last executing test programs: 2m47.347521942s ago: executing program 0 (id=1957): syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a481000102"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc20a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x40, 0x9, 0x1, {0x22, 0x388}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x3, 0x80}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x8, 0x7, 0x5, 0x10, 0x3}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xe0, "fc231a210ffe444711712b06c268529a"}]}, 0x6, [{0xcf, &(0x7f0000000540)=@string={0xcf, 0x3, "47610f7dc75c0635f873e85de4a39b32e217d97cfe6a6b05e868df15babcfde976741601e039694d73b403315d54cdfd9f7b236a3a11a03fe9f44683a8a9ce634c12342eb485986f1f0c93db5b4f9b5afa1ead7e56abc8d6d78e134cc13a65d471613521191cbf4885dc71c75917024a7c3c0a23de7965cc63c2ef24523ab9906f016e8ce53851b85a90c12fecbb5ed1ba1ba23d586d7f11409c533d4522cf999fd98ab3e49ac7815439efd86b98ccf7561b5462d34db7b8068430721cf01e9a07d327be0ea8098f3f36bd02cb"}}, {0x69, &(0x7f0000000440)=@string={0x69, 0x3, "7e83dfdd25b6a91177e046eb73ee960f59d356a0e429d393f26ff60e9cebf134ed0f13ab54390bf1ce7ef156c6d6b21e1bf4f186cb8ae448d8d9d80893247dd319d8f1c3343638e8b2b3def4e9a1d80990ef0bfd808439aaed4789d3ce13db6fb07d47ada2097c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc68}}, {0x8, &(0x7f00000004c0)=@string={0x8, 0x3, "d46d42da4879"}}, {0x74, &(0x7f0000000640)=@string={0x74, 0x3, "79681102413bcda7e874395f2325206d0d123561bc8527f2aca50c3fd15c854b7d1296b07a1ef5e95cc72bd57c66097bdd1170ab677f6fa6388fcdaaffdea4f35565b28e3c5ac847d814386b0f39b422505af66bcd0819ae5dfcb9ffcbe17fdbb382da0b47c7de8cb13651c1e9482de38d9a"}}, {0x7a, &(0x7f00000006c0)=@string={0x7a, 0x3, "94650407b13312d79490018dd9de76664f8b659d7e786c96ffd1ed77afabd80eb67d77bcae6229a178550cdb3638adf3c2419f9a6eb40ccc691d21cd702ec74e1c06476bcb74c438d3e78de149226feffc21782c0a633a0f5ebd937a67898dafc7784717dea3ce37e34f3548515870724374ea3fd0bc24bd"}}]}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "617e5edb37ef999f", "8b3de2aabceef22f419e59f3000000000400", '\x00!\x00S'}, 0x38) 2m44.069873948s ago: executing program 0 (id=1974): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x1c, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x5319) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x264, 0x30, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{0x1b0, 0x1, [@m_sample={0x98, 0x6, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0xff, 0x10000000, 0x8, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x3b, 0x6, "2ada9e9daa41ccd78e0df3bef1151e479d77ea77878bf74b0b651bd3b8d4aa4c7d115645f429be362ea1d3e825fbabe09437d81cd64220"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x114, 0xb, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0xd3, 0x6, "94120586c9dfedf44eb2365706bac24d029e40845b28c6e7cf55a7f7b7b1e32afab55f27c32f640e72406605eafe09e90aa65e02b66de58f6c37280f61d35a1a84af67a4b0d7d25de6310db393e11e57ac7ab8eec0d0d0261e1fdae5f1b9a085f0a08f557fe72a0219884e728f3d6b37f72313ee75add3b731d94814e6f654f702efc6920f80b20fb2fb1bcbbb3cc77b729a200911184a55620ed54e691d3ceb4f804337d5439a7f18f124d8738c2f7e2494c87018b584d7f59b4fc105eaa9ca95bd10ba1082aacd2a67dd57f23f37"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xa0, 0x1, [@m_vlan={0x9c, 0x2, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x467}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x5d, 0x6, "3458f30f5049eb38f03f941ba96810db0382ede237a27909377d6f383c68f1a5d6579d48d4223d749e56c18918c9188db1f8149da544b18f996897797ec708f3fc46e748eab75d7b39c7b41fe2506b52116f8187d10f69bef4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) preadv(0xffffffffffffffff, &(0x7f0000002380)=[{0x0}], 0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x2000400c) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x100003, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0xffffffe9, 0xe, 0x2}]}}}]}, 0x40}}, 0x40) 2m42.113592325s ago: executing program 0 (id=1980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800114000000040050015000c000000050001000600000005000500020000000500040000000000090002007379fa320000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 2m41.90539859s ago: executing program 0 (id=1983): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r2 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800290200000000000000000200000000000000001000ce00001000098008000000", @ANYRES32=0x0, @ANYBLOB="04004e80"], 0x2c}}, 0x84054) writev(r2, &(0x7f00000000c0)=[{&(0x7f000001b2c0)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000019200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f000001b240)={'\x00', 0x0, 0x800, 0x4, 0x3, 0xc361, r7}) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) io_uring_setup(0x6ab9, &(0x7f0000000000)={0x0, 0x4, 0x40, 0x3, 0x1b1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m37.482146641s ago: executing program 0 (id=1997): r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '+\xa2=\xd7'}, {}, {0x20, ']]#'}, {0x20, '+'}], 0xa, "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"}, 0x111) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0xfffffc01, 0x80000, r0}) write$P9_RVERSION(r1, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f00000001c0)=0xa51) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@int=0x8c, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000240)=0x7e47, 0x0, 0x4) syz_emit_ethernet(0x1e, &(0x7f0000000280)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@llc={0xf4, 0x1, "fc", "51fbf4a50f3b125f0276e0ac9f"}}}}}, &(0x7f00000002c0)={0x1, 0x3, [0x37d, 0x1daa0000, 0x2fd, 0xd49]}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x400, 0x2, 0x3, 0xbd, 0x2}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000380)={r2, 0x7, 0x2, [0x75, 0xa]}, &(0x7f00000003c0)=0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x0, 0x8, 0x10, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000002440)="7ad5f0e937b94c6331fe4cb93bb623cf68c724a26264b9f7b5cced0eeff7925090b780ff229b7eb8be7a1400f5beb57b31c69d40cb6c6f42e69fdb98032ecaa8d9d27bcfde38bff4", 0x0, 0x48) r9 = accept$unix(r1, &(0x7f00000024c0)=@abs, &(0x7f0000002540)=0x6e) r10 = inotify_init() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002680)={0x0, 0x0}, &(0x7f00000026c0)=0xc) statx(r1, &(0x7f0000004d40)='./file0\x00', 0x800, 0x2, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r9, &(0x7f0000006380)=[{{&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002600)="362124eeccd6600515a9adc953b596544814ec42a626727bfef206db4fb03c326adf406fc99b8a207622d057c54f65021bb091", 0x33}], 0x1, &(0x7f0000002700)=[@rights={{0x20, 0x1, 0x1, [r4, r4, r10, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, r11, r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x58, 0x8040}}, {{&(0x7f0000002780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002800)="09ecc1af503eece86bcba7e47f5dbfeb6ec5aec2f6ba501723957357e39ed8928c21fa493e4fc2662658d89f607968f7ee74a5701fd009560c09d51ac72833cc3007436412c976", 0x47}, {&(0x7f0000002880)="241743eec5d71a9cd83b6b5a0414ecd48a8dbe75cec66d00f16540f1ebb803a9006740731bd7511b30770179b7ffc5485aa6905b73efb986d311fff8cc0d7642472299d65d4e08db957be9800bfd16d9e9329a3e9dadee70", 0x58}, {&(0x7f0000002900)="ac3abe159bde09b1d256b2a866f6d39b8d7c00db12ec807d9af67bff692a7f6225bca4f5a96ce55958205034dac13e24c0228ae0d3dac6d83e4ac8c57d331c14a11f76420d4d4575b72f092e6dd1d49eaed7dcf4a064eb0be84ed8cdc557eab6847bfb73f72e7b0c062c87c1b15796bd709e0fb49f34860046f664a4bb481ce355c0ec1907a3341edcdf621ed2b3648eb807e6554440296a99ed5c2becfc733699a5fa3f43c3217ef8277f856bbd67347b919afbfdbdde0ef9bab3e509936a8bfc1184130f7009467defe2c762bfa6e172b788f9cf1670aa2712f770554afa1fda4c32cea3801a9ae0645be6d9aaddda3397", 0xf2}], 0x3}}, {{&(0x7f0000002a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000002ac0)="92fd5962e85f1a3116ca30b9b8aeab8ace152ad6c12389096b0c7d4956d0b5726634946adc9ca171e5297268010c5431dbd6c499c7eaebbefa3861f517e7da46d6f67769e7c4a3a5a5ad4ef918e774dac5aece6a341c14cc42b26b73b299937e63268a31dd75e92006170d824b7ca564ecd65a2d9cffd9e28f9b89539499abf9d1b9163424357d17faac15e30831d78086585bfeb08f1ade41b909effb2db827db357d5bf2344f741527b12a0b61a7cc944bbc3140", 0xb5}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000003b80)="727d3dbd7c48", 0x6}, {&(0x7f0000003bc0)="66b58bdb6d7b7292aa23fd20450d11f80de4711949b40e8aa00a5788b8936d739f852bb5fb647f1f6b4b3ba98da126725cb7c589f51b3551176f7545c6bb4f1061b08ee386b7bbf1e8adcc0396f1e3af9095f4e8d82306264df063675974f8d46960be4d4535c92daf9c04419247087ae76d92cd038455d4afa0fdbad72a8ab014da8fa3ebce49329f05245238aad8fe061ca95dd903ab7526a45ca925ab307bf0c5d7f7b844d0af91c69d0769579532a70d363da3c29c3ddb5992026367969a9d035176911b3003e9f3be74fd9fb20794ea751721680d5a4f51032d29cf9a0f9319766567df3856f54267ae8ebf06f7938cfd876e2fe98b10b26513268eb922a77a1e04192a299404e2de5d27420fc19944b7118ebaefab4a9c7e46361b8b864c5b1213ff65544d668a46fbb1ce01bcf75212c9af1b6b2feb7492aa7c1efc51bc54bad8ced78a3e858be1481f12f0667e1dc09861b35fe29b079640cb39d0ba37b461ebd596a42e0450d4e7477786326da819d0c53f807be656966c138e15cc9dcf586ec3971e0c2b0f6e4e66c86ca897a6fc0a2ee1c093c13c9d85268919e41969ecd2bdf5bc9a5e929aa9bf097e05198ab3206b29626bce13a12df68c65d10485b7d0587f417fd95d4603db86710e5b310bdc331b38c009b042406c6a275c3ab61fd988cc85dfa92afda0b18f638c1d330bdf8932c8c90aa0a94902e5b9db7f63de6ce814d1ea79c6ad59e82f71c2395499a70b47cb214b89a683849ef5b82f6dba0bd4cd703d652bb16e5819a837f04132337a7b014dd653fe112bf759d0e758603e8906e072dc50aedcbbc8d42fe2b99b7d44d54a087b43082a79fe50561b0af82d13d44509069928db4ddc31dd9ea9ceaaa0e32145395bd88c7ab5eb26b8995e1435455febc62200240e3900718462594d89f8e9367ca1553409b5d9ce59268982c2ead3a8408e4033760939a97a0d52c4f5c31b098bc1f9f31eb7dee866d7d8f95535571108d2543475fe074d3e9652ba54ae53f020d6181d2e663786e9ebd5f7aa7d4dd7c52e037beb45692e79e313f9dd3341ac8305d3234be20a5351f52ac3235ae25a90a7a813a1981860e9b6a1822f8551ac440bc810c07eca0fc68aca2bc23c4ab4140afda42337a58aa2a485db74e228c08f6859da3ef3283c5166a79913b2d1f78f3d028dd031efed5de4e0ce6d7391f1254164d46a75eb7ba900bdb4a76e694eea5aa02f6d89bfe99ad31b86e8027f90a684df5ef7d8637e39b1bccd10f43188d080578a5b7c71e278cb620e30a0744a6058cc7c430a8bbdc53f3b282513366ec15eea7446f91c57eb19bfeb3622cd6fb0d7ce0b6d46c4715edbf8275b9af21f5a5fa8416ba4ea4b917fa89d39d5b03d679f3e68c28acba41c9704165273bb7f008e257ee69a0ecf2ce5f603d86a110f1463b329040429829765b5d0ee99cea03f1eae922cc9e824de051596ed86c6b06d31d49fa0066a1ce5a087fa0170042a098a0fa397328d2640d166fd46fbfc5465574a690e4a93e040c27e0da7fac1d1ea8d090a69a27f466f5c4631ccdb7cdc9839860472890d6f503c51c8e33e5d0ab7d29b4d04dc3824d042a7c9fb738fb5d790de24cd6241ef5755dff0545940e5bc57f338789f1054c06be53749114107dcce918382b54d593bd909ec141113519b0f34884517396d7660bc80fd6f1bb2b1ca88637296503861e347d2bf7c2bd308d8b31ce89f24631a2c85990b7ddf2b7b33ec23f756caa2e4ef94dde398c1775f67c34ca2c2fb4f0775e48d0e3ba9372155c22e34bf6867f5b668b8eeac13519d54972a323eaea38fea2aab940aa35a623812cc4a0ab24efbb7fe6bcb4497cf82c1654a9ea754a9b2385bdba85561250121a83d09ceb8761115c9117a94d3c28268d235ae78780dc353bc5b41e9a645d7bdb055ed74f5d03c9a206a8cae350c83404d279d8beaf625f2be814d34eaa2167fe35ccbcfebfeaf9a6d6a054627a3bfd535015b73ece494dc3053d27d19d04e1531312ba0db61bb6705f8e91b09d144de5b61b471a2aa3e1ba7775fa5023893ffe39ffe3093e36d331564ee67bd060c52f9f6ed3280eb0b7d6a2fd53f0cd258e836aaf54c1e5d14d7fa958e3c05afabd3bd47a06938426e47fec47e57e322cf2be406572e7fc18e429e09a145aa6b950bca092850175480b4a19edabc1bc3296c600471f6b00c7e88118645872afdba0b7a7d71345643cea45538417b81ff6ec12a27d4694c7040b74ead4f63d461b326a08ed7189de55c0819a17b8ba3e7253692d73ad7fa10727924abf5108ae6638550dd1fd598d4d552310df0535ea23d58dfed2e07a7cf97acecc0f1525ff42c25237a8e59f52cd01698b465019a8dfa0a3f434cef532da712ead84d934e035d57209bd3aae74bbe0199d2d465f7a10bcae3ceebc2e0f3e690e48bb5bdb0ba0b2f4de87b3654632615fd11d77d1c9597eb76c7592f21d740eb6dbe891624c9294b20ae4a06a1dec9fa0f44a7d043e17e3c5640fdedc2741b773313d692a97e3104b3291e919bf5224bc29b79bdf75c351e6f3c9f79897938c887611a068f239cdc8949a49659ca3904211d0325b2a630a62e71d33bd73a32628138d003f3e167320dcdead0b953e625455de9f99bf6b77655d44e4080939cc5c1084e8fdd413bbc60c415e87b8afa9d25b9b5986aec1f76529ae8d123948cd4bdfd528722e164a3a37e9582b15a08f288951553786116d4622d4847d007419927134838c31df6cd3feebcc5fc1781636e2cc2f4d926c10dac0d0fc97b23e6df6b258009727be258f28059d5b906e5a41132bfa05fc63aee8b18b7663503fe937f0257ff21dc6bccedd23b4613b6b4713f403ba2e672de5a7c4b4f26675c46cff3f95fb1a288c0d99e0bb19f97008fc3ee93b8d9ca3d7e15a4b259b274092937afb00237c304ae2f155c6f206494f6a2f75da027d9e80bd2877e95c2f36ea23399b05909d55e79eeeecfda0c7e458131270090b425c30c4b3865fb6a914895842fe6a394643101817f7e25659501483e649cc4695207ad9bc1d2bbc5f4f9130c236b40df9625f799f3c4cf3e14f139e20cff79d38791a28fcb77e7e1f3f11157a0d7f8eab42b88b6633a46e62d2c0f5b3ba29fec20e95488a47ac6b7d66f91a50e633d4cdb3dab11ebcbe2a89e507518ed5b78dfacafd4c246218800a550b2d26503851f948cec5e691a72ac9205199748e504f28c1ce6aa0f39c18e73bac89f498cd38aa644cafff650f63771265edfa1c75f5753ad52a3a789ce92937d90744ea4506993d66ccbfd1fe8ae169a1e2748872e1fcd5aef25f76e8b91f8a58064618073c5f002332c81d18536a1bd69b17741809deb539bd02eebbc9d809abdb544fd923a3257c7c07457f69660b3945820a8a39bf09a5070be1ff7aedfcdc9cf9f7fa3548deee437e5656815902dfd34292790f385c7cb260bc6ffa7784754bb1add026cb4eec3b05cb547a134da1657b58ad094e06ba2dd8bb27bc679c9f1d06489327d2d5ba5b54db9624141d10cb65fc3fca839fab3feacd39d063d2a2533153fe39bc010527740dba4395bae433b677a56fd81aa614e8bb16142b4d49f41ab911ec81082e92698ccffbea6f41e37cb0b81acb06752770d0519725a5805c90521d0d1d335064523015f87987822a2a60e44b02fcec5f7e4b4861db1152e9e29a0864ffb3826ddf732b49f47ac16bfa49d235a37cf5db078d0f7ed93e88c5cabd7f22225ab2c3adce08b539d105dac48fdd65d77b16c6c72ce096a9f89eb430822e0669f9fc965cc2d3f5c43d56fc12d40a67c3d99c16bb57a285c84336197e583306652ffb5b9f5e5d37eedfa787bbbab91282fc13afc15571fd8e9ca5f453d581e35c5e2ed225bb11810c7c107566c28f38485dbf76787087e573a54dd3021a0a392cd3193a6c27c11b1f8760c31338e136a2c62a01def28bd982a6d05e3135f650b290961c589d1978e6fc330dae34a7d3eb1640a8da05e83d52d379a2c9a09575dea5c793d43efaeb7c2d070f2257d017d80a7f84c66ab0204d84b4a87a62b2ed93c1c2c2e1256611823cbac76832e92126be1e33616b9c12859104c604c7828c99f02cf53006e076913f1c72d230a2f45cf784ed4c3aa721ed12e84ac5099666a34e47d698b5b7c2005beb133cb3641adc18fc4c0d458be3802c43ad141a005977e71c5423c3bb1c919ede5d9d865211bb9eed0e4a5b2825318aab0bc794de5c47ff782ae540bee7f8c7d227feee1f30fcf1652ab415360f7dd9191a6d50f7d80736912dccdef1d0f8438890757b293285998589f6dc2238af84c31270f36fac858f012fcd336c9f27241c4bb6de4f44677cbe7ed77049811576194946416c8ab9a5719574602a0c4a63aedf9f096b191579d5b2610e0f6ece1e80486320818c18ed31f39280be55db21b87b102fc28af849d6bb7e0739915edc30d5707a2f6a29554077b021577671c7847186bce25d931f17adc591ae062c219bbcd4ff4db027bd6be72d522320b97f4d12aba95499638f9db611e11792e35345cdbd351863ce5e76cbcf289f706e51883df6e65fb3d67db213d13342844b2a54990b1cb8746c6e628acc5300520647657f9b950ab5d75ec63f47d5e768e0977c12ba2ce4793ae987b1fd981afa4cd4d52bee67b8bba1935d4c857f54ba142e6d06e8a8818e6280f524d844040108470c8edd2a05e298992ed2754f30fb2bdd18701138c19b92964ed429e90155fd25fb701bd579a4d8792bea160c559db19836a0f9a93287ec2eb431ea32291ee62ee1a3714457345232ef10e61e6a310cab8ff9a11680851b8e562f489770208d81d9df0a285e1a707a0e1a7da85eaa59eb7a4e221c32b0f35ab2fbdcc07d1a333320ce04a50715caa7323251ed8270b57e27c7755e96f86b26428eeb87f2a9dfae1aae0096664f11ec81e8375b4b151163179cf57962e9a3f362e22ac1b9d3b3579d26c9ae01057bf15baec57384ed74fe822a89220badf41f256ee50f97e7b4dbaab8c62e37c09227259507898b9b168081e945fec130a2bde77110308bf658e27bfa9d4aba3d1d4f8f4f7ff079458bb342d413bb864de200b41413343729b30df5176e2069be9d07c102f96fe87f2f164058c113ad70eb69a6e8c917ed5de13a38bc2c12dbc82171a8ab1e0c6ac893a9415296e0e0dcc35362bc5452ad815518e736d7e05af7f1c9fd2daf921895a6a6db202066a317bff20f828a97a4a91df8cb19478d25482ac91d2409ec2f3b38c38b93ee96311ff30c9ac4c300335d927de947e747e98f3231d1c0861529418600739b282ff09f94625442098ed1bcdc95e49e49e7c6f608cb912883d8d7d5f55f046226075e38c2e7d87900f8a43e6cb2013dd3edcb6f2d81d547400c928b3afa9957fdee82061f08f2f4cd96f9e9ecaece78df95b297ae64d1c8b452b4d710ad8b770745bf26ab7fca5b9280528f9cf132de691e615daca8300bf9fa9d17c13f10bf3442a9a4a824b9be9b045a355404323ec089cf5f1438b62c682dc2017c4e412154ad914e49169680ff121d730fa0382e7cacc38975f225d7fb854dd95e7d99086fa98bfd8e40ae2716a0e815cb9216e6f59a1b7b80dbdc158ee035564154a9b4b28a150166df0af75622fb056a1a670cd845ca8352d21d80e32d313ff912778a5e77ccf51d98612a580645a6d36fef8db3863a7109927cc1fa68393ba856e406aa8c98ba50bbc77df8f0e31b09261d19172d1d28d0051a3a56836969ac847", 0x1000}, {&(0x7f0000004bc0)="ad626957000b0cf32b6622955a8a9fe542da3e2a0e13a5008ac1b5cf43bc3e2428f669b11470c8a6e36783ebdd44515185b3b17f72e8fdf176dc77e1f1bbc0074cc556cd207250b91e251e37be7e6dd7c033bdbddb9c14816af60b5d5fd783d81ba721cfbb9c66cf4141af3e848de6c1eeabe8dd85616817867a93652744bd9f2fab58a3a16490c32bf00d75394f738d96828f54f4397870f10172c0bfad7faa31b06d527c4a52d7c3e16908a00d5d79e4246730f8a1903c0eb9ebebb7d0dedb9229dd6b59e7", 0xc6}], 0x5, &(0x7f0000004e80)=[@cred={{0x1c, 0x1, 0x2, {r7, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r5, r12}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, r5, r6}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r1, r4, r4, r0, r1, r4, r4, 0xffffffffffffffff]}}], 0xc0, 0x40}}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000004f40)="94a703ff802d949e27e004dbf0deeabe134741b5e4acb61ca023f4f8b542cc2ff7daa64d1ab657378dc9b6d1990793b2133fb3ee6d9f9aaa1329", 0x3a}, {&(0x7f0000004f80)="d89f7115a0d13e1f8b8f906b6fe1f7d31dca1a476578e649585aa1fd22ec64f2ea3f79ef562abde2812a5a8e13b928e7535e4552d96463591924179cb8ff242fbacfa7bc9ea2e4f102ad88b7b07a0d991889d1b9f57ac422aa457046ffd548318ed62f25d6ddf95384d023463a943f9aa32cbc87d4d61e45c471769ac21132d2ac6c2e1dcf25ef305f95a70027969e7e2e889e80046730526c239f30374d336091270045d5d805b48211f8d56b48a2e0b5edc5fa9f9f29cb474787f566d7d6cd8030004ab7613a62", 0xc8}, {&(0x7f0000005080)="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", 0x1000}, {&(0x7f0000006080)="1f4e0df1fe5632222bfd0b5e320cc53de6a377a53d42783b5738e949cbbe1ecf2063e0c6e07d26074eedee08689bdd200fb1473fd5fa3410f6a05b0361cc1dc7e8d2a2e28198e149f0581452d83f83cde39fd61e8e7ce62d4fa8aef7e366e35cac8c96bb4c16f9ae5e1b6f731c2b54010ee77bd97c941894814d607296598995f17264e6df990975c4c23bdd11bff1755bb50a7e896c96d1d53d0e621896a4315557d12a83eee72b1403c19785594517686b0c8bc42b202d018c", 0xba}, {&(0x7f0000006140)="6fa419d94f5cb31a5934119c080becd865a735df89998996b9131a062c8a33045e335365506466c64eeff1fa7bdacd35eb1eaf733bfded628fac38248d4e97cb2a112bbc0336eea2c3388d8a77c5b730ba7fa90e239c1f8d2402474b3844ebdd684294660464120486af247bed70c9fdd5c774049de231839f1abd22a2e403e8ec6316c992709bd7aa53285a4dbd7c3773142776981ea5", 0x97}, {&(0x7f0000006200)="d38858e519a8fc30d3eca900c50384d5f095f6585d155e440c1a2e5a4c569e0e7188fa239813d50aa2d6c3c74f9547312917bac0f42702faeb7541b58d6e3c46c1a0d9e0c0df7014efde1ff53b73c0590f481aa09d175e2885a7a05ac7bd076bd031981395dd0f089fa43b6498", 0x6d}], 0x6, &(0x7f0000006300)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r6}}}], 0x68, 0x8800}}], 0x4, 0x24042050) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000006480)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000064c0)={0x0, 0x9, 0x5}, &(0x7f0000006500)=0x8) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006540), 0x105000, 0x0) r14 = openat(r13, &(0x7f0000006580)='./file0\x00', 0x141040, 0x21) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000068c0)={0xffffffffffffffff, 0x20, &(0x7f0000006880)={&(0x7f0000006700)=""/108, 0x6c, 0x0, &(0x7f0000006780)=""/248, 0xf8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000006980)={0xd, 0x5, &(0x7f00000065c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x2, 0x1, 0x0, r14}]}, &(0x7f0000006600)='syzkaller\x00', 0x8a, 0x1f, &(0x7f0000006640)=""/31, 0x41000, 0x21, '\x00', 0x0, @sock_ops=0x3, r14, 0x8, &(0x7f0000006680)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000066c0)={0x2, 0x7, 0x4, 0x5}, 0x10, r15, r13, 0x4, &(0x7f0000006900)=[r1, r1, r1], &(0x7f0000006940)=[{0x5, 0x4, 0xc, 0x5}, {0x1, 0x5, 0x4, 0xa}, {0x3, 0x4, 0xc, 0xa}, {0x3, 0x3, 0x0, 0x8}]}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000006a40)={r3, 0xd931, 0x8}, &(0x7f0000006a80)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000006ac0)={r16, 0x34934766}, 0x8) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sched_getattr(r7, &(0x7f0000006b00)={0x38}, 0x38, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 2m37.324875884s ago: executing program 0 (id=1998): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000004000000020000000400000004000000", @ANYRESOCT=r0, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0], 