last executing test programs: 9.339283603s ago: executing program 0 (id=5416): socket$packet(0x11, 0x3, 0x300) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x9, 0x0) setns(0xffffffffffffffff, 0x10000000) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x249249249249269, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket(0x21, 0x800, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffffff, {[0x2, 0x5, 0x401, 0x4, 0x0, 0x8, 0xfff, 0x400]}}, 0x5c) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000100000000000000000fe80000000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000001000000019c8e5adf00000000000000000000000000000000010000000a00000000000000133fef7e5bdbffff000050d3eea5f7dcc9626d596fb2c20c0a8152b9f9c099fff0767b45a48a9e411272b0617fdbff9c9b3911db97637a3a58f580b7016c9a4e14cd4b46c05d5ce1140014a33d", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000007807000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000000000044001c00fc020000000000000000000000000000000004d40000000000000000e00000020000000000000000000000000000000000000000fdffffff8f00000000000000"], 0x174}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) 8.187640577s ago: executing program 4 (id=5423): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000480)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r3, 0x200004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000800000000000080000700000000", @ANYRES32, @ANYBLOB="000000000007000000000013081dacdb09000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018f887ee", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000980)={{r1}, r6, 0x8, @inherit={0x68, &(0x7f0000001980)=ANY=[@ANYBLOB="0000000000000000000000000000000800000000000012752c9cfe11e08f0ec0bf04ded70001000000000000004d3fe2e77674326b01000000000000000700000000000000000002000100000008000000000000001529f078c20000000400000000000000a46a1562580406805a7591c0b9cda089f50b30790f3796790160b91ac770d3746c1b83f4ec311494ba3048f206b1403e8bdb6e58fc17f081b85150573d2db290408b2fad6a56202cdb4a72521302e7a511f2e01d21f72080"]}, @name="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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000180)) write$apparmor_exec(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000"], 0x8) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x23286775a1aa6c08}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000002840)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000001280)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) 8.138915556s ago: executing program 1 (id=5424): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xb, 0x80100) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x2, 0xa, 0xfffffffc, 0x1800000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$l2tp(0x2, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0xffffffffffffff69) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000009740)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002840)=[{&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/223, 0xdf}, {&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/211, 0xd3}, {&(0x7f00000027c0)=""/126, 0x7e}], 0xa, &(0x7f0000002900)=""/42, 0x2a}, 0x9}, {{&(0x7f0000002940)=@rc, 0x80, &(0x7f0000002b80)=[{&(0x7f00000029c0)=""/2, 0x2}, {&(0x7f0000002a00)=""/38, 0x26}, {&(0x7f0000002a40)=""/30, 0x1e}, {&(0x7f0000002a80)=""/201, 0xc9}], 0x4, &(0x7f0000002bc0)=""/186, 0xba}, 0x1}, {{&(0x7f0000002c80)=@alg, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002d00)=""/253, 0xfd}, {&(0x7f0000002e00)=""/49, 0x31}, {&(0x7f0000002e40)=""/212, 0xd4}, {&(0x7f0000002f40)=""/196, 0xc4}, {&(0x7f0000003040)=""/236, 0xec}, {&(0x7f0000003140)=""/5, 0x5}, {&(0x7f0000003180)=""/54, 0x36}], 0x7, &(0x7f0000003240)=""/9, 0x9}, 0x4}, {{&(0x7f0000003280)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003300)=""/249, 0xf9}, {&(0x7f0000003400)=""/67, 0x43}, {&(0x7f0000003480)=""/147, 0x93}], 0x3, &(0x7f0000003580)=""/7, 0x7}, 0x4dc}, {{&(0x7f00000035c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003640)=""/88, 0x58}, {&(0x7f0000009940)=""/148, 0x94}, {&(0x7f0000003780)=""/91, 0x5b}, {&(0x7f0000003800)=""/22, 0x16}, {&(0x7f0000003840)=""/191, 0xbf}, {&(0x7f0000003900)=""/182, 0xb6}, {&(0x7f0000003740)=""/13, 0xd}, {&(0x7f0000003a00)=""/164, 0xa4}], 0x8, &(0x7f0000003b40)=""/21, 0x15}, 0x1ff}, {{&(0x7f0000003b80)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000006e80)=[{&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/119, 0x77}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/52, 0x34}, {&(0x7f0000004d40)=""/159, 0x9f}, {&(0x7f0000004e00)=""/109, 0x6d}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/4096, 0x1000}], 0x8, &(0x7f0000006f00)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000008280)=[{&(0x7f0000007f00)=""/211, 0xd3}, {&(0x7f00000036c0)=""/72, 0x48}, {&(0x7f0000008080)=""/27, 0x1b}, {&(0x7f00000080c0)=""/168, 0xa8}, {&(0x7f0000008180)=""/222, 0xde}], 0x5, &(0x7f0000009a00)=""/4102, 0x1006}}, {{&(0x7f0000009300)=@isdn, 0x80, &(0x7f0000009600)=[{&(0x7f0000009380)=""/253, 0xfd}, {&(0x7f0000009480)=""/240, 0xf0}, {&(0x7f0000009580)=""/114, 0x72}], 0x3, &(0x7f0000009640)=""/241, 0xf1}, 0x3}], 0x8, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, 0x0) sendto$inet6(r8, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3948547f500f58ba86c902000f1d012e020002801600120000000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x52d066ece351cd44, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) 7.745473586s ago: executing program 0 (id=5425): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82500, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000091000040"]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$inet_int(r4, 0x0, 0x19, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000240)=[r10], 0x1}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r11, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 7.126475528s ago: executing program 1 (id=5426): r0 = io_uring_setup(0x177f, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x4, 