 572.477482][ T912] usb 4-1: device descriptor read/64, error -71 [ 572.591306][ T912] usb usb4-port1: attempt power cycle [ 572.941985][ T5913] usb 2-1: bad CDC descriptors [ 572.979688][ T5913] usb 2-1: USB disconnect, device number 121 [ 573.226958][ T912] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 573.267709][ T912] usb 4-1: device descriptor read/8, error -71 [ 573.407034][ T5937] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 573.503741][ T891] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 573.517429][ T912] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 573.596463][ T912] usb 4-1: device descriptor read/8, error -71 [ 573.656927][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 573.664776][ T5937] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 573.673586][ T5937] usb 3-1: config 0 has no interface number 0 [ 573.680443][ T5937] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 573.707335][ T912] usb usb4-port1: unable to enumerate USB device [ 573.714609][ T5937] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 573.753830][ T5937] usb 3-1: config 0 interface 41 has no altsetting 0 [ 573.782650][ T5937] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 573.792653][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.813433][ T5937] usb 3-1: Product: syz [ 573.823874][ T5937] usb 3-1: Manufacturer: syz [ 573.843122][ T5937] usb 3-1: SerialNumber: syz [ 573.871143][ T5937] usb 3-1: config 0 descriptor?? [ 573.892581][T14212] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 573.901241][T14212] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 574.120563][T14212] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 574.270486][ T5937] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 574.353029][ T5937] usb 3-1: USB disconnect, device number 102 [ 575.756648][T14269] netlink: 'syz.1.1859': attribute type 16 has an invalid length. [ 575.764862][T14269] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1859'. [ 576.362019][ T891] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 576.507308][ T891] usb 2-1: device descriptor read/64, error -71 [ 576.746995][ T891] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 576.757089][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 576.889683][ T891] usb 2-1: device descriptor read/64, error -71 [ 576.948565][ T24] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 576.972706][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 577.009148][ T891] usb usb2-port1: attempt power cycle [ 577.019224][ T5937] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 577.038429][ T24] usb 6-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 577.062718][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.125138][ T24] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 577.210126][ T5937] usb 3-1: config 0 has an invalid interface number: 139 but max is 0 [ 577.235973][ T5937] usb 3-1: config 0 has no interface number 0 [ 577.276054][ T5937] usb 3-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 577.305222][ T5937] usb 3-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 577.348742][ T5937] usb 3-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 577.390822][ T5937] usb 3-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 577.404888][ T891] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 577.436407][ T5937] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 577.449112][ T891] usb 2-1: device descriptor read/8, error -71 [ 577.460464][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.480080][ T5937] usb 3-1: Product: syz [ 577.483879][T14285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.493178][ T5937] usb 3-1: Manufacturer: syz [ 577.508094][ T5937] usb 3-1: SerialNumber: syz [ 577.520983][T14285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.532243][ T5937] usb 3-1: config 0 descriptor?? [ 577.544367][T14297] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 577.557550][T14297] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 577.602136][ T24] usb 6-1: USB disconnect, device number 12 [ 577.720729][ T891] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 577.828272][T14306] loop2: detected capacity change from 0 to 7 [ 577.858377][ T891] usb 2-1: device descriptor read/8, error -71 [ 577.875105][T14306] Dev loop2: unable to read RDB block 7 [ 577.889341][ T5937] mct_u232 3-1:0.139: MCT U232 converter detected [ 577.926753][T14306] loop2: AHDI p1 p2 [ 577.939783][ T5937] usb 3-1: MCT U232 converter now attached to ttyUSB0 [ 577.957776][T14306] loop2: partition table partially beyond EOD, truncated [ 577.967245][ T891] usb usb2-port1: unable to enumerate USB device [ 577.978425][T14306] loop2: p1 start 1700753509 is beyond EOD, truncated [ 577.994477][ T5937] usb 3-1: USB disconnect, device number 103 [ 578.017407][ T5937] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 578.067312][ T5937] mct_u232 3-1:0.139: device disconnected [ 578.322377][T14310] fuse: Bad value for 'fd' [ 578.623373][T14316] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1874'. [ 578.913989][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.972643][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.126977][ T5937] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 579.134771][ T891] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 579.277172][ T912] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 579.288657][ T5937] usb 2-1: config 0 has no interfaces? [ 579.298914][ T891] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.311094][ T5937] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 579.336237][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.348022][ T891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 579.363028][ T891] usb 3-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 579.377490][ T5937] usb 2-1: config 0 