0x50) fsopen(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x10000031, 0x8000, 0x7ff, 0x5, 0x0, 0xbffffe0000000003, 0xfa13, 0xb}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x202, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x7) landlock_restrict_self(r7, 0x9) (async) landlock_restrict_self(r7, 0x9) landlock_restrict_self(r6, 0xa) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r6, 0x6) 2m21.988012781s ago: executing program 32 (id=1998): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000004000000020000000400000004000000", @ANYRESOCT=r0, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0], 0x50) fsopen(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x10000031, 0x8000, 0x7ff, 0x5, 0x0, 0xbffffe0000000003, 0xfa13, 0xb}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x202, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x7) landlock_restrict_self(r7, 0x9) (async) landlock_restrict_self(r7, 0x9) landlock_restrict_self(r6, 0xa) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r6, 0x6) 12.449414059s ago: executing program 3 (id=2621): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="8724866f", 0x4}, {&(0x7f00000002c0)="85e601d0ddbf15cc6de956221ef68bb7858231f515ee35c66c2650834588c53154505c7e95a37b2667823f43b614916c91892a5b02adead56c114a05233c7412d3de4057", 0x44}, {&(0x7f0000000340)="886ad50cb532dc661c9f167816d6cc2fdcd80e645767a55ddc9ebefcff87cddd06b386d9b2f01fb2d1286c20cc7474f932af215fe3357aa3e1d00bdc33940514af1433556b9e1b4b194cd0022eb81ae40e5bbc35e950718a58681671a49767bee097b39fbbd2c1fbfa11eaf9773268288bccc3bd89350ce04166acc2d2078d8a74250489005572785f64d0b1ac798cc7e8d13db11dbabc79eb41869b8fa270c58bf6c99cc03f6e53a040c45fa07bb865fac04c1c58604b849d9ab2bc5e3f", 0xbe}, {&(0x7f0000000540)="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", 0x1000}], 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, 0x0) close(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x76, &(0x7f0000000500)={0x1003, 0x8000, 0x8204, 0x100009, 0xfffffffc, 0x8, 0x3ff, 0x40000008}, &(0x7f0000000280)=0x20) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) syz_open_dev$audion(0x0, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, r0, 0x3, 0xf) r6 = syz_open_dev$mouse(&(0x7f0000000180), 0x4, 0x2) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 10.161998278s ago: executing program 2 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x14a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @tipc={{0x29, 0x4, 0x3, 0x5, 0x13c, 0x68, 0x0, 0x4, 0x6, 0x0, @multicast2, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x3f, 0x1, 0x9, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0xfffffff3}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x3405}, {@multicast2, 0x3}, {@rand_addr=0x64010102, 0x18}, {@rand_addr=0x64010102, 0x3}, {@rand_addr=0x64010100, 0x401}, {@rand_addr=0x64010102, 0x7fff}]}, @lsrr={0x83, 0xb, 0xb, [@loopback, @multicast1]}, @timestamp={0x44, 0x2c, 0x32, 0x0, 0x6, [0x6, 0x9, 0x6, 0x8, 0x40, 0x3, 0xffffffff, 0x6, 0x0, 0x9]}, @noop]}}, @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xffff, 0x0, 0x0, 0xe, 0x0, 0x4, 0x4e24, 0x4e20, 0x4, 0x3, 0x0, 0x0, 0x1}, [{0x0, 0x80, 0x8000, 0x1ff, 0x6, 0x10001, 0xa, 0xc}, {0xffffffff, 0xfffffff7, 0x3, 0xffffffff, 0x95, 0x7fff, 0x3, 0x3}, {0x1c, 0x10, 0x6, 0x9, 0xd6c2, 0xe15, 0x4, 0x4}, {0x2, 0x8, 0xfff, 0x1000, 0x7, 0x4, 0x9, 0xf01}]}}}}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x9], 0x0, [0x40000000]}, 0x400}}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x4840) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf00020106500008ffffffe7020d0000052406000108247c2a6ad07be4aefb0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4097, 0x1001}], 0x5}, 0x70000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xfffffff7}], 0x3, 0x40, 0x0) 8.081979554s ago: executing program 2 (id=2637): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0xc224, 0x1}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x8200) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000140)) r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f0000000240)={0x0, {0x0, 0x8}}) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000280)='$\x00', 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'ip_vti0\x00', {0x1}, 0x5e}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000300)) r5 = openat$cgroup_type(r3, &(0x7f0000000380), 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f00000003c0)={r5, 0x7}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000400)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x28) mknod$loop(&(0x7f0000000480)='./file0\x00', 0x40, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000004c0)="6000c397128c99f05ac3d71f453c237940045dfe217ce9c4707f0e318b54d19dabe5ceee6b8ec2080e9ffcd4cce75b072c9b0cab08d77c9deec9f1c5f4c9", 0x3e, r3}, 0x68) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) getdents(r3, &(0x7f00000005c0)=""/97, 0x61) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@bridge_newvlan={0x60, 0x70, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000780), 0x200001, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000007c0)="f70e7cbd6f90677053741003") msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x8) socket$qrtr(0x2a, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000880)={0x6, 0x4, 0x4, 0xd38c}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r6) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r9, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040805}, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x1a940, 0x0) 7.939371925s ago: executing program 2 (id=2640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)}}], 0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1a4, 0x0, &(0x7f0000000340)="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", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100d}, 0x50) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.166537156s ago: executing program 3 (id=2642): r0 = getpgrp(0x0) (async) r1 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x1) read(r1, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002400018006000500000000000600010002000000080003"], 0x38}}, 0x0) (async) process_madvise(r2, &(0x7f0000003b80)=[{0x0}, {&(0x7f0000000440)="a0", 0x1}], 0x2, 0x15, 0x0) 7.086525143s ago: executing program 3 (id=2644): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000020000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x40) 6.861447586s ago: executing program 3 (id=2646): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="8724866f", 0x4}, {&(0x7f00000002c0)="85e601d0ddbf15cc6de956221ef68bb7858231f515ee35c66c2650834588c53154505c7e95a37b2667823f43b614916c91892a5b02adead56c114a05233c7412d3de4057", 0x44}, {&(0x7f0000000340)="886ad50cb532dc661c9f167816d6cc2fdcd80e645767a55ddc9ebefcff87cddd06b386d9b2f01fb2d1286c20cc7474f932af215fe3357aa3e1d00bdc33940514af1433556b9e1b4b194cd0022eb81ae40e5bbc35e950718a58681671a49767bee097b39fbbd2c1fbfa11eaf9773268288bccc3bd89350ce04166acc2d2078d8a74250489005572785f64d0b1ac798cc7e8d13db11dbabc79eb41869b8fa270c58bf6c99cc03f6e53a040c45fa07bb865fac04c1c58604b849d9ab2bc5e3f", 0xbe}, {&(0x7f0000000540)="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", 0x1000}], 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, 0x0) close(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140040, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x76, &(0x7f0000000500)={0x1003, 0x8000, 0x8204, 0x100009, 0xfffffffc, 0x8, 0x3ff, 0x40000008}, &(0x7f0000000280)=0x20) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) syz_open_dev$audion(0x0, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 6.54214903s ago: executing program 4 (id=2648): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x482, 0x0, 0x1}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x26000, 0xe, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x50000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xa, 0x0, 0x7, 0x4, 0x0, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x4, 0xff, 0x7, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x8000000, 0xc, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0x3, 0x6, 0x5, 0x0, 0x3}, {0xf000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfd}, {0xffffffff}, {0x58000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4097, 0x1001}], 0x5}, 0x70000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xfffffff7}], 0x3, 0x40, 0x0) 6.453649901s ago: executing program 1 (id=2649): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) read$dsp(r2, &(0x7f0000000140)=""/16, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100000080ff00000000e000000200000000000000000000000000000000000000000000ffff00000000000000004e2200000a00200067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ff01000000000000000000000000000000000000000000000100000000000000000000000000000004000000000000040000000000000000000000000000000054000000000000000300000000000000030000000000000000000000000000000a001000010000000000000029319c1672b3b076550d98af212e1d371d03a7fb0d636fd3709dbc58286da91e31255caa8f142d2c5977fb6464a5758eff557da4392a8b04a055e8e1be4cdf8e607d3b53a3d97f6fe6b1c4ae1ccf7d15d7810e8173921b1b94c6b08aaac19cab7246afcf8d6c05c8c3183309b3"], 0xc4}, 0x1, 0x0, 0x0, 0xc000054}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000001000000c54daf723b0000000000000a0080104ee26d7604560010"], 0x1c}}, 0x0) r4 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) shutdown(0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) 6.433637751s ago: executing program 2 (id=2650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60141, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r2, &(0x7f0000000b80)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000840)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0xfffffffffffffffd) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x0, 0x10000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_usb_connect(0x0, 0x181, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001f055110240419cf96a40102030109020e0201000000000904d102096c3ca2000905010440000906030905011020002e017809050e"], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000900)={0x0, @aes128, 0x0, @desc1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x19, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0xbc, 0x0, &(0x7f0000003dc0)=[@increfs_done={0x40106308, 0x2}, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003bc0)={@flat=@handle={0x73682a85, 0x0, 0x2}, @fda={0x66646185, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x1, &(0x7f0000003ec0)=""/4097, 0x1001, 0x1, 0x29}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x0, &(0x7f0000002bc0)=""/152, 0x98, 0x1, 0x2c}, @fda={0x66646185, 0x7, 0x1, 0x29}, @fda={0x66646185, 0x9, 0x2, 0x33}}, &(0x7f0000002c80)={0x0, 0x28, 0x48}}}, @increfs={0x40046304, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a00010000000a03000000000000000000020000062e000600fcc675736265da4f0f0e9c26d6329e6c3567bf799042a89d277b542d2e6c8dd883de670e06c61601a43a00000c00044064d52e4401458d5000000000000000028d0006009fbb7474fb6c72d77efacde725a8770c347c800bad9a074d1eaec56b60883aaf7e43a8d67c7803d594ca392cf73cd2e3d2ca1dc6d1efa0d83473f3b504b793ad85bb825da8088d27b580e83517d8d3532f1dc7e49d7e42968e8096aef319252bc798788352a8baec76ab09e84283a6d675d51076baf98f10c13664dd18a98873845277d2da58b62d6a00000008000240000000020900010073797a30000000000900010073797a31000000002c0000000c0a01020000000000000000010000020900010073797a31000000000900020073797a310000000020000000050a050000000000000000000c0000090c0002400000000000000002140000001100010000000000000000000200000a"], 0x174}, 0x1, 0x0, 0x0, 0x40844}, 0x4000081) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYRES16=r3], 0x7c}}, 0x4000018) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000120a030000008100000000000700000a4da100c60000000714000000110001000000000000000000010000d9"], 0x44}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) 4.381096391s ago: executing program 4 (id=2651): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000004000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 4.285288646s ago: executing program 1 (id=2652): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000280)={r2, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000001e00010026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000004000a000d"], 0x2c}, 0x1, 0x0, 0x0, 0x24048840}, 0x20000880) 4.184537281s ago: executing program 1 (id=2653): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 4.065000388s ago: executing program 1 (id=2655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect(0xe332e4d5ed621826, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102797c0720e51cbe2d7503a96816ed2545e08b5c19200900"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, 0xffffffffffffffff, 0x2f0ab000) r3 = gettid() ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0xffffffff, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000004180), 0xff77) recvmmsg(r6, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/41, 0x29}, {&(0x7f0000001f80)=""/161, 0xa1}], 0x2}, 0x9}], 0x1, 0x40000002, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f00000004c0)=@x86={0x7b, 0x40, 0x27, 0x0, 0x2, 0x5, 0x3, 0x8, 0x2, 0x9, 0x2, 0x7, 0x0, 0x96a9, 0x7, 0x6, 0x27, 0x8, 0x3, '\x00', 0x8, 0x5}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x7, 0x6, '\x00', 0x4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000180)) 4.058042688s ago: executing program 4 (id=2656): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000404e040c12000000000001090224000100005000090400fefd0300000009210400080122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0xff, 0x82}, {0x9, 0x5, 0x7, 0x2, 0x200, 0x52, 0x0, 0x6}, {0x9, 0x5, 0xd, 0x3, 0x400, 0x80, 0x6}}}}}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.898793125s ago: executing program 5 (id=2658): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0xfff1, 0xf}, {0x1, 0xffe0}}}, 0x24}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x700000000000000}, 0x0) 2.857731542s ago: executing program 3 (id=2659): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010900080000000000020001000000000080ff07180000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 2.749003381s ago: executing program 5 (id=2660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0xa, 0xfff1}}}, 0x24}}, 0x40004) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xfff9}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xc186}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088d1}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r12 = inotify_init1(0x0) inotify_add_watch(r12, &(0x7f0000000080)='./file0\x00', 0x20000632) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) move_pages(0x0, 0x4, &(0x7f00000003c0)=[&(0x7f0000feb000/0x12000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000fef000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x6) (async) write$binfmt_elf32(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) (async) close(r11) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) sendmsg$NL80211_CMD_SET_MAC_ACL(r11, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00931daca952ccebea1e460329bd7000fbdbdf255d0000000800a500010000000800a500010000000800a500010004000800a500010000000800a50000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008050) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.748790708s ago: executing program 3 (id=2661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') read$FUSE(r3, &(0x7f00000095c0)={0x2020}, 0x2020) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.694138454s ago: executing program 5 (id=2662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feff160001010000fe8000000000000000000000000000aafc0100000000000000000000000000000000000000000005000000003a000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="ff02000000001a000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x40800) 2.644571126s ago: executing program 5 (id=2663): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x12, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 2.543877834s ago: executing program 2 (id=2664): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.473872212s ago: executing program 1 (id=2665): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x541b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000004c0)={0x2, 0x0, 0x6, 0x8000000000000000, 0x6, 0xb, 0x8, 0x1, 0x7}) (async) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000004c0)={0x2, 0x0, 0x6, 0x8000000000000000, 0x6, 0xb, 0x8, 0x1, 0x7}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x2860) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x2860) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000000)={0x0, 0xe81a, 0x200, 0x0, 0x21d}, &(0x7f0000000540)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0x4c44, &(0x7f0000000680)={0x0, 0xb487, 0x40, 0x1, 0x280}) (async) r5 = io_uring_setup(0x4c44, &(0x7f0000000680)={0x0, 0xb487, 0x40, 0x1, 0x280}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x42, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'vcan0\x00', 0x4c02}) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000240)=[{0x9, 0x7, 0x7, 0x3}]}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, 0x0, 0x0) close(r11) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000ff03000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000090000000000a7a05177a03d0ae88fd0c12dfae7a5338c65f841f85079f167e7eadda6fae67d61acde191b5a92977ab8ace3318096abd820e28c80053df10741d5f47885b45af8d62cf90ffd4205d0eb8f4584323b3dbae1c3b61d395a855c9efa7121cdef37c56c17644b067dc4396df52e081ef1c1ecd012eae470a7ebca4d9e2aa72eb6e177ebaa2436e809178ce1cbe1d99538799714e12f8e286d58cf0dd99522", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000850000004a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000300)=0xf313, 0x4) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000300)=0xf313, 0x4) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40480, 0x0) ioctl$PPPIOCCONNECT(r13, 0x4004743a, &(0x7f0000000180)=0x2) (async) ioctl$PPPIOCCONNECT(r13, 0x4004743a, &(0x7f0000000180)=0x2) 2.431537928s ago: executing program 4 (id=2666): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 2.245091894s ago: executing program 1 (id=2667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x8eb, 0x0, 0x3}]}) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)={0x20, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r7, 0x8800000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) sendfile(r8, r7, 0x0, 0x578410eb) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 2.244905479s ago: executing program 4 (id=2668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118f7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10000, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x848}, 0x20008000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @ipv4=@empty}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES32], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x440881, 0x2, 0x4}, 0x18) 2.199163383s ago: executing program 5 (id=2669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000190000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 2.178453265s ago: executing program 2 (id=2670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x8eb, 0x0, 0x3}]}) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)={0x20, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r7, 0x8800000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) sendfile(r8, r7, 0x0, 0x578410eb) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 1.885368493s ago: executing program 5 (id=2671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x8eb, 0x0, 0x3}]}) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)={0x20, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r7, 0x8800000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) sendfile(r8, r7, 0x0, 0x578410eb) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 0s ago: executing program 4 (id=2672): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000044000000080003", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180005801400"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): ][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.428769][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 580.438476][ T9] usb 2-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 580.488907][ T9] usb 2-1: config 0 has an invalid