0x0, 0xfc, 0x33, 0xfa, 0x6, 0x9, 0x3, 0x9, 0xd, 0x8, 0x6, 0x29, 0x49}, 0x8) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/191, 0xbf) 7.103835291s ago: executing program 1 (id=5427): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000a0001"], 0x44}}, 0x0) socket(0x200000100000011, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cf2040000000000140003006e6574645e7673696d300000000000001c0016801800018014000a000d00000000000000840d0a10000000009cf13bfede30bcf12c04bed920dd1803363219f1e5e7ccc29a034b7bb804b11ed99e249e2ba0a8a0009ac82e7bbbf60d"], 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffb) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r9, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x10000}) request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='/dev/dma_heap/system\x00', r7) write(r6, 0x0, 0x0) 5.198733035s ago: executing program 2 (id=5432): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x20a1, 0x103) (async) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x7, 0x6, 0x26, 0x100000000000009, 0x8, 0xb, 0x64d, 0x8, 0x9657, 0x5, 0x2, 0xe7d4, 0x8, 0xb, 0x5, 0xcc4, 0x2efa, 0x1, 0x94d8, 0x4, 0x1, 0x6, 0xe, 0xfffffffffffffffa, 0x1, 0x2000008000000}) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x80, 0x0, 0x1, 0x0, 0x0) (async) rename(&(0x7f0000000140)='./file1\x00', &(0x7f00000004c0)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000000300"/15, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x8080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) execve(0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000304fdffffff0000000000000400", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRESHEX=r1, @ANYBLOB="c83e907df6eb5159a2aba221b49e0b37f9d4bf1802d7eb786e423bdc01ebb0dc55adb861945a11472ac3ada7ce150da90be3b85865dee9b34673986cbcb2031e345173d0c4abd3a8b9cb06e9c11da467c2baccbc26a216382bb49b28d6871eda86c9f9b539ab3de26808f28c176e81f8cbdb3c7245c39a60b5a273d2e0ddb5a21854d2bb26526e2b27", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) 5.002534977s ago: executing program 2 (id=5433): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@overlay={0x24b2, 0x1, 0x4, 0xe000, 0x9, {}, {0x2, 0x1, 0xf9, 0x5, 0xc, 0x5, "ef867cec"}, 0x6, 0x3, {}, 0xf}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd3b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000002c0)="0f79d6baf80c66b8a587398966efbafc0cec3626673e0fc7280f01c20faf4abc2e0f1da30020660fc2e90eb80a008ee0f30f1af92edf1d", 0x37}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000002c0)={'lo\x00', @broadcast}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) 5.0019694s ago: executing program 4 (id=5434): socket$packet(0x11, 0x3, 0x300) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x9, 0x0) setns(0xffffffffffffffff, 0x10000000) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x249249249249269, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket(0x21, 0x800, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffffff, {[0x2, 0x5, 0x401, 0x4, 0x0, 0x8, 0xfff, 0x400]}}, 0x5c) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000100000000000000000fe80000000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000001000000019c8e5adf0000000000000000000000ffffffffffffff80000a00000000000000133fef7e5bdbffff000050d3eea5f7dcc9626d596fb2c20c0a8152b9f9c099fff0767b45a48a9e411272b0617fdbff9c9b3911db97637a3a58f580b7016c9a4e14cd4b46c05d5ce1140014a33d", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000007807000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000000000044001c00fc020000000000000000000000000000000004d40000000000000000e00000020000000000000000000000000000000000000000fdffffff8f00000000000000"], 0x174}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) 3.846924011s ago: executing program 4 (id=5435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) 3.811104901s ago: executing program 4 (id=5436): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) timer_create(0x2, 0x0, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) 3.698423677s ago: executing program 1 (id=5437): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x10, 0x7fff0000}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101000000cef0058cac6467367296d39cf81768195b4a1b23e110160bc94873a42100f348e779448c45a49b328c6c1202ae8ff79ef1bf1b7f0756c45b4cc7c8d7cca518aeb66ab3d3c732ca6a261214fdc5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xb1, 0x9, 0x0, 0x8}, {0x8, 0x1, 0x0, 0xbffff038}, {0xfffb, 0x6, 0x4, 0x5}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 3.663742933s ago: executing program 0 (id=5438): socket(0x10, 0x3, 0x0) r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x80, 0x8, 0xffffffffffffffff}, {0xf6, 0x9, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "7a7721427b16add9e6b50c9917d0e0684cb2e6"}}]}, 0x150}}, 0x804) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="230a00000002"], 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES8]) syz_usb_control_io$printer(r2, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0x21, 0x15, {0x15, 0xd, "ae21b8a61eebedd2cd934d697211e94c0a35f8"}}, &(0x7f0000000140)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "297b4778583d8b7a67b39a9d3264d5a07489ab235b46ff5781bb61ed07"}}}, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x16, 0x22, "570380f88d4e7a5c0a2beb625a2a1f0cc452f9e0149947d37777bb60b8dd8eef48f9"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x0, 0x2d, {0x2b, "fc3110c16f14ca5d3943baf0c15a40a303465aca251d81294f30b01493bf0d00044185b4575d17ca7c7e45"}}, &(0x7f0000000440)={0x20, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x3}}) syz_open_procfs(r0, &(0x7f0000000180)='net/nf_conntrack\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}}, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.592153343s ago: executing program 2 (id=5439): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000"]) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$packet(0x11, 0x3, 0x300) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}]}, 