descriptor?? [ 579.393076][ T891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.415223][ T891] usb 3-1: config 0 descriptor?? [ 579.426969][ T912] usb 6-1: device descriptor read/64, error -71 [ 579.642795][ T891] usbhid 3-1:0.0: can't add hid device: -71 [ 579.657666][ T891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 579.667146][ T912] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 579.684213][ T891] usb 3-1: USB disconnect, device number 104 [ 579.706229][ T5913] usb 2-1: USB disconnect, device number 126 [ 579.836908][ T912] usb 6-1: device descriptor read/64, error -71 [ 579.957105][ T912] usb usb6-port1: attempt power cycle [ 580.157299][ T5913] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 580.297066][ T912] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 580.306937][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 580.314184][ T5913] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 580.326757][ T5913] usb 1-1: config 0 has no interface number 0 [ 580.327492][ T912] usb 6-1: device descriptor read/8, error -71 [ 580.340223][ T5913] usb 1-1: config 0 interface 89 has no altsetting 0 [ 580.367231][ T7016] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 580.378991][ T5913] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 580.409324][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.440625][ T5913] usb 1-1: Product: syz [ 580.444979][ T5913] usb 1-1: Manufacturer: syz [ 580.450130][ T5913] usb 1-1: SerialNumber: syz [ 580.518093][ T5913] usb 1-1: config 0 descriptor?? [ 580.528784][T14354] FAULT_INJECTION: forcing a failure. [ 580.528784][T14354] name failslab, interval 1, probability 0, space 0, times 0 [ 580.541919][T14354] CPU: 1 UID: 0 PID: 14354 Comm: syz.2.1885 Not tainted syzkaller #0 PREEMPT(full) [ 580.541941][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.541951][T14354] Call Trace: [ 580.541961][T14354] [ 580.541968][T14354] dump_stack_lvl+0x189/0x250 [ 580.541993][T14354] ? __pfx____ratelimit+0x10/0x10 [ 580.542015][T14354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.542035][T14354] ? __pfx__printk+0x10/0x10 [ 580.542060][T14354] ? __pfx_skb_network_protocol+0x10/0x10 [ 580.542084][T14354] should_fail_ex+0x414/0x560 [ 580.542116][T14354] should_failslab+0xa8/0x100 [ 580.542137][T14354] kmem_cache_alloc_noprof+0x88/0x710 [ 580.542162][T14354] ? skb_clone+0x212/0x3a0 [ 580.542178][T14354] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 580.542199][T14354] skb_clone+0x212/0x3a0 [ 580.542215][T14354] ? dev_queue_xmit_nit+0x268/0xad0 [ 580.542232][T14354] dev_queue_xmit_nit+0x29a/0xad0 [ 580.542247][T14354] ? dev_queue_xmit_nit+0x2d/0xad0 [ 580.542270][T14354] dev_hard_start_xmit+0x1c1/0x800 [ 580.542300][T14354] __dev_queue_xmit+0x1493/0x3140 [ 580.542318][T14354] ? ___sys_sendmsg+0x21f/0x2a0 [ 580.542339][T14354] ? __dev_queue_xmit+0x289/0x3140 [ 580.542368][T14354] ? __pfx___dev_queue_xmit+0x10/0x10 [ 580.542392][T14354] ? __copy_skb_header+0xa7/0x550 [ 580.542409][T14354] ? __asan_memcpy+0x40/0x70 [ 580.542423][T14354] ? __skb_clone+0x63/0x7a0 [ 580.542442][T14354] ? __skb_clone+0x483/0x7a0 [ 580.542464][T14354] ? skb_clone+0x246/0x3a0 [ 580.542483][T14354] __netlink_deliver_tap+0x5ad/0x850 [ 580.542510][T14354] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.542529][T14354] netlink_deliver_tap+0x19c/0x1b0 [ 580.542548][T14354] netlink_unicast+0x7fa/0x9e0 [ 580.542569][T14354] ? __pfx_netlink_unicast+0x10/0x10 [ 580.542586][T14354] ? netlink_sendmsg+0x642/0xb30 [ 580.542602][T14354] ? skb_put+0x11b/0x210 [ 580.542619][T14354] netlink_sendmsg+0x805/0xb30 [ 580.542644][T14354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.542664][T14354] ? aa_sock_msg_perm+0xf1/0x1b0 [ 580.542684][T14354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 580.542700][T14354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.542718][T14354] __sock_sendmsg+0x21c/0x270 [ 580.542741][T14354] ____sys_sendmsg+0x505/0x820 [ 580.542762][T14354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.542785][T14354] ? import_iovec+0x74/0xa0 [ 580.542804][T14354] ___sys_sendmsg+0x21f/0x2a0 [ 580.542822][T14354] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.542843][T14354] ? rcu_read_lock_any_held+0xb3/0x120 [ 580.542884][T14354] ? __fget_files+0x2a/0x420 [ 580.542904][T14354] ? __fget_files+0x3a0/0x420 [ 580.542931][T14354] __x64_sys_sendmsg+0x19b/0x260 [ 580.542950][T14354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.542973][T14354] ? __pfx_ksys_write+0x10/0x10 [ 580.542991][T14354] ? do_syscall_64+0xbe/0xf80 [ 580.543018][T14354] do_syscall_64+0xfa/0xf80 [ 580.543042][T14354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.543057][T14354] ? clear_bhb_loop+0x60/0xb0 [ 580.543076][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.543098][T14354] RIP: 0033:0x7fd591d8f749 [ 580.543114][T14354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.543128][T14354] RSP: 002b:00007fd58ffee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.543144][T14354] RAX: ffffffffffffffda RBX: 00007fd591fe5fa0 RCX: 00007fd591d8f749 [ 580.543157][T14354] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 580.543166][T14354] RBP: 00007fd58ffee090 R08: 0000000000000000 R09: 0000000000000000 [ 580.543176][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.543186][T14354] R13: 00007fd591fe6038 R14: 00007fd591fe5fa0 R15: 00007fd59210fa28 [ 580.543211][T14354] [ 580.556020][ T7016] usb 4-1: Using ep0 maxpacket: 16 [ 580.560729][ T5913] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 580.931705][ T912] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 580.941720][ T5913] em28xx 1-1:0.89: Video interface 89 found: bulk [ 580.967122][ T7016] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 580.976499][ T912] usb 6-1: device descriptor read/8, error -71 [ 581.038171][ T7016] usb 4-1: config 252 has no interface number 0 [ 