interface number: 224 but max is 189 [ 580.493886][T13769] support for the xor transformation has been removed. [ 580.505520][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 580.526089][ T9] usb 2-1: config 0 has no interface number 0 [ 580.533618][ T9] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 580.546699][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.569712][ T9] usb 2-1: config 0 descriptor?? [ 580.833843][T13774] sctp: [Deprecated]: syz.1.2216 (pid 13774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.833843][T13774] Use struct sctp_sack_info instead [ 581.366224][T13784] loop2: detected capacity change from 0 to 7 [ 581.373885][T13784] Dev loop2: unable to read RDB block 7 [ 581.380176][T13784] loop2: unable to read partition table [ 581.386476][T13784] loop2: partition table beyond EOD, truncated [ 581.392806][T13784] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 582.074759][ T5933] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 582.087010][ T5933] usb 6-1: device reset changed ep0 maxpacket size! [ 582.103867][ T5933] usb 6-1: USB disconnect, device number 12 [ 582.252770][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 582.570753][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.583551][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.593384][ T5933] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 582.602542][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 582.621273][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.635378][ T24] usb 3-1: config 0 descriptor?? [ 582.768061][ T5933] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 582.777938][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.787192][ T5933] usb 6-1: Product: syz [ 582.799195][ T5933] usb 6-1: Manufacturer: syz [ 582.803831][ T5933] usb 6-1: SerialNumber: syz [ 582.821192][ T5933] usb 6-1: config 0 descriptor?? [ 582.886163][ T5932] usb 2-1: USB disconnect, device number 107 [ 582.929534][ T5910] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 583.067886][ T24] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 583.076392][ T24] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 583.085408][ T24] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 583.098534][T13810] lo: Caught tx_queue_len zero misconfig [ 583.102390][ T24] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 583.111467][ T24] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 583.118463][ T24] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 583.128439][ T5910] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 583.136583][ T24] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 583.157165][ T5910] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 583.168435][ T24] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 583.181794][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.212041][ T5910] usb 5-1: config 0 descriptor?? [ 583.222919][ T5910] pwc: Creative Labs Webcam Pro Ex detected. [ 583.241939][ T5910] pwc: Warning: more than 1 configuration available. [ 583.267058][ T24] cp2112 0003:10C4:EA90.0023: Part Number: 0x82 Device Version: 0xFE [ 583.443807][ T5910] pwc: Failed to set LED on/off time (-71) [ 583.459160][ T5910] pwc: send_video_command error -71 [ 583.465143][ T5910] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 583.473417][ T5910] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 583.490339][ T5910] usb 5-1: USB disconnect, device number 75 [ 583.677567][T13817] loop2: detected capacity change from 0 to 7 [ 583.695316][T13817] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 583.707272][T13817] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 583.715332][T13817] Dev loop2: unable to read RDB block 7 [ 583.722268][T13817] loop2: unable to read partition table [ 583.728372][T13817] loop2: partition table beyond EOD, truncated [ 583.735098][T13817] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 583.841496][ T5933] usb 6-1: f81604_read: reg: 100f failed: -EPROTO [ 583.868774][ T5933] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 583.893141][T13793] cp2112 0003:10C4:EA90.0023: Error starting transaction: -38 [ 583.895081][ T5933] usb 6-1: USB disconnect, device number 13 [ 583.925045][ T5933] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 583.990084][ T5933] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 584.292642][ T24] cp2112 0003:10C4:EA90.0023: error reading lock byte: -71 [ 584.661572][T13819] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 584.748851][ T7469] net_ratelimit: 268 callbacks suppressed [ 584.748868][ T7469] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 584.780136][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 584.791633][ T84] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 584.811218][ T84] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 584.828816][ T84] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 584.860633][ T84] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 584.874379][T13839] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2246'. [ 584.885570][ T84] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 584.927165][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 584.934711][ T5910] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 584.942507][T11358] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 584.996393][ T84] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 585.069353][ T84] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 585.103762][ T24] usb 3-1: USB disconnect, device number 72 [ 585.119245][T11358] usb 4-1: device descriptor read/64, error -71 [ 585.139070][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 585.148428][ T5910] usb 6-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 585.166472][ T5910] usb 6-1: config 0 has an invalid interface number: 224 but max is 189 [ 585.186598][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 585.224740][ T5910] usb 6-1: config 0 has no interface number 0 [ 585.240745][ T5910] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 585.368294][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.477020][T11358] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 585.514217][ T5910] usb 6-1: config 0 descriptor?? [ 585.729027][T11358] usb 4-1: device descriptor read/64, error -71 [ 585.790128][T13833] sctp: [Deprecated]: syz.5.2243 (pid 13833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.790128][T13833] Use struct sctp_sack_info instead [ 585.839453][T11358] usb usb4-port1: attempt power cycle [ 585.855849][ T5894] usb 6-1: USB disconnect, device number 14 [ 585.861908][ T5932] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 585.998783][T11603] Bluetooth: hci5: command 0x0c1a tx timeout [ 586.021848][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.119030][ T5932] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 586.165591][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.182046][ T5932] usb 5-1: config 0 descriptor?? [ 586.198966][T11358] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 586.219473][T11358] usb 4-1: device descriptor read/8, error -71 [ 586.405865][ T5932] usbhid 5-1:0.0: can't add hid device: -71 [ 586.415630][ T5932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 586.436153][ T5932] usb 5-1: USB disconnect, device number 76 [ 586.469379][T11358] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 586.499493][T11358] usb 4-1: device descriptor read/8, error -71 [ 586.623740][T11358] usb usb4-port1: unable to enumerate USB device [ 586.909636][T11358] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 587.076857][T11358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 587.093947][T11358] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 587.132660][T11358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.257879][T11358] usb 5-1: config 0 descriptor?? [ 587.287948][T11358] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 587.486708][ C0] usb 5-1: unknown answer from device [ 587.980505][T13870] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 588.228952][ T5932] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 588.568876][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 588.590781][ T5932] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 588.599615][ T5932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.611764][ T5932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 588.654448][ T5932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.685653][ T5932] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 588.695969][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 588.721373][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.732420][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.739706][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.746906][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.754694][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.762686][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.770232][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.777429][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.784655][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.791878][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.799169][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.806364][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.813582][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.820826][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.828018][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.835391][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.842598][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.849778][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.856911][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.864129][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.868780][ T5178] usb 5-1: control msg error: -71 [ 588.874255][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.884399][ C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 588.893452][ T5932] usb 4-1: Product: syz [ 588.897633][ T5932] usb 4-1: Manufacturer: syz [ 588.906501][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.917633][ T5932] cdc_wdm 4-1:1.0: skipping garbage [ 588.934849][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.942272][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.948776][ T5932] cdc_wdm 4-1:1.0: skipping garbage [ 588.949844][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.963250][ T5178] usb 5-1: control msg error: -71 [ 588.964096][ T5932] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 588.968414][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.983437][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.991031][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 588.998463][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.006310][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.013837][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.021178][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.028464][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.035909][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.043299][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.050656][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.057964][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.065271][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.072737][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.080166][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.087463][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.094828][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.102142][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.109406][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.116664][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.123942][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.131218][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.138475][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.145731][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.152995][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.160255][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.167525][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.174937][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.182197][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.189457][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.196711][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.203974][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.211230][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.218487][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.225746][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.233004][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.240287][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.247546][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.254813][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.262067][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.269382][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.276726][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.283994][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.291253][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.298513][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.305774][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.313042][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.320369][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.327646][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.334917][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.342176][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.349442][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.356719][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.363976][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.371328][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.378722][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.385988][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.393347][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.400601][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.407859][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.415111][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.422361][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.429615][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.436874][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.444130][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.451397][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.458665][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.465932][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.473185][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.480617][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.487878][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.495143][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.502498][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.509756][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.517019][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.524403][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.531674][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.538945][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.547079][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.554412][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.562686][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.562711][T11603] Bluetooth: hci5: command 0x0c1a tx timeout [ 589.569991][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.583750][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.591909][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.592174][ T5932] cdc_wdm 4-1:1.0: Unknown control protocol [ 589.599246][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.599441][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.599631][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.599817][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.600006][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.641613][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.648945][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.656156][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 589.661533][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 589.698536][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.731439][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.738758][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.746109][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.748846][ T5178] usb 5-1: control msg error: -71 [ 589.753447][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 589.759662][T11358] usb 5-1: USB disconnect, device number 77 [ 589.765371][ C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19 [ 589.779838][ T7469] net_ratelimit: 275 callbacks suppressed [ 589.779855][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.795565][ T9] usb 3-1: config 0 descriptor?? [ 589.803898][ T29] audit: type=1326 audit(1773128393.022:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 589.826792][ T7469] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 589.831838][ T29] audit: type=1326 audit(1773128393.022:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 589.856971][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.915026][ T7469] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 589.943332][ T29] audit: type=1326 audit(1773128393.022:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 589.944556][ T7469] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 590.037984][T13889] xt_bpf: check failed: parse error [ 590.058258][ T29] audit: type=1326 audit(1773128393.022:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 590.093744][ T29] audit: type=1326 audit(1773128393.022:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 590.132559][ T7469] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 590.163574][ T84] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 590.172779][ T29] audit: type=1326 audit(1773128393.022:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 590.199955][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.208552][ T7469] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 590.213923][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 590.248869][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 590.260321][ T7469] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 590.272797][T13897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2263'. [ 590.282779][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 590.290031][ T29] audit: type=1326 audit(1773128393.022:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 590.314626][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 590.328159][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 590.353090][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 590.360866][ T29] audit: type=1326 audit(1773128393.022:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 590.384995][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 590.396469][ T29] audit: type=1326 audit(1773128393.022:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 590.419053][ T5933] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 590.427169][ T9] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 590.439227][ T29] audit: type=1326 audit(1773128393.082:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3a19c799 code=0x7ffc0000 [ 590.499929][ T9] cp2112 0003:10C4:EA90.0024: Part Number: 0x82 Device Version: 0xFE [ 590.609476][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 590.625158][ T5933] usb 2-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 590.643314][ T5933] usb 2-1: config 0 has an invalid interface number: 224 but max is 189 [ 590.672007][ T5933] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 590.704910][ T5933] usb 2-1: config 0 has no interface number 0 [ 590.705319][T11358] usb 4-1: USB disconnect, device number 81 [ 590.732949][ T5933] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 590.768115][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.817956][ T5933] usb 2-1: config 0 descriptor?? [ 591.070149][T13895] sctp: [Deprecated]: syz.1.2262 (pid 