0x3c}, 0x1, 0x620b}, 0x0) 2.51289756s ago: executing program 4 (id=5440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000040000461104e000000000066050000020000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x7, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091"], 0xfe33) socket$packet(0x11, 0x2, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, &(0x7f0000000380)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d"], 0xc8}}, 0x40000) 2.511087542s ago: executing program 2 (id=5441): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$netlink(0x10, 0x3, 0x15) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978000000000a000000000000000400040000000000"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mkdirat(r6, 0x0, 0x60) 2.210418182s ago: executing program 3 (id=5442): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000800) openat$dsp1(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = gettid() socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 2.128879834s ago: executing program 3 (id=5443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22000, 0x0) r1 = dup(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000747) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000000600000000000000000000e800000000000000"]) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000018000380100003800c000180080001000900000004000100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r4, 0x6, 0x24, &(0x7f0000000340)="513aaf19", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r4], 0x0, 0x7a, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000040)={{0x1}}) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r9, 0x54a2) close_range(r7, r8, 0x0) sendto$inet6(r5, &(0x7f00000005c0)="c158d8d99c404c4fcddd06f62e437f96976d8b9b94dd1726b7e2675e968bdcb4f735ce9191c957bd1d4bd2b740ebe1805e41344f19413bb433be67166fac7368d520b0115560104d62147d93b3f2f7cc30fc8b7a10022bfb91241030c69e02c781681f3c698f33d1d7f1c07d3b2986fbf957ab7ba0360e7eb126f294c2ca56c4c395ca8e2ddba204a7472dda64eaef83513008a9d91eb71ce695c6b04249691a7945484b3f92deeaf0b4779c60470182b49b338fb78048387514806ff4b35e66d8a872df000576c86c85c00204216ef96e3bb068e038469caa50235f1f85", 0xde, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x0, 0x30, 0x3, 0x80}, &(0x7f0000000300)=0x18) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x100000007, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000300)={0x3, 0x0, 0x2, {0x2, @pix_mp={0x3, 0x40, 0x42474752, 0x0, 0x0, [{0xf10, 0x3}, {0x8, 0xffffff5b}, {0x9, 0xffffffff}, {0x0, 0x688}, {0x1ea1, 0xfffffff2}, {0x7f, 0x2}, {0xd77f, 0x10d2}, {0x6, 0x8}], 0x7, 0x4, 0x2, 0x2, 0x5}}, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r11 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f00000001c0)={0x9c0000, 0x1, 0x0, r1, 0x0, &(0x7f0000000180)={0x9f0001, 0x1, '\x00', @p_u8=&(0x7f0000000140)=0x7d}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.81016277s ago: executing program 1 (id=5444): syz_emit_ethernet(0x66, &(0x7f0000002940)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300300000fe8000000000000000000000000000aafe80000000000000000000e223a3f03d682a670000000000d6eaf5e9114aa92d6ef4c971edf1f3f32acdb1339557d47f451df212f2ec084f845725165a4bdce8c091d94954710866ae469312f2cfdac05f1600d7f18b8b7d30a72dc4c60a3852af2faf870b6ce6fb3a7e8bc8a6ab991232cfe9ca"], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000002940)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300300000fe8000000000000000000000000000aafe80000000000000000000e223a3f03d682a670000000000d6eaf5e9114aa92d6ef4c971edf1f3f32acdb1339557d47f451df212f2ec084f845725165a4bdce8c091d94954710866ae469312f2cfdac05f1600d7f18b8b7d30a72dc4c60a3852af2faf870b6ce6fb3a7e8bc8a6ab991232cfe9ca"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d80)={'\x00', 0x3, 0x1, 0x6, 0x2, 0x3, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x0, 0xe1}, 0x0) (async) prlimit64(r0, 0xe, &(0x7f0000000140)={0x0, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x12, 0xffffffffffffffff, 0x6e62c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$unix(r2, &(0x7f00000065c0)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)="17c1736b6e6b4a65143ff1274d922ef00144cda3", 0x14}, {&(0x7f0000000540)="be4dfc816501a3b0aeb410aa172f263ba6de08a8f8655b34289414fc1ee981093ceb8ff0f2402da847980fdae115f28da788aa9a9026a768dfb9d8f11f7623329b1b3c9dedac7bb6acc1cd0ed6e0f832a3bded0e08143f94c5fba5a957d8ce4cc1acbcf6cc068795994ea98073a327346e7a5f93c96904064cfc8d83c5df96b72c4c06e74c8964a204b272f067e5a4af184fcb1aec5ceff5c823e3dae8d6a14194ad4ca9b0b21794a1bb2a619c761bf3be45f292f15f9d1a0541252ecce73097cd8b11036f5631d195c143efecdd76a87a5a75e7e6f2d918309d8a9669678ebe", 0xe0}], 0x2, &(0x7f0000000840)=[@rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r3, 0xffffffffffffffff, r2]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r3, r1, r3, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r1]}}], 0x128, 0x10}}, {{&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000a00)="b6258dec9cc6bcf95c8ea04bcf4009badfd04ba2ead753365233c8639cc90f87389130c6d76ee6bb8d21b3aee34cdb49d536df25b4cca17312a34e738f2b53ff76f40e", 0x43}, {&(0x7f0000003940)="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", 0x1000}, {&(0x7f0000000c40)="7da556c42fbc69f9c505cbb51e21e7708689a2fdb47e696121492d631eb619dfd297eb9dbb4475dcd922e025e2d1908a814ae08255c5075d537197ec7e3e7b2d8b5e0c4ec06c9f04779e9ac3c04c16eadc608db62da9694b79203c3b8ba44bb71b53e15cb432f4a1b1d59aec48a6154f02417542777523d4a091b980d620a4b37d271bb65b6b58938b8b212d65e7c0968a58fe28d3733b0066ebf9cb6b552d5413a21cfa28c681e96c3deef7d0eab86741e3600425541c4574b7", 0xba}, {&(0x7f0000001780)="60c7918512303a6748ff908bfc5f32f6b48f4538919381630dfcd2a2abfcb3cb62975bcffbbdb6c33d8e00e75afe4aca5a14736a794216e7a8dce115d5bea73b311b9e853c17ad7073c7274513431f6626c480a31d207aa7ddf565da4593a59486fb49f48abfc5339085177dbfcf4f9ef84562acf9e3606aa1060196d46d399f51be76da8413c0ecf6c49218e9ac7fb8b7697a07be103b8f18604fd855612be382f0761bde6668b2d35e4ea91a049c91df5c5c051cbeb26ecd60d9d55ab54b8d271d07c810f91fa5eee88b08f57cb23f36d80cc1d5bfafc972fb5217e0065f56b973254567fc6ab26f9979bfbc2850f2ce85", 