581.071164][ T7016] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 581.087706][ T912] usb usb6-port1: unable to enumerate USB device [ 581.110609][ T7016] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 581.121319][ T7016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.129960][ T7016] usb 4-1: Product: syz [ 581.134327][ T7016] usb 4-1: Manufacturer: syz [ 581.146735][ T7016] usb 4-1: SerialNumber: syz [ 581.207295][ T7016] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 581.350245][ T5913] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 582.267408][ T3560] usb 4-1: Failed to submit usb control message: -110 [ 582.281534][ T3560] usb 4-1: unable to send the bmi data to the device: -110 [ 582.293116][ T3560] usb 4-1: unable to get target info from device [ 582.318615][ T3560] usb 4-1: could not get target info (-110) [ 582.381298][ T3560] usb 4-1: could not probe fw (-110) [ 582.487167][ T912] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 582.677260][ T912] usb 6-1: Using ep0 maxpacket: 32 [ 582.685202][ T912] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 582.696658][ T912] usb 6-1: config 0 has no interface number 0 [ 582.724181][ T912] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 582.752697][ T912] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 582.770435][ T912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.806214][ T912] usb 6-1: Product: syz [ 582.832000][ T912] usb 6-1: Manufacturer: syz [ 582.877791][ T912] usb 6-1: SerialNumber: syz [ 582.914554][ T912] usb 6-1: config 0 descriptor?? [ 582.926370][T14380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1890'. [ 582.941802][ T912] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 582.950012][ T912] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 583.104054][ T7016] usb 4-1: USB disconnect, device number 11 [ 583.148839][ T5913] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 583.184171][ T5913] em28xx 1-1:0.89: board has no eeprom [ 583.208532][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 583.287061][ T5913] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 583.307043][ T912] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 583.322233][ T5913] em28xx 1-1:0.89: analog set to bulk mode. [ 583.328830][ T912] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 583.346907][ T24] em28xx 1-1:0.89: Registering V4L2 extension [ 583.541505][ T5913] usb 1-1: USB disconnect, device number 118 [ 583.558886][ T5913] em28xx 1-1:0.89: Disconnecting em28xx [ 583.566718][ T24] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 583.574264][ T24] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 583.600230][ T24] em28xx 1-1:0.89: No AC97 audio processor [ 583.667850][ T912] usb 6-1: USB disconnect, device number 17 [ 583.701109][ T24] usb 1-1: Decoder not found [ 583.721417][ T24] em28xx 1-1:0.89: failed to create media graph [ 583.735889][ T24] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 583.759406][ T24] em28xx 1-1:0.89: Registering snapshot button... [ 583.797823][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input41 [ 583.848041][ T24] em28xx 1-1:0.89: Remote control support is not available for this card. [ 583.881825][ T5913] em28xx 1-1:0.89: Closing input extension [ 583.889994][ T5913] em28xx 1-1:0.89: Deregistering snapshot button [ 583.969896][ T5913] em28xx 1-1:0.89: Freeing device [ 584.478244][T14419] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1903'. [ 584.588823][ T7016] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 584.626502][T14425] xt_hashlimit: size too large, truncated to 1048576 [ 584.758473][ T7016] usb 6-1: not running at top speed; connect to a high speed hub [ 584.908909][ T7016] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.944411][ T7016] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.982256][ T7016] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.216921][ T7016] usb 6-1: config 1 interface 0 has no altsetting 0 [ 585.304712][ T7016] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.40 [ 585.324676][ T7016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.351430][ T7016] usb 6-1: Product: syz [ 585.442574][ T7016] usb 6-1: Manufacturer: syz [ 585.453228][ T7016] usb 6-1: SerialNumber: syz [ 586.359598][ T7016] usbhid 6-1:1.0: can't add hid device: -32 [ 586.367009][ T7016] usbhid 6-1:1.0: probe with driver usbhid failed with error -32 [ 587.007037][ T912] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 587.197125][ T912] usb 2-1: Using ep0 maxpacket: 32 [ 587.204913][ T912] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 587.214750][ T912] usb 2-1: config 0 has no interface number 0 [ 587.221578][ T912] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 587.246605][ T912] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 587.257031][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.275133][ T912] usb 2-1: Product: syz [ 587.296903][ T912] usb 2-1: Manufacturer: syz [ 587.314901][ T912] usb 2-1: SerialNumber: syz [ 587.421811][ T912] usb 2-1: config 0 descriptor?? [ 587.442319][ T5913] usb 6-1: USB disconnect, device number 18 [ 587.473725][T14469] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 587.665845][T14479] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1915'. [ 587.842434][T14469] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 588.176908][ T891] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 588.227702][ T7016] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 588.348777][ T891] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 213, using maximum allowed: 30 [ 588.366975][ T891] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 213 [ 588.408592][ T891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 588.429054][ T891] usb 3-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 588.438955][ T891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.458432][ T891] usb 3-1: config 0 descriptor?? [ 588.546260][ T912] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 588.591792][ T912] asix 2-1:0.188: probe with driver asix failed with error -71 [ 588.621312][ T912] usb 2-1: USB disconnect, device number 127 [ 588.650529][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1918'. [ 588.684699][T14493] veth1_macvtap: left promiscuous mode [ 588.964694][T14497] gtp0: entered promiscuous mode [ 588.966291][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1921'. [ 588.969985][T14497] gtp0: entered allmulticast mode [ 589.317220][ T7016] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 589.475206][ T7016] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 589.485155][ T7016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.499239][ T7016] usb 4-1: Product: syz [ 589.504258][ T7016] usb 4-1: Manufacturer: syz [ 589.509199][ T891] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 589.518788][ T7016] usb 4-1: SerialNumber: syz [ 589.530392][ T7016] usb 4-1: config 0 descriptor?? [ 589.546559][ T7016] gspca_main: sq930x-2.14.0 probing 2770:930c [ 589.680345][ T891] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 589.690003][ T891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.707321][ T891] usb 2-1: Product: syz [ 589.711931][ T891] usb 2-1: Manufacturer: syz [ 589.716628][ T891] usb 2-1: SerialNumber: syz [ 589.728175][ T891] usb 2-1: config 0 descriptor?? [ 589.806973][ T5937] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 589.942725][T14510] overlayfs: missing 'lowerdir' [ 589.956458][ T7016] gspca_sq930x: ucbus_write failed -71 [ 589.965224][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 589.973298][ T7016] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 590.009261][ T5937] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 590.025384][ T7016] usb 4-1: USB disconnect, device number 12 [ 590.038252][ T5937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.057700][ T5937] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 590.070594][ T5937] usb 1-1: config 1 has no interface number 1 [ 590.079359][ T5937] usb 1-1: config 1 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 590.092916][ T5937] usb 1-1: config 1 interface 4 has no altsetting 0 [ 590.106452][ T5937] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.117651][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.129288][ T5937] usb 1-1: Product: 썻䤋䮗ꇊ᤮‹꾺ᬗ췴몇䜢⁕ꜘ௽焝ಃ誹榁茠䃗뾣慗穑䖘âᝈন暈౵ᩱ潟 [ 590.145104][ T5937] usb 1-1: Manufacturer: ࠔ [ 590.150921][ T5937] usb 1-1: SerialNumber: syz [ 590.250614][T14516] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1927'. [ 590.335930][T14518] bridge1: entered promiscuous mode [ 590.371886][T14514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.381113][T14514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.399473][ T5937] usb 1-1: 0:2 : does not exist [ 590.411350][T14519] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 590.440107][ T5937] usb 1-1: USB disconnect, device number 119 [ 590.489596][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.835331][ T891] usb 2-1: Firmware version (0.0) predates our first public release. [ 590.851027][ T891] usb 2-1: Please update to version 0.2 or newer [ 590.879017][ T7016] usb 3-1: USB disconnect, device number 105 [ 590.885892][ T24] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 590.918399][ T891] usb 2-1: USB disconnect, device number 2 [ 591.049059][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 591.058595][ T24] usb 4-1: config 1 has no interface number 1 [ 591.067265][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 591.112458][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.139910][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.165715][ T24] usb 4-1: Product: syz [ 591.172091][ T24] usb 4-1: Manufacturer: syz [ 591.176759][ T24] usb 4-1: SerialNumber: syz [ 591.431958][ T24] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 591.474810][ T24] usb 4-1: USB disconnect, device number 13 [ 591.517616][ T912] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 591.526950][ T5949] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 591.528151][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.678021][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 591.690011][ T5949] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 591.706459][ T5949] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 591.720448][ T912] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 591.740257][ T912] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 591.750451][ T5949] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 591.767688][ T912] usb 1-1: config 0 has no interface number 0 [ 591.784423][ T912] usb 1-1: config 0 has no interface number 1 [ 591.792367][ T5949] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 591.805934][ T912] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 591.826961][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 591.833917][ T912] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 591.850736][ T5949] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 591.868692][ T5949] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 591.879192][ T912] usb 1-1: config 0 interface 255 has no altsetting 0 [ 591.886201][ T5949] usb 3-1: Product: syz [ 591.894976][ T912] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 591.906915][ T5949] usb 3-1: Manufacturer: syz [ 591.912243][ T5949] usb 3-1: SerialNumber: syz [ 591.917640][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.939137][ T5949] usb 3-1: config 0 descriptor?? [ 591.944415][ T912] usb 1-1: Product: syz [ 591.952872][ T912] usb 1-1: Manufacturer: syz [ 591.959832][ T5949] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 591.970327][ T912] usb 1-1: SerialNumber: syz [ 591.982033][ T912] usb 1-1: config 0 descriptor?? [ 591.992463][ T5949] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 592.010711][ T912] usb 1-1: selecting invalid altsetting 0 [ 592.060321][ T912] usb 1-1: Could not set interface, error -22 [ 592.320788][ T891] usb 1-1: USB disconnect, device number 120 [ 592.385128][T14564] FAULT_INJECTION: forcing a failure. [ 592.385128][T14564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.427034][T14564] CPU: 0 UID: 0 PID: 14564 Comm: syz.5.1937 Not tainted syzkaller #0 PREEMPT(full) [ 592.427067][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.427086][T14564] Call Trace: [ 592.427095][T14564] [ 592.427106][T14564] dump_stack_lvl+0x189/0x250 [ 592.427140][T14564] ? __pfx____ratelimit+0x10/0x10 [ 592.427179][T14564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.427206][T14564] ? __pfx__printk+0x10/0x10 [ 592.427244][T14564] ? __might_fault+0xb0/0x130 [ 592.427290][T14564] should_fail_ex+0x414/0x560 [ 592.427333][T14564] _copy_from_user+0x2d/0xb0 [ 592.427358][T14564] ___sys_sendmsg+0x158/0x2a0 [ 592.427385][T14564] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.427414][T14564] ? rcu_read_lock_any_held+0xb3/0x120 [ 592.427470][T14564] ? __fget_files+0x2a/0x420 [ 592.427498][T14564] ? __fget_files+0x3a0/0x420 [ 592.427538][T14564] __x64_sys_sendmsg+0x19b/0x260 [ 592.427565][T14564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.427599][T14564] ? __pfx_ksys_write+0x10/0x10 [ 592.427625][T14564] ? do_syscall_64+0xbe/0xf80 [ 592.427661][T14564] do_syscall_64+0xfa/0xf80 [ 592.427695][T14564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.427717][T14564] ? clear_bhb_loop+0x60/0xb0 [ 592.427743][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.427764][T14564] RIP: 0033:0x7fd06b18f749 [ 592.427784][T14564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.427803][T14564] RSP: 002b:00007fd0693f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.427827][T14564] RAX: ffffffffffffffda RBX: 00007fd06b3e5fa0 RCX: 00007fd06b18f749 [ 592.427845][T14564] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 592.427859][T14564] RBP: 00007fd0693f6090 R08: 0000000000000000 R09: 0000000000000000 [ 592.427873][T14564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.427887][T14564] R13: 00007fd06b3e6038 R14: 00007fd06b3e5fa0 R15: 00007fd06b50fa28 [ 592.427921][T14564] [ 593.510138][ T912] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 593.555136][T14595] bridge0: port 3(macsec0) entered blocking state [ 593.564575][T14595] bridge0: port 3(macsec0) entered disabled state [ 593.590573][T14595] macsec0: entered allmulticast mode [ 593.614455][T14595] macsec0: entered promiscuous mode [ 593.654396][T14595] pimreg: tun_chr_ioctl cmd 2148553947 [ 593.697224][ T912] usb 6-1: Using ep0 maxpacket: 8 [ 593.704380][ T912] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 593.714387][ T912] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 593.737259][ T912] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 593.753809][ T912] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 593.788433][ T912] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 593.806712][ T912] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 593.817129][ T912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.907048][ T7016] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 594.032181][ T912] usb 6-1: usb_control_msg returned -32 [ 594.038386][ T912] usbtmc 6-1:16.0: can't read capabilities [ 594.058860][ T7016] usb 4-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 594.069511][ T7016] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.088337][ T7016] usb 4-1: New USB device found, idVendor=6ea2, idProduct=7557, bcdDevice=1b.87 [ 594.097920][ T7016] usb 4-1: New USB device strings: Mfr=223, Product=143, SerialNumber=0 [ 594.107169][ T7016] usb 4-1: Product: syz [ 594.111478][ T7016] usb 4-1: Manufacturer: syz [ 594.119875][ T7016] usb 4-1: config 0 descriptor?? [ 594.136994][ T891] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 594.268737][ T891] usb 2-1: device descriptor read/64, error -71 [ 594.381372][T14596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.392825][T14596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.467486][ T912] usb 6-1: USB disconnect, device number 20 [ 594.482104][ T5949] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 594.508874][ T891] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 594.634720][T14608] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1949'. [ 594.668149][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 594.669455][ T891] usb 2-1: device descriptor read/64, error -71 [ 594.686676][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.719935][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.743372][ T5949] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 594.753469][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.764771][ T5949] usb 1-1: config 0 descriptor?? [ 594.789175][ T891] usb usb2-port1: attempt power cycle [ 595.006950][ T794] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 595.149276][ T891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 595.170441][ T794] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.182271][ T794] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.192834][ T891] usb 2-1: device descriptor read/8, error -71 [ 595.201448][ T794] usb 6-1: config 0 interface 0 has no altsetting 0 [ 595.209366][ T794] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 595.219361][ T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.228616][ T5949] savu 0003:1E7D:2D5A.0022: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 595.232167][ T794] usb 6-1: config 0 descriptor?? [ 595.400275][ T5949] usb 1-1: USB disconnect, device number 121 [ 595.448082][ T891] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 595.477700][ T891] usb 2-1: device