13895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.070149][T13895] Use struct sctp_sack_info instead [ 591.094390][ T5932] usb 2-1: USB disconnect, device number 108 [ 591.117588][T13879] cp2112 0003:10C4:EA90.0024: Error starting transaction: -38 [ 591.347419][ T9] cp2112 0003:10C4:EA90.0024: error reading lock byte: -71 [ 591.382486][ T9] usb 3-1: USB disconnect, device number 73 [ 592.016788][T13915] loop2: detected capacity change from 0 to 7 [ 592.028154][T13915] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 592.045225][T13915] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 592.052103][T13915] Dev loop2: unable to read RDB block 7 [ 592.057805][T13915] loop2: unable to read partition table [ 592.064210][T13915] loop2: partition table beyond EOD, truncated [ 592.090276][T13915] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 592.648214][T13909] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 593.208849][ T796] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 593.359677][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 593.374530][ T796] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 593.392010][ T796] usb 2-1: can't read configurations, error -61 [ 593.519691][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 593.538946][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 593.557442][ T9] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 593.559255][ T796] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 593.574382][ T9] usb 4-1: config 0 has no interface number 0 [ 593.584210][ T9] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 593.597614][ T9] usb 4-1: config 0 interface 89 has no altsetting 0 [ 593.610225][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 593.621693][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.655127][ T9] usb 4-1: Product: syz [ 593.660649][ T9] usb 4-1: Manufacturer: syz [ 593.665263][ T9] usb 4-1: SerialNumber: syz [ 593.686681][ T9] usb 4-1: config 0 descriptor?? [ 593.701317][ T9] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 593.708755][T11358] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 593.720085][ T9] em28xx 4-1:0.89: Video interface 89 found: [ 593.751023][ T796] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 593.758947][ T796] usb 2-1: can't read configurations, error -61 [ 593.786048][ T796] usb usb2-port1: attempt power cycle [ 593.878840][T11358] usb 6-1: Using ep0 maxpacket: 8 [ 593.890395][T11358] usb 6-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 593.902735][T11358] usb 6-1: config 0 has an invalid interface number: 224 but max is 189 [ 593.924385][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 593.930456][T11358] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 593.930485][T11358] usb 6-1: config 0 has no interface number 0 [ 593.930530][T11358] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 593.930552][T11358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.019573][T11358] usb 6-1: config 0 descriptor?? [ 594.129308][ T796] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 594.138755][T13944] team_slave_1: Caught tx_queue_len zero misconfig [ 594.157927][ T796] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 594.181904][ T796] usb 2-1: can't read configurations, error -61 [ 594.288997][T13940] sctp: [Deprecated]: syz.5.2277 (pid 13940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 594.288997][T13940] Use struct sctp_sack_info instead [ 594.331590][ T796] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 594.339516][T11358] usb 6-1: USB disconnect, device number 15 [ 594.342015][ T9] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 594.383061][ T796] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 594.410648][ T796] usb 2-1: can't read configurations, error -61 [ 594.418922][ T796] usb usb2-port1: unable to enumerate USB device [ 594.500294][ T5933] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 594.711346][ T5933] usb 3-1: config 0 has no interfaces? [ 594.722056][ T5933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.81 [ 594.733414][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.745589][ T5933] usb 3-1: Product: syz [ 594.750032][ T5933] usb 3-1: Manufacturer: syz [ 594.756730][ T5933] usb 3-1: SerialNumber: syz [ 594.770128][ T5933] usb 3-1: config 0 descriptor?? [ 594.829871][ T7469] net_ratelimit: 295 callbacks suppressed [ 594.829912][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.845664][ T7469] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 594.868950][ T7449] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.883081][ T7449] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 594.915248][ T7449] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 594.935437][ T7449] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 594.949741][ T7449] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 594.986774][ T5933] usb 3-1: USB disconnect, device number 74 [ 594.988836][ T7449] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.004002][ T7449] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 595.018804][ T7449] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 595.719071][ T9] em28xx 4-1:0.89: board has no eeprom [ 595.949957][ T5933] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 595.968844][ T9] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 595.996714][ T9] em28xx 4-1:0.89: analog set to bulk mode. [ 596.019484][ T5932] em28xx 4-1:0.89: Registering V4L2 extension [ 596.057761][ T9] usb 4-1: USB disconnect, device number 82 [ 596.072336][T13970] loop2: detected capacity change from 0 to 3 [ 596.091373][ T9] em28xx 4-1:0.89: Disconnecting em28xx [ 596.105455][T13970] ldm_validate_privheads(): Disk read failed. [ 596.111761][T13970] Dev loop2: unable to read RDB block 3 [ 596.117356][T13970] loop2: unable to read partition table [ 596.187303][T13972] usb usb8: usbfs: process 13972 (syz.2.2285) did not claim interface 0 before use [ 596.198711][T13972] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2285' resets device [ 596.228442][T13970] loop2: partition table beyond EOD, truncated [ 596.255045][T13970] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 596.265883][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 596.276421][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 596.289915][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 596.301674][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 596.315307][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 596.328267][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 596.343712][ T5932] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 596.353504][ T5933] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 596.364223][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.386092][ T5933] usb 6-1: Product: syz [ 596.398788][ T5932] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 596.478672][ T5933] usb 6-1: Manufacturer: syz [ 596.492755][ T5932] em28xx 4-1:0.89: No AC97 audio processor [ 596.499227][ T5933] usb 6-1: SerialNumber: syz [ 596.713756][ T5933] usb 6-1: config 0 descriptor?? [ 596.789942][ T5933] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected [ 596.805622][ T5932] usb 4-1: Decoder not found [ 596.816197][ T5933] ti_usb_3410_5052 6-1:0.0: missing endpoints [ 596.825429][ T5932] em28xx 4-1:0.89: failed to create media graph [ 596.842503][ T5932] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 596.955598][ T5932] em28xx 4-1:0.89: Registering snapshot button... [ 596.975858][ T5932] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input30 [ 597.033517][T13959] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2284'. [ 597.957259][ T5932] em28xx 4-1:0.89: Remote control support is not available for this card. [ 597.998025][ T9] em28xx 4-1:0.89: Closing input extension [ 598.027906][ T9] em28xx 4-1:0.89: Deregistering snapshot button [ 598.233429][ T9] em28xx 4-1:0.89: Freeing device [ 598.298772][T11358] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 598.458744][T11358] usb 3-1: Using ep0 maxpacket: 8 [ 598.474455][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2294'. [ 598.490959][T13997] bond2: option mode: unable to set because the bond device has slaves [ 598.507099][T11358] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 598.557803][T11358] usb 3-1: config 0 has an invalid interface number: 224 but max is 189 [ 598.562858][T13997] bond2: (slave ip6gretap5): Enslaving as a backup interface with an up link [ 598.577963][ T796] usb 6-1: USB disconnect, device number 16 [ 598.648512][T14000] IPv6: Can't replace route, no match found [ 598.668750][T11358] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 598.677908][T11358] usb 3-1: config 0 has no interface number 0 [ 598.724555][T11358] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 598.755104][T11358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.776254][T11358] usb 3-1: config 0 descriptor?? [ 598.777901][T14007] loop2: detected capacity change from 0 to 3 [ 598.796826][T14007] ldm_validate_privheads(): Disk read failed. [ 598.811258][T14007] Dev loop2: unable to read RDB block 3 [ 598.816858][T14007] loop2: unable to read partition table [ 598.825880][T14007] loop2: partition table beyond EOD, truncated [ 598.834951][T14007] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 598.918725][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 599.033346][T13991] sctp: [Deprecated]: syz.2.2292 (pid 13991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.033346][T13991] Use struct sctp_sack_info instead [ 599.053489][ T5932] usb 3-1: USB disconnect, device number 75 [ 599.080329][ T9] usb 5-1: config 0 has no interfaces? [ 599.087805][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.81 [ 599.097240][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.107754][ T9] usb 5-1: Product: syz [ 599.116468][ T9] usb 5-1: Manufacturer: syz [ 599.126760][ T9] usb 5-1: SerialNumber: syz [ 599.146224][ T9] usb 5-1: config 0 descriptor?? [ 599.359964][ T5932] usb 5-1: USB disconnect, device number 78 [ 599.825570][T14020] FAULT_INJECTION: forcing a failure. [ 599.825570][T14020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.868874][ T84] net_ratelimit: 253 callbacks suppressed [ 599.868895][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.036522][T14020] CPU: 1 UID: 0 PID: 14020 Comm: syz.2.2302 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.036553][T14020] Tainted: [L]=SOFTLOCKUP [ 600.036561][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.036572][T14020] Call Trace: [ 600.036580][T14020] [ 600.036589][T14020] dump_stack_lvl+0xe8/0x150 [ 600.036622][T14020] should_fail_ex+0x412/0x560 [ 600.036652][T14020] _copy_from_user+0x2d/0xb0 [ 600.036681][T14020] copy_folio_from_user+0x1e3/0x320 [ 600.036708][T14020] hugetlb_mfill_atomic_pte+0xe56/0x1730 [ 600.036752][T14020] mfill_atomic_copy+0xe28/0x1420 [ 600.036774][T14020] ? unwind_get_return_address+0x4d/0x90 [ 600.036816][T14020] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 600.036849][T14020] userfaultfd_ioctl+0x2c17/0x5130 [ 600.036876][T14020] ? kasan_save_track+0x4f/0x80 [ 600.036895][T14020] ? kasan_save_track+0x3e/0x80 [ 600.036930][T14020] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 600.036986][T14020] ? kasan_quarantine_put+0xbb/0x1f0 [ 600.037018][T14020] ? tomoyo_path_number_perm+0x219/0x630 [ 600.037154][T14020] ? tomoyo_path_number_perm+0x219/0x630 [ 600.037178][T14020] ? do_vfs_ioctl+0x1166/0x1530 [ 600.037209][T14020] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 600.037244][T14020] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 600.037286][T14020] ? __fget_files+0x2a/0x420 [ 600.037315][T14020] ? __fget_files+0x2a/0x420 [ 600.037339][T14020] ? __fget_files+0x3a0/0x420 [ 600.037363][T14020] ? __fget_files+0x2a/0x420 [ 600.037391][T14020] ? bpf_lsm_file_ioctl+0x9/0x20 [ 600.037425][T14020] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 600.037451][T14020] __se_sys_ioctl+0xfc/0x170 [ 600.037475][T14020] do_syscall_64+0x14d/0xf80 [ 600.037492][T14020] ? trace_irq_disable+0x3b/0x150 [ 600.037517][T14020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.037537][T14020] ? clear_bhb_loop+0x40/0x90 [ 600.037560][T14020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.037578][T14020] RIP: 0033:0x7f323fd9c799 [ 600.037598][T14020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.037614][T14020] RSP: 002b:00007f3240cc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.037632][T14020] RAX: ffffffffffffffda RBX: 00007f3240015fa0 RCX: 00007f323fd9c799 [ 600.037646][T14020] RDX: 00002000000000c0 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 600.037659][T14020] RBP: 00007f3240cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 600.037670][T14020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.037682][T14020] R13: 00007f3240016038 R14: 00007f3240015fa0 R15: 00007f324013fa48 [ 600.037712][T14020] [ 600.568379][ T84] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 600.628830][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.636248][ T84] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 600.691163][ T84] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 600.698833][ T84] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 600.708803][ T7469] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 600.771855][ T7469] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 600.800707][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.828515][ T7469] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 600.910129][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 600.919487][T14032] bond1: option mode: unable to set because the bond device has slaves [ 600.961641][T14032] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 601.161834][T14041] netlink: 'syz.1.2311': attribute type 1 has an invalid length. [ 601.178707][ T5932] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 601.328834][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 601.337698][ T5932] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 601.347619][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.356256][ T5932] usb 3-1: Product: syz [ 601.360784][ T5932] usb 3-1: Manufacturer: syz [ 601.365427][ T5932] usb 3-1: SerialNumber: syz [ 601.372712][ T5932] usb 3-1: config 0 descriptor?? [ 601.383132][ T5932] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 601.978702][T11358] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 601.987352][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 602.051993][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.068556][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.176754][T14055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.193525][T11358] usb 6-1: config 0 has no interfaces? [ 602.210789][T11358] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.81 [ 602.215180][T14055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.242657][T11358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.419810][T11358] usb 6-1: Product: syz [ 602.434927][T11358] usb 6-1: Manufacturer: syz [ 602.457165][T11358] usb 6-1: SerialNumber: syz [ 602.496912][T11358] usb 6-1: config 0 descriptor?? [ 602.996497][T12776] usb 6-1: USB disconnect, device number 17 [ 603.009382][ T5932] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 603.027411][ T5932] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 604.100095][ T9] usb 3-1: USB disconnect, device number 76 [ 604.428209][T14086] loop2: detected capacity change from 0 to 7 [ 604.434525][ T5933] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 604.470090][T14086] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 604.488848][T14086] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 604.520939][T14086] Dev loop2: unable to read RDB block 7 [ 604.538808][T14086] loop2: unable to read partition table [ 604.569068][T14086] loop2: partition table beyond EOD, truncated [ 604.708640][T14086] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 604.832588][ T5193] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 604.861875][ T5193] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 604.891981][ T7469] net_ratelimit: 270 callbacks suppressed [ 604.891995][ T7469] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 604.909411][ T5193] Dev loop2: unable to read RDB block 7 [ 604.914984][ T5193] loop2: unable to read partition table [ 604.938350][ T5193] loop2: partition table beyond EOD, truncated [ 605.108988][ T7449] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 605.153831][ T7455] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 605.258843][T12776] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 605.308830][T11549] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 605.332573][T14109] trusted_key: encrypted_key: insufficient parameters specified [ 605.399202][ T7450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.406938][ T7450] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 605.424916][ T7450] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 605.441045][ T7450] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 605.460631][T12776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 605.475229][T12776] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 605.497459][T12776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.518980][T11549] usb 4-1: Using ep0 maxpacket: 16 [ 605.547149][T11549] usb 4-1: config 0 has no interfaces? [ 605.554133][T12776] usb 6-1: config 0 descriptor?? [ 605.560098][ T7449] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 605.570036][T11549] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 605.579335][T11549] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 605.607829][ T7449] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 605.607969][T11549] usb 4-1: Manufacturer: syz [ 605.628895][ T7449] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.642107][T14099] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 605.643450][T11549] usb 4-1: config 0 descriptor?? [ 605.778813][ T5910] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 606.025239][ T5910] usb 5-1: config 0 has no interfaces? [ 606.035550][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.81 [ 606.044906][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.062551][T12776] hid (null): bogus close delimiter [ 606.072781][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.085004][ T5910] usb 5-1: Product: syz [ 606.095337][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.102393][ T5910] usb 5-1: Manufacturer: syz [ 606.141517][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.152282][ T5910] usb 5-1: SerialNumber: syz [ 606.157866][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.166141][ T5910] usb 5-1: config 0 descriptor?? [ 606.172014][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.179972][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.187838][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.196625][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.203906][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.767954][T14111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.785541][T14111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.807935][ T5910] usb 5-1: USB disconnect, device number 80 [ 606.851895][T12776] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0 [ 606.867045][T12776] asus 0003:0B05:1ABE.0025: unexpected long global item [ 606.891718][T12776] asus 0003:0B05:1ABE.0025: Asus hid parse failed: -22 [ 606.966515][T12776] asus 0003:0B05:1ABE.0025: probe with driver asus failed with error -22 [ 607.427602][T11549] usb 4-1: USB disconnect, device number 83 [ 607.881895][T14134] binder: 14128:14134 ioctl c0306201 2000000001c0 returned -22 [ 608.012846][ T5910] usb 6-1: USB disconnect, device number 18 [ 609.351538][T14153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2343'. [ 609.723457][T14159] netlink: 'syz.1.2341': attribute type 13 has an invalid length. [ 610.198847][ T7449] net_ratelimit: 235 callbacks suppressed [ 610.198870][ T7449] bond2: (slave ip6gretap3): link status up again after 0 ms [ 610.247978][T11549] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 610.296484][ T7449] bond2: (slave ip6gretap4): link status up again after 0 ms [ 610.338903][ T7455] bond2: (slave ip6gretap3): link status up again after 0 ms [ 610.346440][ T7455] bond2: (slave ip6gretap4): link status up again after 0 ms [ 610.358155][ T7455] bond2: (slave ip6gretap5): link status up again after 0 ms [ 610.414218][ T7455] bond2: (slave ip6gretap3): link status up again after 0 ms [ 610.458875][ T7455] bond2: (slave ip6gretap4): link status up again after 0 ms [ 610.488642][ T7455] bond2: (slave ip6gretap5): link status up again after 0 ms [ 610.529112][ T84] bond2: (slave ip6gretap3): link status up again after 0 ms [ 610.569013][ T84] bond2: (slave ip6gretap4): link status up again after 0 ms [ 610.638202][T14179] loop2: detected capacity change from 0 to 3 [ 610.667276][T14179] ldm_validate_privheads(): Disk read failed. [ 610.728117][T14179] Dev loop2: unable to read RDB block 3 [ 610.741152][T14179] loop2: unable to read partition table [ 610.748501][T14179] loop2: partition table beyond EOD, truncated [ 610.755894][T14179] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 610.788288][ T5193] ldm_validate_privheads(): Disk read failed. [ 610.795953][ T5193] Dev loop2: unable to read RDB block 3 [ 610.814969][ T5193] loop2: unable to read partition table [ 610.822263][ T5193] loop2: partition table beyond EOD, truncated [ 611.202997][T11549] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 611.412469][T14199] SET target dimension over the limit! [ 611.594076][T14203] ªªªªªª: renamed from vlan0 (while UP) [ 611.823466][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2360'. [ 611.835189][T14213] netlink: 'syz.1.2360': attribute type 13 has an invalid length. [ 611.946492][T14213] gretap0: refused to change device tx_queue_len [ 612.022927][T14216] loop2: detected capacity change from 0 to 3 [ 612.035871][T14216] ldm_validate_privheads(): Disk read failed. [ 612.046192][T14216] Dev loop2: unable to read RDB block 3 [ 612.088926][T14216] loop2: unable to read partition table [ 612.099572][T14216] loop2: partition table beyond EOD, truncated [ 612.107057][T14216] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 612.719923][ T7450] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 613.331239][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2366'. [ 613.608704][ T5933] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 613.676306][T14238] netlink: 'syz.5.2369': attribute type 27 has an invalid length. [ 613.808414][T11549] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 613.842302][ T5933] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 613.857086][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.873736][ T5933] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 613.899259][ T5933] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 613.921634][ T5933] usb 2-1: Manufacturer: syz [ 613.946527][ T5933] usb 2-1: config 0 descriptor?? [ 614.036061][T11549] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.058908][T11549] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.084343][T11549] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.133417][T11549] usb 4-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 614.171612][T11549] usb 4-1: config 1 interface 1 has no altsetting 0 [ 614.202332][T11549] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.212050][T11549] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.220402][ T5933] rc_core: IR keymap rc-hauppauge not found [ 614.228188][T11549] usb 4-1: Product: syz [ 614.235801][ T5933] Registered IR keymap rc-empty [ 614.252820][T11549] usb 4-1: Manufacturer: syz [ 614.261026][T11549] usb 4-1: SerialNumber: syz [ 614.273764][ T5933] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 614.285624][T11549] usb 4-1: selecting invalid altsetting 0 [ 614.292112][T11549] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 614.303259][ T5933] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 614.341582][T11549] usb 4-1: selecting invalid altsetting 0 [ 614.347845][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 614.410490][T12776] usb 2-1: USB disconnect, device number 113 [ 614.521757][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 614.530737][T14256] bond2: option mode: unable to set because the bond device has slaves [ 614.566595][T14256] bond2: (slave ip6gretap6): Enslaving as a backup interface with an up link [ 614.590358][T11549] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 614.630368][T11549] usb 4-1: USB disconnect, device number 84 [ 614.810151][ T7450] wlan0: Trigger new scan to find an IBSS to join [ 615.232121][T14269] loop2: detected capacity change from 0 to 7 [ 615.240839][T14269] Dev loop2: unable to read RDB block 7 [ 615.246554][T14269] loop2: unable to read partition table [ 615.303773][ T7449] net_ratelimit: 355 callbacks suppressed [ 615.303790][ T7449] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 615.317916][ T7449] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 615.328827][T14269] loop2: partition table beyond EOD, truncated [ 615.335007][T14269] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 615.344278][ T7449] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 615.351734][ T7449] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.359361][ T7449] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 615.367002][ T7450] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 615.458805][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.466288][ T35] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 615.508718][ T35] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 615.535033][ T35] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 615.771341][T14279] vlan2: entered allmulticast mode [ 615.777732][T14279] team0: entered allmulticast mode [ 615.783123][T14279] team_slave_0: entered allmulticast mode [ 615.790470][T14279] team_slave_1: entered allmulticast mode [ 616.366781][T14286] fuse: Unknown parameter '_roup_id' [ 616.580118][T14299] tun0: tun_chr_ioctl cmd 1074025675 [ 616.585474][T14299] tun0: persist disabled [ 616.599270][T14298] tun0: tun_chr_ioctl cmd 1074025675 [ 616.621212][T14295] fuse: Unknown parameter 'F!öo¦¤ ­ïj›x¦\Á§W`W™Çf÷Ž×nAñ0ÖD¼—c' [ 616.654108][T14298] tun0: persist enabled [ 617.118740][T14305] netlink: 'syz.1.2389': attribute type 27 has an invalid length. [ 617.509691][T14311] trusted_key: syz.5.2392 sent an empty control message without MSG_MORE. [ 618.301808][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 618.301826][ T29] audit: type=1326 audit(1773128421.482:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 618.394916][ T29] audit: type=1326 audit(1773128421.482:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 618.443013][ T29] audit: type=1326 audit(1773128421.482:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 618.467201][ T29] audit: type=1326 audit(1773128421.482:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 618.550604][ T29] audit: type=1326 audit(1773128421.482:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 618.664357][ T29] audit: type=1326 audit(1773128421.482:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 618.698069][ T5932] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 618.764461][ T29] audit: type=1326 audit(1773128421.482:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 618.800898][ T29] audit: type=1326 audit(1773128421.482:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 618.820462][T14347] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 618.909589][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 618.967797][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.989034][ T5932] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 619.081733][ T29] audit: type=1326 audit(1773128421.482:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 619.181501][ T5932] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 619.227062][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.263738][ T29] audit: type=1326 audit(1773128421.502:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14317 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323fd9c799 code=0x7ffc0000 [ 619.302588][T12776] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 619.390109][ T5932] usb 3-1: Product: syz [ 619.407333][ T5932] usb 3-1: Manufacturer: syz [ 619.435794][ T5932] usb 3-1: SerialNumber: syz [ 619.474155][ T5932] usb 3-1: config 0 descriptor?? [ 619.548757][T12776] usb 4-1: Using ep0 maxpacket: 16 [ 619.761025][ T7449] wlan0: Trigger new scan to find an IBSS to join [ 619.804710][T12776] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 619.861057][T12776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.879405][T12776] usb 4-1: Product: syz [ 619.886146][T12776] usb 4-1: Manufacturer: syz [ 619.893799][T12776] usb 4-1: SerialNumber: syz [ 619.951786][T12776] usb 4-1: config 0 descriptor?? [ 620.064891][T14365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 620.165279][T12776] hub 4-1:0.0: bad descriptor, ignoring hub [ 620.239813][T12776] hub 4-1:0.0: probe with driver hub failed with error -5 [ 620.331254][ T7455] net_ratelimit: 349 callbacks suppressed [ 620.331271][ T7455] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.349959][ T7455] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 620.357542][ T7455] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 620.467267][ T7455] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 620.518711][ T7455] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 620.543232][ T7455] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 620.576775][ T7455] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 620.628748][ T84] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 620.637422][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.665754][ T7469] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 620.930159][ T7449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.603744][T11549] usb 3-1: USB disconnect, device number 77 [ 621.973285][ T5910] usb 4-1: USB disconnect, device number 85 [ 622.099570][T12776] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 622.278742][T12776] usb 6-1: Using ep0 maxpacket: 8 [ 622.307273][T12776] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 622.347859][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 622.424420][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 622.447794][T12776] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.475462][T12776] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 622.499226][T12776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.768822][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 622.785724][T12776] usb 6-1: usb_control_msg returned -71 [ 622.821927][T12776] usbtmc 6-1:16.0: can't read capabilities [ 622.891844][T12776] usb 6-1: USB disconnect, device number 19 [ 622.908834][ T5910] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 622.944353][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 622.961191][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 623.030140][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 623.135627][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.159642][ T5910] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.161083][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 623.208686][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.249366][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 623.258498][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.314363][ T5910] usb 5-1: config 0 descriptor?? [ 623.357577][T14401] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 623.561097][T14402] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2419'. [ 624.243973][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.292264][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.293438][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 624.310871][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input33 [ 624.644654][T14421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.663765][T14421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.033515][T14425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2426'. [ 625.066066][T14425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2426'. [ 625.401803][ T35] net_ratelimit: 374 callbacks suppressed [ 625.401823][ T35] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 625.420506][ T35] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 625.428204][ T35] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 625.517491][ T9] usb 5-1: USB disconnect, device number 81 [ 625.523557][ T9828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.523582][ T9828] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 625.528866][ T9828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 625.569927][ T9828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.619784][ T9828] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 625.657650][ T9828] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 625.698854][ T5932] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 625.709938][ T9828] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 625.792559][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 625.792576][ T29] audit: type=1800 audit(1773128429.012:371): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2431" name="file0" dev="tmpfs" ino=2587 res=0 errno=0 [ 625.898323][ T5932] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 625.919745][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.938697][ T5932] usb 6-1: config 0 has no interface number 0 [ 625.944906][ T5932] usb 6-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 625.959702][ T5932] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 625.993661][T14457] netlink: 'syz.2.2433': attribute type 13 has an invalid length. [ 626.068283][ T5932] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 626.099799][ T5932] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 626.129905][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.199642][T12776] usb 4-1: USB disconnect, device number 86 [ 626.199637][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 626.208259][ T5932] usb 6-1: config 0 descriptor?? [ 626.368184][ T5932] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 626.452695][ T7469] usb 6-1: Failed to submit usb control message: -71 [ 626.460773][ T5932] usb 6-1: USB disconnect, device number 20 [ 626.476245][ T7469] usb 6-1: unable to send the bmi data to the device: -71 [ 626.514750][ T7469] usb 6-1: unable to get target info from device [ 626.757471][T14477] loop2: detected capacity change from 0 to 7 [ 626.778905][ T7469] usb 6-1: could not get target info (-71) [ 626.784865][ T7469] usb 6-1: could not probe fw (-71) [ 626.819670][T14477] Dev loop2: unable to read RDB block 7 [ 626.848864][T14477] loop2: unable to read partition table [ 626.874204][T14477] loop2: partition table beyond EOD, truncated [ 626.898899][T14477] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 627.125814][T14487] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2442'. [ 627.149881][T14488] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2442'. [ 627.199288][T12776] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 627.359674][T12776] usb 4-1: Using ep0 maxpacket: 16 [ 627.367799][T12776] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.380062][T14495] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2446'. [ 627.386585][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2445'. [ 627.389779][T12776] usb 4-1: config 0 has no interface number 0 [ 627.417117][T12776] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 627.426640][T12776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.429127][T14497] bond1: option mode: unable to set because the bond device has slaves [ 627.500181][T12776] usb 4-1: Product: syz [ 627.507838][T12776] usb 4-1: Manufacturer: syz [ 627.539679][T12776] usb 4-1: SerialNumber: syz [ 627.601148][T14497] bond1: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 627.636913][T12776] usb 4-1: config 0 descriptor?? [ 627.666125][T12776] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 627.877031][T14514] netlink: 'syz.2.2449': attribute type 27 has an invalid length. [ 628.170502][T14518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2448'. [ 628.191532][T14522] loop2: detected capacity change from 0 to 7 [ 628.242258][T14522] Dev loop2: unable to read RDB block 7 [ 628.254110][T14522] loop2: unable to read partition table [ 628.309002][T14522] loop2: partition table beyond EOD, truncated [ 628.315747][T14522] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 629.319247][T11358] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 629.508718][T11358] usb 3-1: device descriptor read/64, error -71 [ 629.658438][T14536] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 629.665004][T14536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 629.748778][T11358] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 629.780741][T14536] vhci_hcd vhci_hcd.0: Device attached [ 629.878800][T11358] usb 3-1: device descriptor read/64, error -71 [ 630.094178][T11358] usb usb3-port1: attempt power cycle [ 630.108822][ T5910] usb 42-1: SetAddress Request (2) to port 0 [ 630.115696][ T5910] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 630.215786][T14485] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2441'. [ 630.242497][T11549] usb 4-1: USB disconnect, device number 87 [ 630.449114][ T35] net_ratelimit: 357 callbacks suppressed [ 630.449134][ T35] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 630.488817][T11358] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 630.506928][ T35] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 630.524562][T11358] usb 3-1: device descriptor read/8, error -71 [ 630.538007][ T35] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 630.555019][T14537] vhci_hcd: connection reset by peer [ 630.565166][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.585725][ T9828] vhci_hcd vhci_hcd.4: stop threads [ 630.595843][ T35] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 630.603571][ T9828] vhci_hcd vhci_hcd.4: release socket [ 630.616473][ T9828] vhci_hcd vhci_hcd.4: disconnect device [ 630.642849][ T35] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 630.658945][ T35] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 630.689183][ T7469] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 630.696768][ T7469] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 630.711725][ T7469] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 630.789391][T11358] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 630.810432][T11358] usb 3-1: device descriptor read/8, error -71 [ 630.929214][T11358] usb usb3-port1: unable to enumerate USB device [ 631.660580][T14561] SET target dimension over the limit! [ 631.968842][T11358] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 632.139132][T11358] usb 2-1: Using ep0 maxpacket: 8 [ 632.157664][T11358] usb 2-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 632.305888][T11358] usb 2-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.328190][T14577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2469'. [ 632.575426][T11358] usb 2-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.612387][T11358] usb 2-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 632.646142][T11358] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.750452][T11358] usb 2-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 632.777338][T11358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.798808][ T5932] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 632.810142][T11358] usb 2-1: config 0 descriptor?? [ 632.840001][T14596] SET target dimension over the limit! [ 632.961262][T14598] fuse: Bad value for 'fd' [ 632.977776][ T5932] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.996521][ T5932] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 633.025538][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 633.047501][ T5932] usb 6-1: string descriptor 0 read error: -22 [ 633.054945][ T5932] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.064612][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.111210][ T5932] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.118779][ T5932] usb 6-1: MIDIStreaming interface descriptor not found [ 633.218750][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 