0xf2}, {&(0x7f0000000b40)="84492d1daef74e267b9589c51dc30d17a3f562ce82a270d68d8f679081c8c160de76e9dc03ce6426bac46fd76f284e6aef3f1e8b65fb152e40222a253e9229f8d3a1cb5e58ef0c929173eda7780df264bb2e9205aabdbd50662eb380a0d0e3bae2738f08b2048e3a8c5c1fce28859f1a793d89ed831c35115be07af99a490530a12c49cf5650aa98be8349faf835d3b59eccf6f7a3d34097b4b4b42a96a9339a36393fb748e031aeab0edc84d9438975ca3953fdc6e0c7bf8b4acab9ddd2ddbb259bed", 0xc3}, {&(0x7f0000000d00)="32eb84502192e770c036d0ca49a9a77f6116c46dfa196c9149ba7dbf717acc685b89846d9b784bf125549d1e1919dd0afd7d4e73eece2f5450253de0bd4437cc7b0bf7bf639278c4bbd85ff7f6ac021f7b0b03f022a1351c7d", 0x59}, {&(0x7f0000000a80)="34cf6d92270e30df9cd2ec79f01f822418f0dd848e1d6b36a4fcdf584e254a769ac1c6d0f30f53f7c176ee8e48e0c895934518d473dd67833a64e704f0b73eee88747aa919eb2638bc4320450539426d06a2dc7efa039bba1c7dd5c715510836b97d04c17cca978697719a8ee59ab61aada34367917b2ff0c1a1837e9161b1f2d526af074218b0e48d44a23b475a2cc9f4ff034918416523317682b5b2", 0x9d}], 0x7, &(0x7f0000000e80), 0x0, 0x800}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000f40)="eef036491809e15c9aeef89d2ba131838aaa8e43494ab4d8d4d3b81d8efba7d0dc957d6ab063f670d6be2e01b29143bd0caf535fc89eea7405d7512257ff6d06140a56ade27a9f0cd1121846d4d3ca2ccc91f63757018da9e6bd020c89ff4bedfd7dd6c45859fbcd254f9741081b440c725e04de8f9822f6d175ccb69cafa5ea2f14b3b4680e2c", 0x87}, {&(0x7f0000001000)="e571d21bfcb4bb22a593cc2deecefd8071c4300e1cd8567bee8529959beb5996db85764f8858b9a62d", 0x29}, {&(0x7f0000001040)="f501620233bfbc3e6c0c9d7fcf84ad06e63abf6dad9e37137086a6ae756569938ae236bcfdf312927ab0a94f226dc875acde1a851540101313dadc851c22c135810ffa441ced68e2fc5e0b0a123826f1d3959b61febb6f4abd1c31573bb06954456d01e5a513f10dfde6b57e4c3f18e337fd7fea22bb5e033e1e45ff6a1dfc69e3cd907a71ab28ce479e286542dfeaeacc4f5cc66edb7b5528407a4f0bbd99db460b62ff672ce9f0cef3f24e7b627545f85d939f2443efea0470421ac24a7caaa3540010d4e8629b02b5cda82fcf273940a157e83a39b0b51c3734ea927225e3da951912ae530d4b67edd90fbfc4ad", 0xef}, {&(0x7f0000002a00)="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", 0x1ba}, {&(0x7f0000001240)="edc5f0ab2d19d91ab429bea49f431b63e90ba732598326d877347fd04716c53a8ff1b6ce8759e4ffec3beefe4111283e3cf1b7fea696b62d1539ab187095bdf5a9c38b4924a2d48748a39d3d339b4d1133219632627a30e2eb601e2899ad9908c7d643e68f6e6f1de6bc984a2b2c826b4b2a12b5", 0x74}, {&(0x7f00000012c0)="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", 0xfc}, {&(0x7f0000001900)="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", 0x1004}], 0x7, &(0x7f0000001580)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x138}}, {{&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000059c0), 0x0, &(0x7f0000005a40)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x800}}, {{0x0, 0x0, &(0x7f0000005f40), 0x0, &(0x7f0000006000), 0x0, 0x810}}, {{&(0x7f0000006040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006100)=[{&(0x7f00000004c0)="d54e494db3f862b961b208c0e5a5ffb223c99c949473df8218523d2871c2f7e8b329a8bf15bb0d069f231c4e5d419a77cf83faa94447d437e25b05835f9ffc", 0x3f}], 0x1, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, r3, r3, r2, r2, r2, r1]}}], 0x48}}, {{&(0x7f0000006180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000006440)=[{&(0x7f0000006200)="0724a603719e56898fba08dc5c83ad9c2ec96365059329fc7353ab31e29c439786c9e6e516683599dc6aac172e119484179f6eee7eacbf2c8d75ebab30b9f1baefe0dfa307ec77b9474c64d11626986b448ba160848c32d54b2391d690eebd824be758b04c44ae96b3ef", 0x6a}, {&(0x7f0000006280)="480b71c2e4fb64afac9d9c748452c5c2731b12bd4db973b9878115b42c25b2e0ba001235986862dd49c061c215020739dbd780fb274aabafcb90190746393b869c9143c30b92a3a564b0398362e7df5e946a795365aa1faf8f0a230f3f540dbd4a3184c99450fd57cc1ddc51d6df2c7f8cda55d93203b13033bc1b5b2159a45a1e56618501b076c28d594ebba55833f803fe5a36ad3cddfdc41661ae1f8c2a6ae1", 0xa1}, {&(0x7f0000006340)="91b6fe9c4c14eb76d2cfc3344c2902ded9107a0ba5e556fd45e6efed9d0c5ac99327f8534819e401a032911552eff52f22a8de9195df17f6de64bfc3df19d0f4530c4966925c2a43534283632fff15783ece7257e2d20d2b8864b8ea6284d1c1e46046a15bac4a844a9894f5297bfe4b1db6cc0e2f5202b05cfe9ed422cc996c07b4fe085cb2cd724b13d51c74ac90851e84a451a518256bc2844d7dba8817564970975fa82d4a7ab94ef9212c9b43678da7263718443252d59f0f50208b532c7d0d69356a9c10c2325ba36bffe4a9544c8ff941", 0xd4}], 0x3, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x60, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0xa0, 0x40408c1}}], 0x7, 0x8804) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1) syz_clone3(&(0x7f0000001880)={0x100280000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$unix(r2, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f0000000e80)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000824}, 0x8060) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) mmap$binder(&(0x7f00002bf000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x8000000000000000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 1.173308661s ago: executing program 3 (id=5445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x1, 0xc9, 0x1, 0x2}, {0x615, 0x2, 0x5}, {0x8, 0xda, 0xa, 0xa}, {0x2, 0xff, 0x4}, {0xcd22, 0x3, 0x9f, 0x737d30d9}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 950.60816ms ago: executing program 3 (id=5446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) 870.663553ms ago: executing program 4 (id=5447): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4040050) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40030002, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 865.635398ms ago: executing program 3 (id=5448): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) fcntl$notify(r0, 0x402, 0x2a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast1}, @remote}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r2, 0x20, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x10102, 0x4, 0x6}, 0x18) mknodat(r3, &(0x7f00000002c0)='./file0\x00', 0x4, 