descriptor read/8, error -71 [ 595.587412][ T891] usb usb2-port1: unable to enumerate USB device [ 595.667221][ T794] hid-steam 0003:28DE:1102.0023: item fetching failed at offset 4/5 [ 595.675977][ T794] hid-steam 0003:28DE:1102.0023: steam_probe:parse of hid interface failed [ 595.687017][ T794] hid-steam 0003:28DE:1102.0023: probe with driver hid-steam failed with error -22 [ 595.866208][ T794] usb 6-1: USB disconnect, device number 21 [ 595.992075][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1951'. [ 596.022399][T14613] syz_tun: entered allmulticast mode [ 596.033360][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 596.088371][T14613] syz_tun (unregistering): left allmulticast mode [ 596.445573][T14618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.457228][T14618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.476952][ T5913] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 596.497946][ T7016] usb 4-1: USB disconnect, device number 14 [ 596.627178][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 596.635017][ T5913] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 596.645098][ T5913] usb 1-1: config 0 has no interface number 0 [ 596.651721][ T5913] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 596.663154][ T5913] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 596.669338][T14622] xt_hashlimit: max too large, truncated to 1048576 [ 596.673725][ T5913] usb 1-1: config 0 interface 41 has no altsetting 0 [ 596.697214][ T912] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 596.707048][ T5913] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 596.716646][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.725620][ T5913] usb 1-1: Product: syz [ 596.732766][ T5913] usb 1-1: Manufacturer: syz [ 596.738808][ T5913] usb 1-1: SerialNumber: syz [ 596.739879][T14622] fuse: Unknown parameter '000000000000000000030x0000000000000008' [ 596.761574][ T5913] usb 1-1: config 0 descriptor?? [ 596.769935][T14616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 596.778256][T14616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 596.866936][ T912] usb 6-1: Using ep0 maxpacket: 16 [ 596.884183][ T912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.904422][ T912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 596.919218][ T912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 596.946996][ T912] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 596.967351][ T912] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.996534][ T912] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 597.028418][ T912] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 597.030472][T14624] loop2: detected capacity change from 0 to 7 [ 597.045682][ T912] usb 6-1: Manufacturer: syz [ 597.045744][T14624] Dev loop2: unable to read RDB block 7 [ 597.053858][T14616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 597.057115][T14624] loop2: AHDI p1 p2 [ 597.066342][T14616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 597.068882][T14624] loop2: partition table partially beyond EOD, truncated [ 597.077020][ T912] usb 6-1: config 0 descriptor?? [ 597.082739][T14624] loop2: p1 start 1700753509 is beyond EOD, truncated [ 597.232330][T14530] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 597.278940][ T24] usb 3-1: USB disconnect, device number 106 [ 597.296235][ T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 597.373653][T14628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.382940][T14628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.457046][ T912] rc_core: IR keymap rc-hauppauge not found [ 597.463031][ T912] Registered IR keymap rc-empty [ 597.474661][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 597.497159][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 597.528618][ T912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 597.547870][ T891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 597.550158][ T912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input44 [ 597.604655][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 597.647361][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 597.660376][T14637] pimreg: entered allmulticast mode [ 597.708337][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 597.783053][T14639] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 597.793265][ T5913] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 597.829324][ T5913] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 597.861209][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 597.883959][ T5913] usb 1-1: USB disconnect, device number 122 [ 597.890383][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 597.906897][ T891] usb 2-1: Using ep0 maxpacket: 16 [ 597.917713][ T891] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 597.918476][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 597.949237][ T891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.977012][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 597.986233][ T891] usb 2-1: Product: syz [ 597.995678][ T891] usb 2-1: Manufacturer: syz [ 598.000436][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 598.026152][ T891] usb 2-1: SerialNumber: syz [ 598.026200][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 598.167021][ T912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 598.209016][ T912] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 598.226857][ T912] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 598.272551][ T912] usb 6-1: USB disconnect, device number 22 [ 598.526247][ T891] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.603210][T14642] fuse: Bad value for 'fd' [ 598.650743][ T891] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 598.695499][ T891] usb 2-1: USB disconnect, device number 7 [ 598.718531][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.002520][T14649] usb