633.284414][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.294084][T14563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.306491][T14563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.347716][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 633.397296][T11358] wacom 0003:056A:010E.0026: unbalanced collection at end of report description [ 633.408690][ T24] usb 3-1: config 1 interface 2 has no altsetting 0 [ 633.431779][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.445029][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.456335][T11358] wacom 0003:056A:010E.0026: parse failed [ 633.462413][ T24] usb 3-1: Product: syz [ 633.466927][T11358] wacom 0003:056A:010E.0026: probe with driver wacom failed with error -22 [ 633.478819][ T24] usb 3-1: Manufacturer: syz [ 633.483575][ T24] usb 3-1: SerialNumber: syz [ 633.597265][T11549] usb 2-1: USB disconnect, device number 114 [ 633.736340][ T24] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 633.784003][ T24] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 633.817300][ T24] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 633.845619][ T24] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 633.857804][ T24] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 633.866888][ T24] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 633.884496][ T24] usb 3-1: selecting invalid altsetting 0 [ 633.898111][ T24] usb 3-1: selecting invalid altsetting 0 [ 634.177122][ T24] usb 3-1: USB disconnect, device number 82 [ 634.337478][ T6828] udevd[6828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 634.800738][T14625] netlink: 'syz.3.2486': attribute type 1 has an invalid length. [ 635.182640][T14625] 8021q: adding VLAN 0 to HW filter on device bond13 [ 635.216279][T11358] usb 6-1: USB disconnect, device number 21 [ 635.235985][ T5910] usb 42-1: device descriptor read/8, error -110 [ 635.469493][ T9828] net_ratelimit: 371 callbacks suppressed [ 635.469512][ T9828] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 635.484313][ T9828] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 635.503924][ T9828] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 635.528742][ T7449] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.587460][ T7449] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 635.651945][ T7449] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 635.661656][ T5910] usb usb42-port1: attempt power cycle [ 635.680437][ T7449] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 635.729057][ T7449] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.736866][ T7449] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 635.751663][ T9828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 635.942504][T14650] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 636.167499][T14650] 8021q: adding VLAN 0 to HW filter on device bond8 [ 636.219503][ T5910] usb usb42-port1: unable to enumerate USB device [ 636.356105][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2495'. [ 636.414315][T14663] SET target dimension over the limit! [ 636.490196][T14658] netlink: 'syz.4.2494': attribute type 13 has an invalid length. [ 636.567670][T14657] 8021q: adding VLAN 0 to HW filter on device bond14 [ 636.743439][T14673] xt_hashlimit: size too large, truncated to 1048576 [ 636.848920][ T5933] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 637.138754][T11358] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 637.164244][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 637.218660][ T5933] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.233741][ T5933] usb 4-1: config 0 has no interface number 0 [ 637.242575][ T5933] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 637.285802][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.303000][ T5933] usb 4-1: Product: syz [ 637.310669][T11358] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.311793][ T5933] usb 4-1: Manufacturer: syz [ 637.328719][ T5933] usb 4-1: SerialNumber: syz [ 637.342528][T11358] usb 2-1: config 0 has no interface number 0 [ 637.363024][T11358] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 637.372630][ T5933] usb 4-1: config 0 descriptor?? [ 637.399329][T11358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.414368][ T5933] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 637.442455][ T5933] usb 4-1: selecting invalid altsetting 1 [ 637.450262][ T5933] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 637.467943][T11358] usb 2-1: Product: syz [ 637.488707][T11358] usb 2-1: Manufacturer: syz [ 637.493374][T11358] usb 2-1: SerialNumber: syz [ 637.531337][T11358] usb 2-1: config 0 descriptor?? [ 637.540871][ T5933] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 637.558315][T11358] usb 2-1: selecting invalid altsetting 1 [ 637.589881][T11358] dvb_ttusb_budget: ttusb_init_controller: error [ 637.595640][ T5933] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 637.633615][ T5933] usb 4-1: media controller created [ 637.633694][T11358] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 637.704205][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.780411][T11358] DVB: Unable to find symbol stv0299_attach() [ 637.801562][ T5933] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 637.909899][ T5933] zl10353_read_register: readreg error (reg=127, ret==-71) [ 637.915657][T11358] DVB: Unable to find symbol tda8083_attach() [ 637.946123][ T5933] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 637.958295][T11358] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 637.981315][T11358] usb 2-1: USB disconnect, device number 115 [ 638.099237][ T5910] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 638.201736][ T5933] usb 4-1: USB disconnect, device number 88 [ 638.301358][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 638.330846][ T5910] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 638.345025][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.355913][ T5910] usb 3-1: Product: syz [ 638.360764][ T5910] usb 3-1: Manufacturer: syz [ 638.365486][ T5910] usb 3-1: SerialNumber: syz [ 638.384761][ T5910] usb 3-1: config 0 descriptor?? [ 638.411177][ T5910] hub 3-1:0.0: bad descriptor, ignoring hub [ 638.417420][ T5910] hub 3-1:0.0: probe with driver hub failed with error -5 [ 638.505641][T14706] netlink: 'syz.1.2509': attribute type 1 has an invalid length. [ 638.718084][T14710] SET target dimension over the limit! [ 638.883439][T14706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 638.944750][T14716] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 639.359112][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 639.550026][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 639.574606][ T9] usb 6-1: config 0 has no interfaces? [ 639.654406][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 639.668850][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 639.682870][ T9] usb 6-1: Manufacturer: syz [ 639.699103][ T9] usb 6-1: config 0 descriptor?? [ 639.848875][ T5910] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 640.000543][ T5910] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 640.011129][ T5910] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 640.020184][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 640.029789][ T5910] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 640.050654][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 640.066533][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 640.088434][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 640.121056][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 640.183889][ T5910] usb 5-1: string descriptor 0 read error: -22 [ 640.194121][ T5910] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 640.206521][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.240638][ T5910] usb 5-1: config 0 descriptor?? [ 640.254578][ T5910] hub 5-1:0.0: bad descriptor, ignoring hub [ 640.262919][ T5910] hub 5-1:0.0: probe with driver hub failed with error -5 [ 640.539680][ T9828] net_ratelimit: 308 callbacks suppressed [ 640.539701][ T9828] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 640.555991][ T9828] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 640.564163][ T5910] usb 5-1: USB disconnect, device number 82 [ 640.581660][ T9828] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 640.598773][ T84] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 640.619327][ T9828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.633680][ T9828] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 640.717864][ T9828] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 640.743283][ T9828] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 640.789678][ T35] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 640.809178][ T9828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.778491][ T9] usb 3-1: USB disconnect, device number 83 [ 642.028236][T14764] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 642.150358][T14772] loop2: detected capacity change from 0 to 7 [ 642.463486][ T9] usb 6-1: USB disconnect, device number 22 [ 642.594957][T14772] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 642.734276][T14772] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 642.749560][T14772] Dev loop2: unable to read RDB block 7 [ 642.755420][T14772] loop2: unable to read partition table [ 642.828328][T14772] loop2: partition table beyond EOD, truncated [ 642.893706][T14772] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 643.699914][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 643.759154][T11549] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 643.888668][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 643.904272][ T9] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 643.914070][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.936131][ T9] usb 4-1: Product: syz [ 643.956387][ T9] usb 4-1: Manufacturer: syz [ 643.974730][T11549] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 644.023271][ T9] usb 4-1: SerialNumber: syz [ 644.027954][T11549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 644.075738][ T9] usb 4-1: config 0 descriptor?? [ 644.085904][T11549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 644.093988][ T7469] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 644.122509][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 644.152069][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 644.180492][T11549] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 644.222866][T11549] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 644.243103][T11549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.266563][T11549] usb 3-1: config 0 descriptor?? [ 644.727463][T11549] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 644.897866][ T5910] usb 3-1: USB disconnect, device number 84 [ 645.361715][T14818] fuse: Unknown parameter '' [ 645.549819][ T7469] net_ratelimit: 315 callbacks suppressed [ 645.549841][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.567969][ T7469] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 645.617168][ T7469] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 646.201683][ T7469] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 646.248779][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.257261][ T35] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 646.325066][ T9828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 646.348854][ T7449] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.356442][ T7449] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 646.371951][ T7449] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 646.415882][T14830] FAULT_INJECTION: forcing a failure. [ 646.415882][T14830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.429499][ T5910] usb 4-1: USB disconnect, device number 89 [ 646.492631][T14830] CPU: 1 UID: 0 PID: 14830 Comm: syz.3.2545 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.492659][T14830] Tainted: [L]=SOFTLOCKUP [ 646.492665][T14830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.492675][T14830] Call Trace: [ 646.492682][T14830] [ 646.492690][T14830] dump_stack_lvl+0xe8/0x150 [ 646.492720][T14830] should_fail_ex+0x412/0x560 [ 646.492747][T14830] _copy_to_iter+0x589/0x17d0 [ 646.492881][T14830] ? __pfx__copy_to_iter+0x10/0x10 [ 646.492905][T14830] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 646.492965][T14830] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.492991][T14830] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 646.493016][T14830] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 646.493084][T14830] __skb_datagram_iter+0xf8/0x980 [ 646.493103][T14830] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 646.493127][T14830] skb_copy_datagram_iter+0xb5/0x270 [ 646.493148][T14830] netlink_recvmsg+0x2c3/0xa50 [ 646.493223][T14830] ? __lock_acquire+0x6b5/0x2cf0 [ 646.493251][T14830] ? __pfx_netlink_recvmsg+0x10/0x10 [ 646.493279][T14830] ? aa_sock_msg_perm+0xf1/0x1b0 [ 646.493350][T14830] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 646.493368][T14830] ? security_socket_recvmsg+0x7e/0x2c0 [ 646.493435][T14830] ? __pfx_netlink_recvmsg+0x10/0x10 [ 646.493457][T14830] sock_recvmsg+0x172/0x1b0 [ 646.493511][T14830] ____sys_recvmsg+0x1e6/0x4a0 [ 646.493560][T14830] ? __pfx_____sys_recvmsg+0x10/0x10 [ 646.493581][T14830] ? import_iovec+0x73/0xa0 [ 646.493598][T14830] ___sys_recvmsg+0x215/0x590 [ 646.493611][T14830] ? __pfx____sys_recvmsg+0x10/0x10 [ 646.493632][T14830] ? __fget_files+0x3a0/0x420 [ 646.493651][T14830] do_recvmmsg+0x334/0x800 [ 646.493665][T14830] ? __pfx_do_recvmmsg+0x10/0x10 [ 646.493680][T14830] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 646.493698][T14830] __x64_sys_recvmmsg+0x198/0x250 [ 646.493709][T14830] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 646.493725][T14830] do_syscall_64+0x14d/0xf80 [ 646.493734][T14830] ? trace_irq_disable+0x3b/0x150 [ 646.493748][T14830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.493759][T14830] ? clear_bhb_loop+0x40/0x90 [ 646.493771][T14830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.493781][T14830] RIP: 0033:0x7f1af7b9c799 [ 646.493793][T14830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.493802][T14830] RSP: 002b:00007f1af8b28028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 646.493813][T14830] RAX: ffffffffffffffda RBX: 00007f1af7e15fa0 RCX: 00007f1af7b9c799 [ 646.493820][T14830] RDX: 0000000000000003 RSI: 0000200000003200 RDI: 0000000000000003 [ 646.493827][T14830] RBP: 00007f1af8b28090 R08: 0000000000000000 R09: 0000000000000000 [ 646.493833][T14830] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 646.493842][T14830] R13: 00007f1af7e16038 R14: 00007f1af7e15fa0 R15: 00007f1af7f3fa48 [ 646.493858][T14830] [ 647.852263][T14846] FAULT_INJECTION: forcing a failure. [ 647.852263][T14846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.917957][T14846] CPU: 0 UID: 0 PID: 14846 Comm: syz.3.2548 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.917988][T14846] Tainted: [L]=SOFTLOCKUP [ 647.917995][T14846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.918006][T14846] Call Trace: [ 647.918013][T14846] [ 647.918021][T14846] dump_stack_lvl+0xe8/0x150 [ 647.918050][T14846] should_fail_ex+0x412/0x560 [ 647.918075][T14846] _copy_from_user+0x2d/0xb0 [ 647.918101][T14846] ___sys_sendmsg+0x1c6/0x360 [ 647.918123][T14846] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.918165][T14846] ? __fget_files+0x2a/0x420 [ 647.918187][T14846] ? __fget_files+0x3a0/0x420 [ 647.918218][T14846] __x64_sys_sendmsg+0x1bd/0x2a0 [ 647.918239][T14846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.918262][T14846] ? __pfx_ksys_write+0x10/0x10 [ 647.918288][T14846] do_syscall_64+0x14d/0xf80 [ 647.918305][T14846] ? trace_irq_disable+0x3b/0x150 [ 647.918328][T14846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.918345][T14846] ? clear_bhb_loop+0x40/0x90 [ 647.918367][T14846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.918384][T14846] RIP: 0033:0x7f1af7b9c799 [ 647.918400][T14846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.918416][T14846] RSP: 002b:00007f1af8b28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.918435][T14846] RAX: ffffffffffffffda RBX: 00007f1af7e15fa0 RCX: 00007f1af7b9c799 [ 647.918449][T14846] RDX: 0000000020000880 RSI: 0000200000000f80 RDI: 0000000000000003 [ 647.918461][T14846] RBP: 00007f1af8b28090 R08: 0000000000000000 R09: 0000000000000000 [ 647.918472][T14846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.918482][T14846] R13: 00007f1af7e16038 R14: 00007f1af7e15fa0 R15: 00007f1af7f3fa48 [ 647.918510][T14846] [ 648.424022][T14851] netlink: 'syz.1.2549': attribute type 13 has an invalid length. [ 649.768758][ T7450] wlan0: Trigger new scan to find an IBSS to join [ 649.888901][ T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 650.069505][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 650.129263][ T24] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 650.229946][T14875] FAULT_INJECTION: forcing a failure. [ 650.229946][T14875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.259272][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.293868][T14875] CPU: 0 UID: 0 PID: 14875 Comm: syz.4.2556 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.293899][T14875] Tainted: [L]=SOFTLOCKUP [ 650.293906][T14875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.293917][T14875] Call Trace: [ 650.293925][T14875] [ 650.293933][T14875] dump_stack_lvl+0xe8/0x150 [ 650.293964][T14875] should_fail_ex+0x412/0x560 [ 650.293991][T14875] _copy_to_iter+0x589/0x17d0 [ 650.294029][T14875] ? __pfx__copy_to_iter+0x10/0x10 [ 650.294053][T14875] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.294078][T14875] ? lockdep_hardirqs_on+0x7a/0x110 [ 650.294104][T14875] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 650.294129][T14875] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 650.294154][T14875] __skb_datagram_iter+0xf8/0x980 [ 650.294174][T14875] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 650.294202][T14875] skb_copy_datagram_iter+0xb5/0x270 [ 650.294225][T14875] netlink_recvmsg+0x2c3/0xa50 [ 650.294249][T14875] ? __lock_acquire+0x6b5/0x2cf0 [ 650.294278][T14875] ? __pfx_netlink_recvmsg+0x10/0x10 [ 650.294307][T14875] ? aa_sock_msg_perm+0xf1/0x1b0 [ 650.294332][T14875] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 650.294352][T14875] ? security_socket_recvmsg+0x7e/0x2c0 [ 650.294379][T14875] ? __pfx_netlink_recvmsg+0x10/0x10 [ 650.294403][T14875] sock_recvmsg+0x172/0x1b0 [ 650.294428][T14875] ____sys_recvmsg+0x1e6/0x4a0 [ 650.294454][T14875] ? __pfx_____sys_recvmsg+0x10/0x10 [ 650.294486][T14875] ? import_iovec+0x73/0xa0 [ 650.294514][T14875] ___sys_recvmsg+0x215/0x590 [ 650.294538][T14875] ? __pfx____sys_recvmsg+0x10/0x10 [ 650.294585][T14875] ? __fget_files+0x3a0/0x420 [ 650.294621][T14875] do_recvmmsg+0x334/0x800 [ 650.294646][T14875] ? __pfx_do_recvmmsg+0x10/0x10 [ 650.294675][T14875] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 650.294709][T14875] __x64_sys_recvmmsg+0x198/0x250 [ 650.294731][T14875] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 650.294761][T14875] do_syscall_64+0x14d/0xf80 [ 650.294777][T14875] ? trace_irq_disable+0x3b/0x150 [ 650.294801][T14875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.294820][T14875] ? clear_bhb_loop+0x40/0x90 [ 650.294842][T14875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.294860][T14875] RIP: 0033:0x7f3d3a19c799 [ 650.294878][T14875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.294896][T14875] RSP: 002b:00007f3d3b0b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 650.294915][T14875] RAX: ffffffffffffffda RBX: 00007f3d3a415fa0 RCX: 00007f3d3a19c799 [ 650.294928][T14875] RDX: 0000000000000003 RSI: 0000200000003200 RDI: 0000000000000003 [ 650.294940][T14875] RBP: 00007f3d3b0b3090 R08: 0000000000000000 R09: 0000000000000000 [ 650.294952][T14875] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 650.294963][T14875] R13: 00007f3d3a416038 R14: 00007f3d3a415fa0 R15: 00007f3d3a53fa48 [ 650.294992][T14875] [ 650.305187][ T24] usb 2-1: Product: syz [ 650.620409][ T35] net_ratelimit: 141 callbacks suppressed [ 650.620429][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.663858][ T24] usb 2-1: Manufacturer: syz [ 650.672013][ T24] usb 2-1: SerialNumber: syz [ 650.712764][T14885] netlink: 'syz.5.2561': attribute type 1 has an invalid length. [ 650.758841][ T35] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 650.766262][ T35] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 