0x3) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000300)={0x5b, "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"}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x18) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001580)={&(0x7f0000000580)=[0xb948bee2, 0x5, 0xc, 0x8, 0x2, 0x10, 0x4611, 0x9, 0x7fffffff, 0x17, 0x4, 0x200, 0xfffffffa, 0x0, 0x6, 0x2, 0x4, 0x8, 0xffffff81, 0xb, 0x5, 0xd861, 0x0, 0x80, 0x81, 0x7, 0x0, 0x6, 0x2bfd66ca, 0xe05, 0x8, 0x5, 0x0, 0x7, 0x5, 0xd08, 0x7f, 0x2, 0x0, 0xffff, 0xad40, 0x81b6, 0x8, 0x6, 0x3, 0x4, 0xa92, 0x4, 0xffff, 0xfffffbff, 0xe72b, 0x5, 0x1, 0x5, 0x4, 0x9, 0x5, 0x8, 0x62, 0x3, 0x2, 0xb, 0x80000000, 0x3, 0x5, 0x4, 0x5, 0x0, 0x40fc7aa6, 0x4, 0x7, 0xb9, 0xff, 0x800, 0x6d, 0x1, 0x0, 0x4, 0x5, 0x7a3d20d6, 0x4, 0x6, 0x1, 0xffffffff, 0x8, 0x4, 0xc, 0x0, 0x100, 0x3, 0xcb, 0x1, 0x8000, 0x4, 0x39be, 0x8, 0x21c, 0x1, 0xcd, 0x8, 0x7, 0x1, 0x6, 0x8, 0x8001, 0x5e, 0xff, 0x4, 0x3, 0x159, 0x2, 0x6, 0x2, 0x4, 0x3, 0x1000, 0x4, 0x1ff, 0x4c5, 0x6, 0x8, 0x100020, 0x5654, 0x7fff, 0x2, 0x7, 0x380, 0x1ff, 0x2, 0x0, 0x8, 0x4, 0x1df, 0x1, 0x101, 0x5, 0x2, 0x6, 0x9, 0x6, 0x0, 0x7, 0x5, 0x5, 0x7, 0x4, 0x3, 0xffffffff, 0x8000, 0x2, 0x3, 0xfffffffd, 0x5, 0xfffffff3, 0x2, 0x9, 0x1, 0xc, 0x401, 0x7, 0x4, 0x4, 0x400, 0x6, 0x9, 0x7, 0x3, 0x8db32e9, 0x2, 0xc, 0x87a, 0xcd, 0x7ff, 0xc, 0xb4f, 0x7fffffff, 0x100, 0x9, 0x7, 0xf, 0x100, 0x53, 0x0, 0x8, 0x5, 0x9, 0x3, 0xe2, 0x5, 0xffff0001, 0xfffffffd, 0x8, 0x5, 0x2, 0x33ff, 0x8, 0x1, 0x1000, 0xf, 0x0, 0xc, 0x7, 0x6, 0x9727, 0x0, 0xdd0, 0x9, 0x800, 0x3ff, 0x3, 0x96, 0xdc34, 0x4, 0x9, 0x400, 0x8, 0xffffffa9, 0x1, 0x7fffffff, 0x3, 0x6, 0x4, 0x19c2, 0x6, 0x18, 0x0, 0x0, 0x9b7d, 0x16e, 0x3, 0x8, 0x200, 0x728b214a, 0x6, 0x0, 0x2, 0x4, 0x1, 0xffff, 0xfffffffa, 0x3, 0x9, 0x4, 0x7, 0x101, 0x0, 0x6, 0x100, 0x10, 0x0, 0x800, 0x800, 0x3, 0x200, 0xcede, 0x9, 0x80000000, 0x952d, 0x7, 0x9, 0x0, 0x8001, 0xf33b, 0x7, 0x1, 0xfe000000, 0xfffffff1, 0x4, 0x0, 0xfffffffd, 0x8, 0x0, 0x3, 0xff, 0x401, 0x515, 0x0, 0x3ff, 0x9, 0x9, 0x0, 0x4, 0x5, 0x0, 0x0, 0x8, 0xfffffff8, 0x1ff, 0x347, 0x7, 0x5, 0x3, 0xcd, 0xfff, 0x3, 0x9, 0x10001, 0x2, 0x8000, 0x4, 0xffffffff, 0xf61d, 0xd6e00, 0x2, 0x7fff, 0xf09, 0xfffffff4, 0xffffffff, 0x3, 0x2, 0x80000001, 0x4, 0x2, 0xd, 0x8d, 0x8, 0xfffffffc, 0x8, 0x728a, 0x6, 0x7, 0x8, 0x8, 0x1, 0x4, 0x9, 0x8, 0x6, 0x400, 0xe6, 0x6, 0x4801b6d2, 0xb, 0x1, 0x4, 0x8, 0x4, 0xc, 0x1, 0x6, 0x5, 0x8, 0x4, 0x50, 0xfcb, 0x7, 0x80000000, 0x8, 0x1e6, 0x5, 0x9, 0x3, 0x80000001, 0x3, 0x1, 0x2, 0x80, 0xfffffffc, 0x5, 0x8, 0x7000, 0x1, 0x3, 0x3, 0x5499, 0xffff, 0xc93, 0x4, 0x8, 0x4, 0x6, 0x800, 0x5bbc, 0x80000001, 0x8, 0x7, 0x9, 0x0, 0xfff, 0x1, 0xffff, 0x5, 0x0, 0x3, 0x4d0, 0x2, 0xbc9, 0x9, 0xffffffff, 0x4, 0x7, 0x81, 0xb, 0xfff, 0x10001, 0x3, 0x80000001, 0x2, 0xd, 0x2, 0x1, 0x8, 0x8000, 0xfffffffa, 0xfffffff8, 0x7, 0x3ff, 0x0, 0x5, 0x3, 0x8, 0x6, 0x1, 0xfffffffa, 0x0, 0xdebc, 0xfffff163, 0x3, 0x7, 0x114f, 0x5, 0x2, 0xaf, 0xffffffff, 0x80, 0x73d7, 0x2, 0x2, 0x1ff, 0xb62, 0x6, 0x3ce, 0x8, 0x2, 0x200, 0x5, 0x0, 0x5, 0x1, 0x4, 0x3ff, 0x3, 0xf29, 0x80, 0x3, 0x7, 0x10000, 0x10001, 0x66, 0xfffffffa, 0x1, 0x455, 0x4, 0x9, 0x6, 0x401, 0x5, 0x0, 0x8, 0x2, 0x1, 0x2, 0x8, 0x0, 0x5, 0x0, 0x5, 0x8, 0x9, 0xffff, 0xffffffff, 0x9, 0x0, 0xac, 0x49, 0x1, 0x3, 0xffffff7f, 0xfffffffd, 0x1ed289de, 0x6, 0x0, 0x9, 0x7c, 0x0, 0x7, 0x8, 0x1, 0x8794, 0xe6, 0x40, 0x0, 0xfffff801, 0x9264, 0x81, 0x5, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x0, 0xf8, 0x8, 0x4, 0x1, 0x4, 0x6, 0x800, 0x1, 0x3, 0x6, 0xfffffffa, 0x1, 0x3f, 0x8, 0x7, 0x5, 0x4, 0xa, 0xd, 0x7f, 0x0, 0x4, 0x7, 0x0, 0x38c, 0xe58, 0x8001, 0x8000, 0x0, 0xff, 0xbde7, 0x0, 0x7, 0x9, 0x9, 0x609, 0xb6c7, 0x5, 0x9, 0x4, 0xfff, 0xffb, 0x8, 0x8, 0x1, 0x6, 0x100, 0xe020, 0x5, 0x7, 0x6, 0x8, 0x2, 0xffffffff, 0xaa, 0x58, 0x2, 0x1, 0x9, 0xfffffffc, 0x2, 0x4, 0x2, 0x8000, 0x52c2, 0x157b, 0x7, 0x80000001, 0x34, 0x5, 0x7, 0x7, 0x75, 0x0, 0x5, 0x6, 0x0, 0x3, 0x8dc, 0x899, 0xffffffff, 0xfffffa3a, 0x7, 0x80, 0x5, 0x5, 0x5, 0x8, 0x3, 0x6, 0x4, 0x0, 0x26a, 0x5, 0x200, 0xf56, 0x3, 0x8, 0x400, 0x1de26bf4, 0x2, 0x4, 0x8, 0x0, 0x4, 0x5, 0x7, 0xfffffff5, 0x10001, 0x101, 0xb, 0x8000, 0x3, 0x162, 0x3, 0x5586, 0xffffff81, 0x44, 0xd5, 0x7, 0x1, 0x7, 0x4, 0x4, 0x8, 0x5, 0x40, 0x2, 0xfc5, 0xfffffff7, 0x7ff, 0xfffffffc, 0x1, 0x2, 0xe, 0x80, 0x7fff, 0x74ed, 0x9, 0x40, 0x5, 0x8, 0x4, 0x5, 0xffff5d40, 0x4, 0x3, 0x5, 0x101, 0x83, 0x7, 0x0, 0x7fff, 0x6, 0x3, 0x1, 0x0, 0x305, 0x7, 0x4, 0xba, 0x6, 0x2, 0x6, 0x0, 0x2, 0x2, 0xffffffc0, 0xff, 0x60, 0xfffffffa, 0xb, 0x9, 0xe, 0x2, 0x2, 0x80000000, 0x2, 0xffffff19, 0x31be, 0x8, 0x3, 0x4, 0x5, 0x800, 0x0, 0x1, 0x8, 0x2, 0x8, 0x1, 0x7, 0xfffffffb, 0x4, 0xff, 0x2, 0x2, 0xe, 0x7, 0xea, 0x3ff, 0x9, 0x1, 0x6, 0x8, 0x1, 0x5, 0x930a, 0xd, 0x3, 0x0, 0x2, 0x7, 0x4, 0x9, 0x835, 0x101, 0x7a, 0xa45, 0x7, 0x2, 0x2, 0x8, 0x3, 0x80000001, 0xf020, 0x401, 0xff0, 0x7, 0xc4, 0x9, 0x0, 0x7, 0x401, 0x5, 0x5, 0x4, 0xffffffff, 0x0, 0x1, 0x6, 0x1, 0x0, 0x2, 0x8, 0x3, 0x800, 0x1, 0x7, 0x5, 0x6, 0x543, 0xc, 0x3696, 0xf, 0x5, 0x10000, 0x1400, 0x7, 0x5, 0x5, 0x513ed806, 0x76e2, 0x1, 0x10, 0x5, 0x7, 0x10001, 0x6, 0x80, 0x9e, 0x9, 0x5, 0x61bd, 0xffff, 0x10, 0xc, 0x4, 0x0, 0x8, 0x101, 0xffffffff, 0x4, 0x7, 0x7, 0x3, 0x1, 0x4d54c472, 0x4, 0xa, 0x43c, 0x3, 0x3, 0x2, 0x5, 0x8000, 0x60d, 0xc2d5, 0x5c000000, 0x7, 0x7, 0x3, 0x2, 0x0, 0x10, 0x80000000, 0x0, 0x6, 0x2, 0x0, 0x3, 0x3, 0x4, 0x4, 0x4, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0x5, 0x6d, 0xfffffffb, 0x8, 0x1, 0x37, 0x1, 0x0, 0x0, 0x181, 0x7, 0x40, 0x2, 0x5, 0x6, 0x1, 0x10000, 0x0, 0x7, 0xfc8, 0x9, 0x4, 0x1, 0x8001, 0x4, 0xe2, 0x0, 0x0, 0x9, 0x200, 0x8001, 0x5, 0xf401, 0x0, 0x7f, 0x3, 0x70, 0x80000001, 0x1, 0xfffffff1, 0x8, 0x0, 0xd3, 0x4, 0x6, 0x9, 0x80000000, 0x8, 0x2, 0x8, 0x1, 0x1, 0x0, 0x55911031, 0x2, 0x3, 0x9, 0x6, 0x7ff, 0x3, 0x8, 0x7, 0x2, 0x2, 0x4, 0x93, 0x7, 0x7fffffff, 0x8, 0x4, 0x0, 0xb791, 0x401, 0xff, 0x7f, 0xfffffff8, 0x9, 0xa, 0x6, 0x7fffffff, 0x2, 0x3, 0x3, 0x2, 0x5, 0x8001, 0x8, 0xe48, 0x8, 0x4275, 0x8, 0x3ff, 0x9, 0x3, 0xab1, 0x3ff, 0x7, 0x8, 0x1, 0x4, 0x3, 0x5, 0x3, 0x13, 0x1, 0x1, 0x6, 0x3, 0x101, 0x5, 0x8001, 0x4, 0x9, 0x8, 