usb8: usbfs: process 14649 (syz.0.1961) did not claim interface 0 before use [ 599.448250][T14663] loop2: detected capacity change from 0 to 7 [ 599.465480][T14663] Dev loop2: unable to read RDB block 7 [ 599.470132][T14667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 599.478460][T14667] IPv6: NLM_F_CREATE should be set when creating new route [ 599.485716][T14667] IPv6: NLM_F_CREATE should be set when creating new route [ 599.493422][T14663] loop2: AHDI p1 p2 [ 599.498759][T14663] loop2: partition table partially beyond EOD, truncated [ 599.511199][T14667] ------------[ cut here ]------------ [ 599.516750][T14667] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xed8/0x1080, CPU#0: syz.2.1968/14667 [ 599.529644][T14667] Modules linked in: [ 599.533964][T14667] CPU: 0 UID: 0 PID: 14667 Comm: syz.2.1968 Not tainted syzkaller #0 PREEMPT(full) [ 599.543507][T14667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.554185][T14667] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 599.560303][T14667] Code: fa be 02 00 00 00 eb 0a e8 85 6c d7 fa be 01 00 00 00 4c 89 f7 e8 38 6c a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 69 6c d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 599.580117][T14667] RSP: 0018:ffffc900000e6ee8 EFLAGS: 00010293 [ 599.586232][T14667] RAX: ffffffff86ea4447 RBX: 0000000000000002 RCX: ffff88802fe19e80 [ 599.594383][T14667] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 599.603016][T14667] RBP: dffffc0000000000 R08: ffff88805806182f R09: 1ffff1100b00c305 [ 599.608202][T14663] loop2: p1 start 1700753509 is beyond EOD, [ 599.611555][T14667] R10: dffffc0000000000 R11: ffffed100b00c306 R12: ffff88807b347000 [ 599.625703][T14667] R13: ffffc900000e7060 R14: 0000000000000001 R15: ffffc900000e7078 [ 599.634654][T14667] FS: 00007fd58ffee6c0(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 599.643770][T14667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.650497][T14667] CR2: 00002000000c1038 CR3: 0000000063bec000 CR4: 00000000003526f0 [ 599.658610][T14667] Call Trace: [ 599.661921][T14667] [ 599.664885][T14667] notifier_call_chain+0x19d/0x3a0 [ 599.670110][T14667] ? atomic_notifier_call_chain+0x26/0x180 [ 599.675929][T14667] atomic_notifier_call_chain+0xda/0x180 [ 599.681630][T14667] call_fib_notifiers+0x31/0x60 [ 599.686748][T14667] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 599.693255][T14667] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 599.700365][T14667] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 599.705981][T14667] inet6_rtm_newroute+0x12f5/0x18c0 [ 599.711638][T14667] ? lockdep_hardirqs_on+0x98/0x140 [ 599.716933][T14667] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 599.722668][T14667] ? kmem_cache_free+0x197/0x620 [ 599.727867][T14667] ? nlmon_xmit+0xb0/0x100 [ 599.732329][T14667] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 599.738274][T14667] ? __dev_queue_xmit+0x289/0x3140 [ 599.743435][T14667] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 599.749057][T14667] rtnetlink_rcv_msg+0x7cf/0xb70 [ 599.754028][T14667] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 599.759217][T14667] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.764801][T14667] ? ref_tracker_free+0x63a/0x7d0 [ 599.769908][T14667] ? __asan_memcpy+0x40/0x70 [ 599.774506][T14667] ? __pfx_ref_tracker_free+0x10/0x10 [ 599.779972][T14667] netlink_rcv_skb+0x208/0x470 [ 599.784752][T14667] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.790305][T14667] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.795750][T14667] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.801065][T14667] netlink_unicast+0x82f/0x9e0 [ 599.806236][T14667] ? __pfx_netlink_unicast+0x10/0x10 [ 599.811838][T14667] ? netlink_sendmsg+0x642/0xb30 [ 599.816870][T14667] ? skb_put+0x11b/0x210 [ 599.821137][T14667] netlink_sendmsg+0x805/0xb30 [ 599.825912][T14667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.831287][T14667] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.836232][T14667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.841574][T14667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.846942][T14667] __sock_sendmsg+0x21c/0x270 [ 599.851655][T14667] ____sys_sendmsg+0x52d/0x820 [ 599.856425][T14667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.861797][T14667] ? import_iovec+0x74/0xa0 [ 599.866306][T14667] ___sys_sendmsg+0x21f/0x2a0 [ 599.871212][T14667] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.876448][T14667] ? __fget_files+0x2a/0x420 [ 599.881315][T14667] ? __fget_files+0x3a0/0x420 [ 599.886100][T14667] __sys_sendmmsg+0x227/0x430 [ 599.890888][T14667] ? __pfx___sys_sendmmsg+0x10/0x10 [ 599.896122][T14667] ? __pfx_do_futex+0x10/0x10 [ 599.900904][T14667] __x64_sys_sendmmsg+0xa0/0xc0 [ 599.905766][T14667] do_syscall_64+0xfa/0xf80 [ 599.910655][T14667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.916740][T14667] ? clear_bhb_loop+0x60/0xb0 [ 599.921819][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.927775][T14667] RIP: 0033:0x7fd591d8f749 [ 599.932196][T14667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.952180][T14667] RSP: 002b:00007fd58ffee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 599.960645][T14667] RAX: ffffffffffffffda RBX: 00007fd591fe5fa0 RCX: 00007fd591d8f749 [ 599.968826][T14667] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009 [ 599.976967][T14667] RBP: 00007fd591e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.985126][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.993188][T14667] R13: 00007fd591fe6038 R14: 00007fd591fe5fa0 R15: 00007fd59210fa28 [ 600.001230][T14667] [ 600.004339][T14667] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 600.011624][T14667] CPU: 0 UID: 0 PID: 14667 Comm: syz.2.1968 Not tainted syzkaller #0 PREEMPT(full) [ 600.021081][T14667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.031259][T14667] Call