650.802939][ T24] usb 2-1: config 0 descriptor?? [ 650.836719][ T35] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 650.865403][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 650.871582][ T7450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.920816][T14890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.952618][ T7450] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 650.963647][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 651.015737][T14885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.061198][T14887] bond1: (slave geneve2): making interface the new active one [ 651.069976][T14887] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 651.319222][ T35] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 651.331817][ T35] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 651.345340][ T35] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 651.448150][ T84] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.463362][ T84] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.582238][ T84] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.635739][ T84] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.929180][ T9828] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 652.359174][ T5910] usb 2-1: USB disconnect, device number 116 [ 654.238770][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 654.247014][T14908] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 654.320469][ T7449] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.518759][ T5933] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 654.928661][ T5910] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 655.045315][ T7449] wlan0: Trigger new scan to find an IBSS to join [ 655.208685][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 655.208705][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 655.210276][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.234877][ T5933] usb 2-1: config 0 has no interfaces? [ 655.289502][ T5933] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 655.304357][ T5933] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 655.308664][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 655.312515][ T5933] usb 2-1: Manufacturer: syz [ 655.367434][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 655.454496][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 655.481002][ T5933] usb 2-1: config 0 descriptor?? [ 655.511529][ T5910] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 655.596703][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.642754][ T5910] hub 5-1:1.0: bad descriptor, ignoring hub [ 655.668753][T11549] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 655.675214][ T5910] hub 5-1:1.0: probe with driver hub failed with error -5 [ 655.709043][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 655.730588][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 655.760224][ T5910] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 655.774085][ T5910] cdc_wdm 5-1:1.0: Unknown control protocol [ 655.792606][T14941] loop2: detected capacity change from 0 to 7 [ 655.819268][T14941] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 655.863312][ T5910] usb 5-1: Failed to suspend device, error -71 [ 655.879808][ T5910] usb 5-1: USB disconnect, device number 83 [ 655.891022][T14941] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 655.931766][T14941] Dev loop2: unable to read RDB block 7 [ 655.939202][T11549] usb 4-1: Using ep0 maxpacket: 16 [ 655.959863][T14941] loop2: unable to read partition table [ 655.966500][T11549] usb 4-1: config 0 has no interfaces? [ 655.984612][T11549] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 656.000142][T14941] loop2: partition table beyond EOD, truncated [ 656.034069][T11549] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 656.042923][ T9] usb 2-1: USB disconnect, device number 117 [ 656.067301][T11549] usb 4-1: Manufacturer: syz [ 656.092230][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.107223][T14941] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 656.107731][T11549] usb 4-1: config 0 descriptor?? [ 656.217077][T14946] netlink: 'syz.1.2573': attribute type 1 has an invalid length. [ 656.289358][ T84] net_ratelimit: 260 callbacks suppressed [ 656.289376][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.331290][ T84] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 656.361444][ T84] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 656.395956][ T84] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 656.408813][ T5910] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 656.450669][T14946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 656.470722][ T7469] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 656.520881][ T7469] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 656.528308][ T7469] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 656.538813][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.546722][ T7469] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 656.570068][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 656.578848][ T7457] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 656.608908][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.628755][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 656.662741][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 656.705185][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 656.721694][ T5910] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 656.733608][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.758305][ T5910] hub 5-1:1.0: bad descriptor, ignoring hub [ 656.780636][ T5910] hub 5-1:1.0: probe with driver hub failed with error -5 [ 656.791019][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 656.797561][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 657.500127][ T5910] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 657.507901][ T5910] cdc_wdm 5-1:1.0: Unknown control protocol [ 657.710240][ T5910] usb 5-1: USB disconnect, device number 84 [ 657.971869][T11549] usb 4-1: USB disconnect, device number 90 [ 659.439451][T14981] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2583'. [ 659.966158][T14997] loop2: detected capacity change from 0 to 7 [ 659.986182][T14997] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 660.006446][T14997] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 660.020234][T14997] Dev loop2: unable to read RDB block 7 [ 660.036096][T14997] loop2: unable to read partition table [ 660.046326][T14997] loop2: partition table beyond EOD, truncated [ 660.067652][T14997] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 660.086517][ T5193] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 660.125345][ T5193] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 660.196689][ T5193] Dev loop2: unable to read RDB block 7 [ 660.235910][ T5193] loop2: unable to read partition table [ 660.274460][ T5193] loop2: partition table beyond EOD, truncated [ 660.619504][ T29] audit: type=1326 audit(1773128463.842:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15002 comm="syz.1.2591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9380f9c799 code=0x0 [ 660.998813][ T5910] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 661.078862][T15014] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 661.189512][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 661.211159][ T5910] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 661.258410][ T5910] usb 2-1: can't read configurations, error -61 [ 661.370972][ T7469] net_ratelimit: 258 callbacks suppressed [ 661.370988][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.427969][ T7469] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 661.459299][ T7469] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 661.478214][ T7469] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 661.518829][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.527064][ T35] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 661.548694][ T35] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 661.568759][ T5910] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 661.606162][ T35] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 661.638751][ T35] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 661.664417][ T35] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 661.724221][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2597'. [ 661.829174][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 661.840737][ T5910] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 661.852665][ T5910] usb 2-1: can't read configurations, error -61 [ 661.909042][ T5910] usb usb2-port1: attempt power cycle [ 662.308851][ T5910] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 662.327325][T15043] loop2: detected capacity change from 0 to 7 [ 662.336545][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 662.344673][ T5910] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 662.352845][ T5910] usb 2-1: can't read configurations, error -61 [ 662.365038][T15043] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 662.416530][T15045] netlink: 'syz.5.2603': attribute type 13 has an invalid length. [ 662.489343][T15043] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 662.526651][ T5910] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 662.542142][T15043] Dev loop2: unable to read RDB block 7 [ 662.547828][T15043] loop2: unable to read partition table [ 662.559796][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 662.567046][ T5910] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 662.575077][ T5910] usb 2-1: can't read configurations, error -61 [ 662.581691][T15043] loop2: partition table beyond EOD, truncated [ 662.591357][T15043] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 662.621895][ T5910] usb usb2-port1: unable to enumerate USB device [ 662.692133][T15049] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2604'. [ 663.558740][ T5910] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 663.728668][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 663.735696][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 663.764675][T15061] trusted_key: encrypted_key: keylen parameter is missing [ 663.918472][ T5910] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 663.928895][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 663.943939][ T5910] usb 5-1: Product: syz [ 663.967975][ T5910] usb 5-1: Manufacturer: syz [ 663.981723][ T5910] usb 5-1: SerialNumber: syz [ 664.035943][ T5910] usb 5-1: config 0 descriptor?? [ 664.054175][T15055] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 664.359830][ T5933] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 664.377365][ T5910] usb 5-1: USB disconnect, device number 85 [ 664.550332][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.562307][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.608755][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 664.634365][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 664.689482][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.770387][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 664.778656][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 664.788953][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 664.790206][ T5933] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.832265][ T29] audit: type=1326 audit(1773128468.042:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 664.894638][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.909930][ T29] audit: type=1326 audit(1773128468.042:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1af7b5cfce code=0x7ffc0000 [ 664.948232][ T5933] usb 3-1: config 0 descriptor?? [ 665.045991][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 665.083863][ T24] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 665.093277][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.094486][ T29] audit: type=1326 audit(1773128468.042:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1af7b5cfce code=0x7ffc0000 [ 665.103463][ T24] usb 6-1: Product: syz [ 665.216018][ T24] usb 6-1: Manufacturer: syz [ 665.226160][ T24] usb 6-1: SerialNumber: syz [ 665.243345][ T29] audit: type=1326 audit(1773128468.042:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 665.315920][ T24] usb 6-1: config 0 descriptor?? [ 665.333702][ T24] radioshark 6-1:0.0: Invalid radioSHARK device [ 665.340602][ T24] radioshark 6-1:0.0: probe with driver radioshark failed with error -22 [ 665.362134][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 665.368662][ T29] audit: type=1326 audit(1773128468.042:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 665.626981][T15071] netlink: 'syz.5.2610': attribute type 2 has an invalid length. [ 665.671867][ T29] audit: type=1326 audit(1773128468.042:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 665.731745][T15071] @„;: entered promiscuous mode [ 665.818929][ T24] usb 6-1: USB disconnect, device number 23 [ 665.839093][ T29] audit: type=1326 audit(1773128468.042:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 665.903621][T15085] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2615'. [ 665.915801][ T29] audit: type=1326 audit(1773128468.042:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 666.031239][ T29] audit: type=1326 audit(1773128468.042:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 666.180912][ T29] audit: type=1326 audit(1773128468.042:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 666.345117][ T29] audit: type=1326 audit(1773128468.042:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 666.422694][ T7449] net_ratelimit: 361 callbacks suppressed [ 666.422708][ T7449] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 666.465754][ T29] audit: type=1326 audit(1773128468.042:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 666.469436][ T7449] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.489973][T15088] loop2: detected capacity change from 0 to 7 [ 666.536866][T15088] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 666.548715][ T29] audit: type=1326 audit(1773128468.042:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 666.597282][ T29] audit: type=1326 audit(1773128468.042:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 666.634572][T15088] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 666.648239][T15088] Dev loop2: unable to read RDB block 7 [ 666.772039][ T7449] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 666.785245][ T7449] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 666.793619][ T29] audit: type=1326 audit(1773128468.042:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.3.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c799 code=0x7ffc0000 [ 666.816468][T15088] loop2: unable to read partition table [ 666.822960][ T7449] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 666.836538][T15088] loop2: partition table beyond EOD, truncated [ 666.858833][ T7449] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 666.888784][T15088] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 666.898901][ T84] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 666.999634][ T84] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 667.045556][ T84] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 667.078827][ T7469] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 667.155768][ T5193] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 667.166182][ T5193] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 667.193966][ T5193] Dev loop2: unable to read RDB block 7 [ 667.207478][ T5193] loop2: unable to read partition table [ 667.222307][ T5193] loop2: partition table beyond EOD, truncated [ 667.324680][ T5933] usbhid 3-1:0.0: can't add hid device: -71 [ 667.331890][ T5933] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 667.418881][ T5933] usb 3-1: USB disconnect, device number 85 [ 668.188997][T15110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2623'. [ 668.748983][T15121] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2628'. [ 669.678997][T15101] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 669.685440][T11603] Bluetooth: hci5: command 0x0c1a tx timeout [ 669.817192][T15136] loop2: detected capacity change from 0 to 3 [ 669.843913][T15136] ldm_validate_privheads(): Disk read failed. [ 669.862623][T15136] Dev loop2: unable to read RDB block 3 [ 669.876901][T15136] loop2: unable to read partition table [ 669.892749][T15136] loop2: partition table beyond EOD, truncated [ 669.909812][T15136] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 669.938759][ T5910] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 670.018908][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 670.070499][ T5910] usb 2-1: device descriptor read/64, error -71 [ 670.171039][ T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 670.179971][ T24] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 670.194975][ T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 670.218208][ T24] usb 3-1: config 220 has no interface number 2 [ 670.234622][ T24] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 670.272130][ T24] usb 3-1: config 220 interface 0 has no altsetting 0 [ 670.285454][ T24] usb 3-1: config 220 interface 76 has no altsetting 0 [ 670.305452][ T24] usb 3-1: config 220 interface 1 has no altsetting 0 [ 670.322419][ T5910] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 670.464673][ T5910] usb 2-1: device descriptor read/64, error -71 [ 670.495841][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 670.517411][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.533506][ T24] usb 3-1: Product: syz [ 670.540288][ T24] usb 3-1: Manufacturer: syz [ 670.547133][ T24] usb 3-1: SerialNumber: syz [ 670.578934][ T5910] usb usb2-port1: attempt power cycle [ 671.150805][ T24] usb 3-1: selecting invalid altsetting 0 [ 671.156987][ T24] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 671.173579][ T5910] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 671.184400][ T24] uvcvideo 3-1:220.0: No valid video chain found. [ 671.197521][ T24] usb 3-1: selecting invalid altsetting 0 [ 671.206307][ T5910] usb 2-1: device descriptor read/8, error -71 [ 671.214454][ T24] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 671.291883][ T24] usb 3-1: USB disconnect, device number 86 [ 671.448750][ T5910] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 671.472658][ T5910] usb 2-1: device descriptor read/8, error -71 [ 671.491071][ T7449] net_ratelimit: 346 callbacks suppressed [ 671.491089][ T7449] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 671.510185][ T7449] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.518679][ T7449] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 671.526118][ T7449] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 671.534589][ T7449] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 671.548882][ T35] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 671.556331][ T35] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 671.564223][ T35] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 671.578773][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.588853][ T5910] usb usb2-port1: unable to enumerate USB device [ 671.601951][ T35] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 672.654847][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 672.668522][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 672.677552][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 675.358889][T15179] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 675.368723][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 675.540582][T15197] loop2: detected capacity change from 0 to 7 [ 675.550826][T15197] Dev loop2: unable to read RDB block 7 [ 675.556465][T15197] loop2: unable to read partition table [ 675.562388][T15198] netlink: 'syz.1.2652': attribute type 13 has an invalid length. [ 675.571298][T15197] loop2: partition table beyond EOD, truncated [ 675.586184][T15197] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 675.629057][T11358] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 675.755945][T15204] Cannot find add_set index 2 as target [ 675.769826][ T7449] wlan0: Trigger new scan to find an IBSS to join [ 675.789130][T11358] usb 3-1: Using ep0 maxpacket: 16 [ 675.795729][T15204] syz.5.2654 (15204): attempted to duplicate a private mapping