0x8ad, 0x411, 0x1, 0x9502, 0x8, 0x4, 0x0, 0x5, 0x4, 0xcdf, 0x3, 0x3, 0x7f, 0x40, 0x0, 0x1, 0xfffffff9, 0xe4, 0xfffffff8, 0xfffffffe, 0x5, 0xffff6408, 0x6, 0x3, 0x1, 0x5, 0x7, 0x5, 0x5, 0xafc0, 0x426a, 0x1ff, 0xd, 0x2, 0x7, 0x401, 0x2, 0x9, 0xffff, 0x6, 0x2, 0x9, 0x96, 0x8001, 0x3, 0x3, 0x1, 0x7, 0xfffffffd, 0x8, 0x1, 0x232, 0x4, 0x1, 0xf, 0x2, 0x80, 0x7fff, 0x12083c9a, 0xc9, 0x10, 0x7f, 0x3, 0x0, 0x0, 0x2528, 0x5, 0x7, 0x7, 0xffffffff, 0x0, 0x80000001, 0xc, 0x7fffffff, 0x2, 0x9, 0x10, 0x3, 0x1, 0x4, 0x4, 0xffffff6e, 0x7, 0x290, 0x50000000, 0x2, 0x1000, 0xbf6], 0x6, 0x400, 0x6}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f0000003640)={0x18, 0x0, r5, {0x2}}, 0x18) r9 = openat$cgroup_procs(r1, &(0x7f0000003680)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000036c0)=r8, 0x12) r10 = socket$inet6(0xa, 0x5, 0x7) pipe(&(0x7f0000003700)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuseblk(&(0x7f0000003740), &(0x7f0000003780)='./file0\x00', &(0x7f00000037c0), 0x14, &(0x7f0000003800)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x96b72f9ea6375e0b}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[], [{@audit}, {@smackfsroot={'smackfsroot', 0x3d, 'cgroup.threads\x00'}}, {@uid_eq={'uid', 0x3d, r6}}, {@subj_type={'subj_type', 0x3d, './cgroup.net/syz0\x00'}}, {@measure}, {@euid_gt={'euid>', r6}}, {@pcr={'pcr', 0x3d, 0x32}}, {@smackfsfloor={'smackfsfloor', 0x3d, './cgroup.net/syz0\x00'}}, {@obj_role={'obj_role', 0x3d, '\xff\xff'}}]}}) inotify_init() openat$cgroup_ro(r11, &(0x7f0000003940)='freezer.parent_freezing\x00', 0x0, 0x0) recvmmsg(r10, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003980)=""/24, 0x18}, {&(0x7f00000039c0)=""/169, 0xa9}], 0x2, &(0x7f0000003ac0)=""/4096, 0x1000}}, {{&(0x7f0000004ac0)=@caif=@dbg, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004b40)=""/97, 0x61}], 0x1, &(0x7f0000004c00)=""/120, 0x78}, 0x7ff}, {{&(0x7f0000004c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004d00)=""/253, 0xfd}, {&(0x7f0000004e00)}, {&(0x7f0000004e40)=""/167, 0xa7}, {&(0x7f0000004f00)=""/129, 0x81}, {&(0x7f0000004fc0)=""/80, 0x50}, {&(0x7f0000005040)=""/230, 0xe6}, {&(0x7f0000005140)=""/241, 0xf1}, {&(0x7f0000005240)=""/75, 0x4b}], 0x8, &(0x7f0000005340)=""/223, 0xdf}, 0x800}, {{&(0x7f0000005440)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000005700)=[{&(0x7f00000054c0)=""/113, 0x71}, {&(0x7f0000005540)=""/122, 0x7a}, {&(0x7f00000055c0)=""/222, 0xde}, {&(0x7f00000056c0)=""/62, 0x3e}], 0x4, &(0x7f0000005740)=""/96, 0x60}, 0x7fff}, {{&(0x7f00000057c0)=@ax25={{}, [@bcast, @rose, @remote, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005840)=""/193, 0xc1}, {&(0x7f0000005940)=""/162, 0xa2}, {&(0x7f0000005a00)=""/81, 0x51}, {&(0x7f0000005a80)=""/50, 0x32}, {&(0x7f0000005ac0)=""/103, 0x67}], 0x5, &(0x7f0000005bc0)=""/141, 0x8d}, 0x7}, {{&(0x7f0000005c80)=@can, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005d00)=""/162, 0xa2}, {&(0x7f0000005dc0)=""/104, 0x68}], 0x2, &(0x7f0000005e80)=""/73, 0x49}}], 0x6, 0x40010000, &(0x7f0000006080)={0x77359400}) ioctl$BTRFS_IOC_BALANCE_CTL(r9, 0x40049421, 0x2) ioctl$KDSKBLED(r12, 0x4b65, 0xffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r12, 0xc0189374, &(0x7f00000060c0)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0\x00'}) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r13, 0xc0189375, &(0x7f0000006100)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) splice(0xffffffffffffffff, &(0x7f0000006180)=0x1, 0xffffffffffffffff, &(0x7f00000061c0)=0x29, 0x4, 0x2) 814.610216ms ago: executing program 1 (id=5449): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, &(0x7f0000000240)={0x40, 0x10, 0x69, {0x69, 0xd, "d7003748efbe75f811027139dbe507c604fef0f8753789fd3f2c411576a8877a4313ac2ad837d0bb5d6169ca314dcebe8edffd1a24977824886e8a18280b3a4321cdefc453ad823fe6a6258dcb09fa0fe0344929b5ea3ea9e464fb1fe581e7147e6b63bf6c1a61"}}, &(0x7f00000007c0)=ANY=[@ANYBLOB="00031a0000001a03f10d82f43a1ca1fcdc50a053f01f75c1436d9b328c18260ed6ebadb098a344cd550062945b9cfb5d2d36e734615e0fc4b099f2a56d6d728cb95bcac5ba17dc949e1c45aac7041bb291816c5aa77aed5470ba60dd04ceb2d68ee13e67d9788b572c73d82c54a9344bb4ff2288bf9206125a2703c0cb7e8604b7451e5f41ca97f1a55da0f9a28be1ff9b7e364ce2e09a9b6bfc74d73c3311000000000000"]}, &(0x7f0000000600)={0x34, &(0x7f0000000480)={0x20, 0xa, 0x26, "4b55e843c748eece06044c59c056fc39f95e398857615f8a5b7a4cbabf76f7266dff7bb41f9a"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000006c0)={0x20, 0x0, 0xbf, {0xbd, "fec2f13387ce84bf779c5e29d78ffb6414a8ab41c6ba32b421e66bd8fe5687e3b819062d3a6b09ca1e19b1999c9595aaf9132f2a4380607106917e4e7526f6f71407f4fd2af3f5dc6eb4c8fa6be1e4b7e936d41be8c03eda0bad748745b9257502ac7000c8edd8730f83863a9f84d574eca34a81b34b7a7817f420ed1c6dcc28793ee49718be676275ac2e8a992758961f30e44e207866c89ccf746d700f4b75b56dc6291957285ba73f92fb610d647b00b1d64a8f66458abe8b2367ba"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x9d}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x4}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, '@8/u\x89\xbd\x9a\xa5\xe9\xd7S\x8am\xf5\xf4\xd5\x95\x1a\x9d\xd3\xb8\xa5%v\xa8\xa6\x8cdA\xba\xa3Qj\f)\xca\xa51\xce/\x1ae\x97.