Trace: [ 600.034537][T14667] [ 600.037467][T14667] dump_stack_lvl+0x99/0x250 [ 600.042070][T14667] ? __asan_memcpy+0x40/0x70 [ 600.046744][T14667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.051962][T14667] ? __pfx__printk+0x10/0x10 [ 600.056571][T14667] vpanic+0x237/0x6d0 [ 600.060561][T14667] ? __pfx_vpanic+0x10/0x10 [ 600.065156][T14667] ? is_bpf_text_address+0x292/0x2b0 [ 600.070441][T14667] ? is_bpf_text_address+0x26/0x2b0 [ 600.075655][T14667] panic+0xb9/0xc0 [ 600.079440][T14667] ? __pfx_panic+0x10/0x10 [ 600.083882][T14667] __warn+0x317/0x4b0 [ 600.087894][T14667] ? nsim_fib_event_nb+0xed8/0x1080 [ 600.093114][T14667] ? nsim_fib_event_nb+0xed8/0x1080 [ 600.098336][T14667] __report_bug+0x288/0x500 [ 600.102902][T14667] ? inet6_rtm_newroute+0x12f5/0x18c0 [ 600.108298][T14667] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 600.113442][T14667] ? netlink_rcv_skb+0x208/0x470 [ 600.118401][T14667] ? nsim_fib_event_nb+0xed8/0x1080 [ 600.123615][T14667] ? __pfx___report_bug+0x10/0x10 [ 600.128658][T14667] ? nsim_fib_event_nb+0xed8/0x1080 [ 600.133862][T14667] report_bug+0x16a/0x220 [ 600.138196][T14667] ? nsim_fib_event_nb+0xed8/0x1080 [ 600.143483][T14667] ? nsim_fib_event_nb+0xeda/0x1080 [ 600.148684][T14667] handle_bug+0x98/0x200 [ 600.152931][T14667] exc_invalid_op+0x1a/0x50 [ 600.157436][T14667] asm_exc_invalid_op+0x1a/0x20 [ 600.162317][T14667] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 600.168216][T14667] Code: fa be 02 00 00 00 eb 0a e8 85 6c d7 fa be 01 00 00 00 4c 89 f7 e8 38 6c a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 69 6c d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 600.187831][T14667] RSP: 0018:ffffc900000e6ee8 EFLAGS: 00010293 [ 600.193910][T14667] RAX: ffffffff86ea4447 RBX: 0000000000000002 RCX: ffff88802fe19e80 [ 600.201884][T14667] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 600.209855][T14667] RBP: dffffc0000000000 R08: ffff88805806182f R09: 1ffff1100b00c305 [ 600.217839][T14667] R10: dffffc0000000000 R11: ffffed100b00c306 R12: ffff88807b347000 [ 600.225811][T14667] R13: ffffc900000e7060 R14: 0000000000000001 R15: ffffc900000e7078 [ 600.233804][T14667] ? nsim_fib_event_nb+0xed7/0x1080 [ 600.239020][T14667] ? nsim_fib_event_nb+0xed7/0x1080 [ 600.244231][T14667] notifier_call_chain+0x19d/0x3a0 [ 600.249351][T14667] ? atomic_notifier_call_chain+0x26/0x180 [ 600.255165][T14667] atomic_notifier_call_chain+0xda/0x180 [ 600.260803][T14667] call_fib_notifiers+0x31/0x60 [ 600.265663][T14667] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 600.272078][T14667] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 600.279104][T14667] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 600.284400][T14667] inet6_rtm_newroute+0x12f5/0x18c0 [ 600.289610][T14667] ? lockdep_hardirqs_on+0x98/0x140 [ 600.294828][T14667] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 600.300380][T14667] ? kmem_cache_free+0x197/0x620 [ 600.305325][T14667] ? nlmon_xmit+0xb0/0x100 [ 600.309759][T14667] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 600.315486][T14667] ? __dev_queue_xmit+0x289/0x3140 [ 600.320625][T14667] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 600.326186][T14667] rtnetlink_rcv_msg+0x7cf/0xb70 [ 600.331152][T14667] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 600.336299][T14667] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.341782][T14667] ? ref_tracker_free+0x63a/0x7d0 [ 600.346842][T14667] ? __asan_memcpy+0x40/0x70 [ 600.351446][T14667] ? __pfx_ref_tracker_free+0x10/0x10 [ 600.356842][T14667] netlink_rcv_skb+0x208/0x470 [ 600.361652][T14667] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.367156][T14667] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 600.372474][T14667] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.377748][T14667] netlink_unicast+0x82f/0x9e0 [ 600.382541][T14667] ? __pfx_netlink_unicast+0x10/0x10 [ 600.387852][T14667] ? netlink_sendmsg+0x642/0xb30 [ 600.392800][T14667] ? skb_put+0x11b/0x210 [ 600.397053][T14667] netlink_sendmsg+0x805/0xb30 [ 600.401838][T14667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.407148][T14667] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.412119][T14667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.417416][T14667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.422730][T14667] __sock_sendmsg+0x21c/0x270 [ 600.427423][T14667] ____sys_sendmsg+0x52d/0x820 [ 600.432197][T14667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.437493][T14667] ? import_iovec+0x74/0xa0 [ 600.442004][T14667] ___sys_sendmsg+0x21f/0x2a0 [ 600.446683][T14667] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.451907][T14667] ? __fget_files+0x2a/0x420 [ 600.456501][T14667] ? __fget_files+0x3a0/0x420 [ 600.461195][T14667] __sys_sendmmsg+0x227/0x430 [ 600.465905][T14667] ? __pfx___sys_sendmmsg+0x10/0x10 [ 600.471117][T14667] ? __pfx_do_futex+0x10/0x10 [ 600.475825][T14667] __x64_sys_sendmmsg+0xa0/0xc0 [ 600.480681][T14667] do_syscall_64+0xfa/0xf80 [ 600.485205][T14667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.491272][T14667] ? clear_bhb_loop+0x60/0xb0 [ 600.495951][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.501848][T14667] RIP: 0033:0x7fd591d8f749 [ 600.506261][T14667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.525957][T14667] RSP: 002b:00007fd58ffee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 600.534391][T14667] RAX: ffffffffffffffda RBX: 00007fd591fe5fa0 RCX: 00007fd591d8f749 [ 600.542385][T14667] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009 [ 600.550351][T14667] RBP: 00007fd591e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 600.558413][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.566389][T14667] R13: 00007fd591fe6038 R14: 00007fd591fe5fa0 R15: 00007fd59210fa28 [ 600.574383][T14667] [ 600.577756][T14667] Kernel Offset: disabled [ 600.582093][T14667] Rebooting in 86400 seconds..