with mremap. This is not supported. [ 675.812111][T11358] usb 3-1: config index 0 descriptor too short (expected 526, got 367) [ 675.820696][T11358] usb 3-1: config 0 has an invalid interface number: 209 but max is 0 [ 675.830455][T11358] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.842291][T11358] usb 3-1: config 0 has no interface number 0 [ 675.848489][T11358] usb 3-1: config 0 interface 209 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 675.862454][T11358] usb 3-1: config 0 interface 209 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 675.883337][T11358] usb 3-1: config 0 interface 209 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 675.899209][T11358] usb 3-1: config 0 interface 209 has no altsetting 0 [ 675.910394][T11358] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 675.921541][T11358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.932130][T11358] usb 3-1: Product: syz [ 675.936450][T11358] usb 3-1: Manufacturer: syz [ 675.941816][T11358] usb 3-1: SerialNumber: syz [ 675.955100][T11358] usb 3-1: config 0 descriptor?? [ 676.008941][ T5910] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 676.069638][T11549] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 676.083045][ T9828] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 676.171669][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 676.190278][ T5910] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 676.198637][ T5910] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 676.208711][ T5910] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 676.219408][ T5910] usb 2-1: config 220 has no interface number 2 [ 676.226905][ T5910] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 676.240860][ T5910] usb 2-1: config 220 interface 0 has no altsetting 0 [ 676.241406][T11549] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 676.247717][ T5910] usb 2-1: config 220 interface 76 has no altsetting 0 [ 676.266531][ T5910] usb 2-1: config 220 interface 1 has no altsetting 0 [ 676.268021][T11549] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 676.277291][ T5910] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 676.293859][T11549] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.305889][T11549] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 676.306097][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.327612][T11549] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.328128][ T5910] usb 2-1: Product: syz [ 676.339460][ T5910] usb 2-1: Manufacturer: syz [ 676.342003][T11549] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 676.344074][ T5910] usb 2-1: SerialNumber: syz [ 676.358015][T11549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.371786][T11549] usb 5-1: config 0 descriptor?? [ 676.519409][ T7457] net_ratelimit: 359 callbacks suppressed [ 676.519431][ T7457] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 676.534086][ T7457] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 676.541572][ T7457] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 676.550345][ T7457] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 676.649282][ T9828] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 676.658001][ T9828] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 676.666142][ T9828] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 676.689442][ T9828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 676.705621][ T9828] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 676.714083][ T5910] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 676.721492][ T9828] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 676.733236][ T5910] uvcvideo 2-1:220.0: No valid video chain found. [ 676.742906][ T5910] usb 2-1: selecting invalid altsetting 0 [ 676.763885][ T5910] usb 2-1: selecting invalid altsetting 0 [ 676.770219][ T5910] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 676.794205][T11549] usbhid 5-1:0.0: can't add hid device: -71 [ 676.810832][T11549] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 676.843134][ T5910] usb 2-1: USB disconnect, device number 126 [ 676.870265][T11549] usb 5-1: USB disconnect, device number 86 [ 677.186823][T15230] loop2: detected capacity change from 0 to 3 [ 677.212603][T11549] usb 3-1: USB disconnect, device number 87 [ 677.232813][ T5836] ldm_validate_privheads(): Disk read failed. [ 677.248202][ T5836] Dev loop2: unable to read RDB block 3 [ 677.260160][ T5836] loop2: unable to read partition table [ 677.266226][ T5836] loop2: partition table beyond EOD, truncated [ 677.275672][T15230] ldm_validate_privheads(): Disk read failed. [ 677.295477][T15230] Dev loop2: unable to read RDB block 3 [ 677.306413][T15230] loop2: unable to read partition table [ 677.360598][T15230] loop2: partition table beyond EOD, truncated [ 677.378718][T15230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 677.423536][ T5193] ldm_validate_privheads(): Disk read failed. [ 677.448694][ T5193] Dev loop2: unable to read RDB block 3 [ 677.455937][ T5193] loop2: unable to read partition table [ 677.465816][ T5193] loop2: partition table beyond EOD, truncated [ 678.964008][ T7469] wlan0: Trigger new scan to find an IBSS to join [ 679.958735][ T30] INFO: task syz.0.1998:12944 blocked for more than 143 seconds. [ 679.993863][ T30] Tainted: G L syzkaller #0 [ 680.133651][T15265] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2672'. [ 680.153266][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.171694][ T30] task:syz.0.1998 state:D stack:24960 pid:12944 tgid:12944 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 680.207602][ T30] Call Trace: [ 680.222280][ T30] [ 680.235264][ T30] __schedule+0x15dd/0x52d0 [ 680.247333][ T30] ? __pfx___schedule+0x10/0x10 [ 680.284296][ T30] ? schedule+0x90/0x360 [ 680.290828][ T30] schedule+0x164/0x360 [ 680.296374][ T30] schedule_timeout+0xc3/0x2c0 [ 680.306809][ T30] ? finish_task_switch+0x240/0x920 [ 680.340552][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 680.358651][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 680.371007][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.383949][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.397257][ T30] ? wait_for_completion+0x274/0x5e0 [ 680.443332][ T30] wait_for_completion+0x2cc/0x5e0 [ 680.455541][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 680.471465][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.488763][ T30] restrict_one_thread_callback+0x320/0x570 [ 680.501844][ T30] task_work_run+0x1d9/0x270 [ 680.506509][ T30] ? __pfx_task_work_run+0x10/0x10 [ 680.512263][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 680.517661][ T30] get_signal+0x11eb/0x1330 [ 680.522303][ T30] ? __free_object+0x442/0x5e0 [ 680.527163][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 680.532528][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 680.538679][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 680.544291][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 680.590686][ T30] ? futex_wait_restart+0x1f5/0x470 [ 680.598709][ T30] exit_to_user_mode_loop+0x86/0x480 [ 680.604212][ T30] ? rcu_is_watching+0x15/0xb0 [ 680.610311][ T30] do_syscall_64+0x32d/0xf80 [ 680.617648][ T30] ? trace_irq_disable+0x3b/0x150 [ 680.630904][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.652787][ T30] ? clear_bhb_loop+0x40/0x90 [ 680.661645][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.670959][ T30] RIP: 0033:0x7fdb0879c799 [ 680.675380][ T30] RSP: 002b:00007fdb08b3fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 680.688747][ T30] RAX: fffffffffffffdfc RBX: 000000000007f944 RCX: 00007fdb0879c799 [ 680.698415][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb08a1618c [ 680.706600][ T30] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 680.716313][ T30] R10: 00007fdb08b3fcb0 R11: 0000000000000246 R12: 00007fdb08b3fcd0 [ 680.740190][ T30] R13: 00007fdb08a1618c R14: 000000000007f976 R15: 00007fdb08b3fcb0 [ 680.766108][ T30] [ 680.769364][ T30] INFO: task syz.0.1998:12945 blocked for more than 144 seconds. [ 680.777173][ T30] Tainted: G L syzkaller #0 [ 680.787123][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.835696][ T30] task:syz.0.1998 state:D stack:27744 pid:12945 tgid:12944 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 680.847938][ T30] Call Trace: [ 680.851286][ T30] [ 680.854227][ T30] __schedule+0x15dd/0x52d0 [ 680.860430][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 680.866334][ T30] ? __pfx___schedule+0x10/0x10 [ 680.873106][ T30] ? schedule+0x90/0x360 [ 680.877412][ T30] schedule+0x164/0x360 [ 680.881884][ T30] schedule_timeout+0xc3/0x2c0 [ 680.886794][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 680.892245][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.897332][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.902703][ T30] ? wait_for_completion+0x274/0x5e0 [ 680.908084][ T30] wait_for_completion+0x2cc/0x5e0 [ 680.984381][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 680.990302][ T30] ? restrict_one_thread_callback+0x15b/0x570 [ 680.996447][ T30] restrict_one_thread_callback+0x320/0x570 [ 681.003005][ T30] task_work_run+0x1d9/0x270 [ 681.007621][ T30] ? __pfx_task_work_run+0x10/0x10 [ 681.012918][ T30] ? __pfx_futex_wait+0x10/0x10 [ 681.017796][ T30] get_signal+0x11eb/0x1330 [ 681.022968][ T30] ? do_futex+0x333/0x420 [ 681.027323][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 681.033146][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 681.040786][ T30] exit_to_user_mode_loop+0x86/0x480 [ 681.046089][ T30] ? rcu_is_watching+0x15/0xb0 [ 681.051025][ T30] do_syscall_64+0x32d/0xf80 [ 681.055632][ T30] ? trace_irq_disable+0x3b/0x150 [ 681.061412][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.067492][ T30] ? clear_bhb_loop+0x40/0x90 [ 681.072431][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.078335][ T30] RIP: 0033:0x7fdb0879c799 [ 681.082860][ T30] RSP: 002b:00007fdb0970a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 681.092127][ T30] RAX: fffffffffffffe00 RBX: 00007fdb08a15fa8 RCX: 00007fdb0879c799 [ 681.100278][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb08a15fa8 [ 681.108254][ T30] RBP: 00007fdb08a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 681.116385][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.126049][ T30] R13: 00007fdb08a16038 R14: 00007fdb08b3f960 R15: 00007fdb08b3fa48 [ 681.134138][ T30] [ 681.137219][ T30] INFO: task syz.0.1998:12946 blocked for more than 144 seconds. [ 681.137402][ T9828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.145097][ T30] Tainted: G L syzkaller #0 [ 681.158919][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.167596][ T30] task:syz.0.1998 state:D stack:26864 pid:12946 tgid:12944 ppid:5837 task_flags:0x400140 flags:0x00080006 [ 681.179934][ T30] Call Trace: [ 681.183224][ T30] [ 681.186153][ T30] __schedule+0x15dd/0x52d0 [ 681.190754][ T30] ? __pfx___schedule+0x10/0x10 [ 681.195627][ T30] ? schedule+0x90/0x360 [ 681.200048][ T30] schedule+0x164/0x360 [ 681.204228][ T30] schedule_timeout+0xc3/0x2c0 [ 681.209703][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 681.215580][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 681.221588][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 681.226946][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 681.232295][ T30] ? wait_for_completion+0x274/0x5e0 [ 681.237602][ T30] wait_for_completion+0x2cc/0x5e0 [ 681.243036][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 681.248791][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 681.255313][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 681.262143][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 681.269120][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 681.274331][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 681.280757][ T30] do_syscall_64+0x14d/0xf80 [ 681.285445][ T30] ? trace_irq_disable+0x3b/0x150 [ 681.290788][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.296847][ T30] ? clear_bhb_loop+0x40/0x90 [ 681.301739][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.307802][ T30] RIP: 0033:0x7fdb0879c799 [ 681.312299][ T30] RSP: 002b:00007fdb096e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 681.320901][ T30] RAX: ffffffffffffffda RBX: 00007fdb08a16090 RCX: 00007fdb0879c799 [ 681.329407][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000010 [ 681.337472][ T30] RBP: 00007fdb08832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 681.345687][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.353783][ T30] R13: 00007fdb08a16128 R14: 00007fdb08a16090 R15: 00007fdb08b3fa48 [ 681.361950][ T30] [ 681.364975][ T30] INFO: task syz.0.1998:12950 blocked for more than 144 seconds. [ 681.378719][ T30] Tainted: G L syzkaller #0 [ 681.385261][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.408661][ T30] task:syz.0.1998 state:D stack:28064 pid:12950 tgid:12944 ppid:5837 task_flags:0x400140 flags:0x00080006 [ 681.435381][ T30] Call Trace: [ 681.447511][ T30] [ 681.461390][ T30] __schedule+0x15dd/0x52d0 [ 681.465921][ T30] ? register_lock_class+0x31/0x2e0 [ 681.498860][ T30] ? __pfx___schedule+0x10/0x10 [ 681.503770][ T30] ? schedule+0x90/0x360 [ 681.512259][ T30] schedule+0x164/0x360 [ 681.523695][ T30] schedule_timeout+0xc3/0x2c0 [ 681.534930][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 681.549397][ T84] net_ratelimit: 275 callbacks suppressed [ 681.549411][ T84] bond2: (slave ip6gretap3): failed to get link speed/duplex [ 681.566921][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 681.570047][ T84] bond2: (slave ip6gretap4): failed to get link speed/duplex [ 681.589134][ T84] bond2: (slave ip6gretap5): failed to get link speed/duplex [ 681.601040][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 681.606086][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 681.618868][ T9828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 681.626405][ T30] ? wait_for_completion+0x274/0x5e0 [ 681.631874][ T30] wait_for_completion+0x2cc/0x5e0 [ 681.637276][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 681.643177][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 681.648748][ T9828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.649636][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 681.656968][ T9828] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 681.664193][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 681.664257][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 681.664282][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 681.664321][ T30] do_syscall_64+0x14d/0xf80 [ 681.664339][ T30] ? trace_irq_disable+0x3b/0x150 [ 681.664364][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.706081][ T30] ? clear_bhb_loop+0x40/0x90 [ 681.708842][ T9828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.710877][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.718348][ T9828] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 681.724401][ T30] RIP: 0033:0x7fdb0879c799 [ 681.732472][ T9828] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 681.736370][ T30] RSP: 002b:00007fdb096c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 681.744179][ T9828] bond1: (slave ip6gretap5): failed to get link speed/duplex [ 681.752818][ T30] RAX: ffffffffffffffda RBX: 00007fdb08a16180 RCX: 00007fdb0879c799 [ 681.768769][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000010 [ 681.776746][ T30] RBP: 00007fdb08832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 681.784917][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.792951][ T30] R13: 00007fdb08a16218 R14: 00007fdb08a16180 R15: 00007fdb08b3fa48 [ 681.801086][ T30] [ 681.804175][ T30] [ 681.804175][ T30] Showing all locks held in the system: [ 681.811959][ T30] 1 lock held by khungtaskd/30: [ 681.816802][ T30] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 681.826886][ T30] 2 locks held by getty/5581: [ 681.831616][ T30] #0: ffff8880316a80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 681.842718][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 681.852977][ T30] 1 lock held by syz-executor/5806: [ 681.858172][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 681.868321][ T30] 1 lock held by syz.3.2661/15218: [ 681.873511][ T30] #0: ffffffff8e764540 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 681.883645][ T30] [ 681.885987][ T30] ============================================= [ 681.885987][ T30] [ 681.899015][ T30] NMI backtrace for cpu 1 [ 681.899034][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 681.899057][ T30] Tainted: [L]=SOFTLOCKUP [ 681.899063][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.899074][ T30] Call Trace: [ 681.899081][ T30] [ 681.899088][ T30] dump_stack_lvl+0xe8/0x150 [ 681.899117][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 681.899257][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 681.899282][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 681.899306][ T30] sys_info+0x135/0x170 [ 681.899324][ T30] watchdog+0xfd9/0x1030 [ 681.899372][ T30] ? watchdog+0x21a/0x1030 [ 681.899402][ T30] kthread+0x388/0x470 [ 681.899420][ T30] ? __pfx_watchdog+0x10/0x10 [ 681.899442][ T30] ? __pfx_kthread+0x10/0x10 [ 681.899461][ T30] ret_from_fork+0x51e/0xb90 [ 681.899485][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 681.899505][ T30] ? __switch_to+0xc7d/0x1450 [ 681.899529][ T30] ? __pfx_kthread+0x10/0x10 [ 681.899546][ T30] ret_from_fork_asm+0x1a/0x30 [ 681.899583][ T30] [ 681.899590][ T30] Sending NMI from CPU 1 to CPUs 0: [ 682.015251][ C0] NMI backtrace for cpu 0 [ 682.015273][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.015293][ C0] Tainted: [L]=SOFTLOCKUP [ 682.015299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 682.015309][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 682.015336][ C0] Code: fe 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 82 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 682.015349][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 682.015363][ C0] RAX: 000000000101b345 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 682.015373][ C0] RDX: 0000000000000001 RSI: ffffffff8def4b2d RDI: ffffffff8c27b380 [ 682.015384][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 682.015395][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90118bb0 [ 682.015407][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 682.015417][ C0] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 682.015430][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 682.015440][ C0] CR2: 00007f1af7de82f8 CR3: 0000000078dee000 CR4: 00000000003526f0 [ 682.015454][ C0] Call Trace: [ 682.015460][ C0] [ 682.015467][ C0] default_idle+0x9/0x20 [ 682.015482][ C0] default_idle_call+0x72/0xb0 [ 682.015498][ C0] do_idle+0x1bd/0x500 [ 682.015520][ C0] ? __pfx_do_idle+0x10/0x10 [ 682.015539][ C0] ? do_idle+0x4d0/0x500 [ 682.015559][ C0] cpu_startup_entry+0x43/0x60 [ 682.015578][ C0] rest_init+0x2de/0x300 [ 682.015595][ C0] start_kernel+0x385/0x3d0 [ 682.015740][ C0] x86_64_start_reservations+0x24/0x30 [ 682.015786][ C0] x86_64_start_kernel+0x143/0x1c0 [ 682.015807][ C0] common_startup_64+0x13e/0x147 [ 682.015829][ C0] [ 682.201523][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 682.208397][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 682.219053][ T30] Tainted: [L]=SOFTLOCKUP [ 682.223359][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 682.233398][ T30] Call Trace: [ 682.236660][ T30] [ 682.239578][ T30] vpanic+0x56c/0xa60 [ 682.243549][ T30] ? __pfx___schedule+0x10/0x10 [ 682.248405][ T30] ? __pfx_vpanic+0x10/0x10 [ 682.252896][ T30] ? __pfx_console_unlock+0x10/0x10 [ 682.258116][ T30] panic+0xc5/0xd0 [ 682.261821][ T30] ? __pfx_panic+0x10/0x10 [ 682.266404][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 682.271792][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 682.277927][ T30] watchdog+0x1023/0x1030 [ 682.282244][ T30] ? watchdog+0x21a/0x1030 [ 682.286646][ T30] kthread+0x388/0x470 [ 682.290695][ T30] ? __pfx_watchdog+0x10/0x10 [ 682.295351][ T30] ? __pfx_kthread+0x10/0x10 [ 682.299919][ T30] ret_from_fork+0x51e/0xb90 [ 682.304494][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 682.309585][ T30] ? __switch_to+0xc7d/0x1450 [ 682.314247][ T30] ? __pfx_kthread+0x10/0x10 [ 682.318823][ T30] ret_from_fork_asm+0x1a/0x30 [ 682.323594][ T30] [ 682.326875][ T30] Kernel Offset: disabled [ 682.331185][ T30] Rebooting in 86400 seconds..