*K\x9e\xa7\xb2\xea\xb0\x94h\x1f\xe2\xd7\xc0f=0\xb4\xb8\xf3w\x1d\xf3j.Zs\xa0\"\x1bf\x05\x1f\xec]T\\\xceQ\xc7\xb2\x0f\x96\x9a\x8c\xc4\xde', 0x3a, '\x1e@/', 0x3a, './file0'}, 0x84) r4 = dup(r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r5, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x71e}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xfffc]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40000c8) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x20, 0x5, 0x6, "7f04bda6a5f0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 748.749822ms ago: executing program 2 (id=5450): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 502.582801ms ago: executing program 0 (id=5451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff}, 0x48) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b46, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'wg2\x00', 0x800}) (async) socket$packet(0x11, 0x2, 0x300) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000000b050000000000000000000700000008000340000000000800024070"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) close(r8) (async) socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 356.776864ms ago: executing program 0 (id=5452): unshare(0x2040400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = mq_open(&(0x7f0000000100)='@-\x00', 0x40, 0x18c, &(0x7f0000000140)={0x4, 0x3, 0xe, 0x81}) r2 = getpgid(0xffffffffffffffff) mq_notify(r1, &(0x7f0000000180)={0x0, 0x36, 0x4, @tid=r2}) r3 = fsopen(&(0x7f0000000240)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2040280) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) unshare(0x2040400) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) mq_open(&(0x7f0000000100)='@-\x00', 0x40, 0x18c, &(0x7f0000000140)={0x4, 0x3, 0xe, 0x81}) (async) getpgid(0xffffffffffffffff) (async) mq_notify(r1, &(0x7f0000000180)={0x0, 0x36, 0x4, @tid=r2}) (async) fsopen(&(0x7f0000000240)='binfmt_misc\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) unshare(0x2040280) (async) fsmount(r3, 0x0, 0x0) (async) fchdir(r4) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) (async) 356.054967ms ago: executing program 2 (id=5453): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)={[{0x2d, 'cpu'}]}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000b1b000/0x4000)=nil, 0x4000, 0xc, 0x10, r0, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) poll(0xfffffffffffffffd, 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="66ba610066ed450fc772f3c4220d47e00f01dfc42215be4f00f30f01f82e65450f00180f3235000800000f300f01e6664d0faef7", 0x34}], 0x1, 0x60, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000380)=0x4) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000280)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) sendfile(r2, r1, 0x0, 0x558410e9) 134.548782ms ago: executing program 0 (id=5454): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008430b03000000000000010912240001000000002b0400060103000100092100000001220b00090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) syz_usb_connect(0x5, 0x255, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) (async) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0xfe96, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r8 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000080)={0x2, 0x100, 0x7, {0x400e802, 0x8001, 0x400, 0x4}}) (async) sched_setattr(0x0, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2, "2111e96f"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x1, "ab38b0f0"}]}}, 0x0}, 0x0) 0s ago: executing program 3 (id=5455): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020055"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="004c05000000f2ce17912ea398bcd8"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x400402) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x42, 0xb, 0x70ad23, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x40, 0x6, &(0x7f0000000080)={0x1f, "b30a69283a9587dfa6434e07f695f3984820a74426495306bbced9189f724c0546"}}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x9b, 0x200, 0x4f, &(0x7f00000003c0)="4e8ac507481ed7964f3dce4e44eeb894837e6c2dc3e67f8c3e37e6230c92cfc261a15d172c93d6dbbdf236283970221f075eac78679a8a9b4f030d7e96c75fb79cf3da5c5b48cc337d049fb3267d4a"}, {0x6, 0x11, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): ice descriptor read/64, error -71 [ 965.355554][ T5914] usb usb2-port1: attempt power cycle [ 965.450350][T21962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5006'. [ 965.665116][ T5934] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 965.695142][ T5914] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 965.715579][ T5914] usb 2-1: device descriptor read/8, error -71 [ 965.817207][ T5934] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 965.829908][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.846546][ T5934] usb 1-1: config 0 descriptor?? [ 965.932424][T21980] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5011'. [ 965.955558][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 965.975709][ T5914] usb 2-1: device descriptor read/8, error -71 [ 966.085439][ T5914] usb usb2-port1: unable to enumerate USB device [ 966.615191][ T5972] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 966.788700][ T5972] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 966.797820][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.807167][ T5972] usb 3-1: config 0 descriptor?? [ 967.014437][ T5972] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 967.216852][ T5972] usb 3-1: USB disconnect, device number 111 [ 967.268757][ T5934] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 967.280985][ T5934] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 967.292037][ T5934] asix 1-1:0.0: probe with driver asix failed with error -71 [ 967.312913][ T5934] usb 1-1: USB disconnect, device number 5 [ 967.378562][T21997] netlink: 'syz.3.5017': attribute type 4 has an invalid length. [ 967.858442][T22002] ptrace attach of "./syz-executor exec"[14548] was attempted by "./syz-executor exec"[22002] [ 968.173523][T22013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5023'. [ 968.265261][ T5934] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 968.343916][T22019] (J: renamed from lo [ 968.426543][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 968.445327][ T5934] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 968.458646][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.495862][ T5934] usb 1-1: config 0 descriptor?? [ 968.584316][T22011] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 968.967200][T22029] loop2: detected capacity change from 0 to 7 [ 968.980804][T22029] Dev loop2: unable to read RDB block 7 [ 968.986722][T22029] loop2: AHDI p1 p2 p3 [ 968.991085][T22029] loop2: partition table partially beyond EOD, truncated [ 969.001023][T22029] loop2: p1 start 1601398130 is beyond EOD, truncated [ 969.153865][T22011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.285269][T22029] loop2: p2 start 1702059890 is beyond EOD, truncated [ 969.292444][T22011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.341190][ T5934] monterey 0003:0566:3004.001D: unknown main item tag 0x0 [ 969.348974][ T5934] monterey 0003:0566:3004.001D: item fetching failed at offset 3/5 [ 969.387368][ T5934] monterey 0003:0566:3004.001D: probe with driver monterey failed with error -22 [ 969.804321][ T5934] usb 1-1: USB disconnect, device number 6 [ 969.940680][T22043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 969.967227][T22049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5030'. [ 970.017324][T22049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5030'. [ 970.102776][T22041] fuse: Bad value for 'fd' [ 970.394975][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5039'. [ 970.425339][ T5972] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 970.523521][T22068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 970.541805][T22068] bond0: (slave vlan1): Opening slave failed [ 970.630478][ T5972] usb 2-1: config 0 has no interfaces? [ 970.656418][ T5972] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 970.666859][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.827282][ T5972] usb 2-1: config 0 descriptor?? [ 971.210260][ T30] audit: type=1326 audit(1755386983.696:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22053 comm="syz.4.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5018ebe9 code=0x7fc00000 [ 971.605215][ T5972] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 971.926088][T22088] fuse: Unknown parameter '/wh8)71Jo {dDmɈbቀw6FD䧏vs)7' [ 971.953190][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 972.022818][T22080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.031582][T22080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.326787][ T5914] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 972.506694][ T5914] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 972.532062][ T5914] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 972.551791][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.567853][ T5914] usb 1-1: Product: syz [ 972.572211][ T5914] usb 1-1: Manufacturer: syz [ 972.576881][ T5914] usb 1-1: SerialNumber: syz [ 972.593721][ T5914] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 972.803180][ T30] audit: type=1326 audit(1755386985.296:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 972.832530][ T30] audit: type=1326 audit(1755386985.306:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 973.104140][ T30] audit: type=1326 audit(1755386985.326:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 973.178676][ T30] audit: type=1326 audit(1755386985.326:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 973.267061][ T30] audit: type=1326 audit(1755386985.326:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 973.293388][ T30] audit: type=1326 audit(1755386985.326:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 973.459853][ T30] audit: type=1326 audit(1755386985.326:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 973.522233][ T8195] usb 2-1: USB disconnect, device number 6 [ 973.659277][ T30] audit: type=1326 audit(1755386985.326:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 973.682940][ T30] audit: type=1326 audit(1755386985.326:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 973.933320][ T5914] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 973.948885][ T5914] usb 1-1: USB disconnect, device number 7 [ 974.186572][ T5972] usb 4-1: unable to get BOS descriptor or descriptor too short [ 974.194940][ T5972] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 974.215963][ T5972] usb 4-1: can't read configurations, error -71 [ 974.233194][T22111] input: syz1 as /devices/virtual/input/input76 [ 974.584890][T22123] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3176969119 (406652047232 ns) > initial count (321993810432 ns). Using initial count to start timer. [ 974.604647][T22123] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 974.645161][ T8195] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 974.761494][T22127] tipc: Started in network mode [ 974.766648][T22127] tipc: Node identity 080211000001, cluster identity 4711 [ 974.773858][T22127] tipc: Enabled bearer , priority 0 [ 974.780570][ T5914] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 974.790969][T22127] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 974.795224][ T8195] usb 2-1: Using ep0 maxpacket: 8 [ 974.803808][T22127] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 974.807644][ T8195] usb 2-1: unable to get BOS descriptor or descriptor too short [ 974.821232][ T8195] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 974.833627][ T8195] usb 2-1: config 7 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 974.843837][ T8195] usb 2-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 974.859746][ T8195] usb 2-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.1c [ 974.869313][ T8195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.878564][ T8195] usb 2-1: Product: syz [ 974.883137][ T8195] usb 2-1: Manufacturer: syz [ 974.883975][T22127] tipc: Resetting bearer [ 974.887809][ T8195] usb 2-1: SerialNumber: syz [ 974.935162][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 974.943107][ T5914] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.964339][ T5914] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 974.977999][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 974.984935][ T5914] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 974.994264][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.004239][ T5914] usb 1-1: config 0 descriptor?? [ 975.030139][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5057'. [ 975.132254][T22117] 8021q: adding VLAN 0 to HW filter on device bond9 [ 975.176076][ T8195] usb 2-1: USB disconnect, device number 7 [ 975.416709][ T5914] wacom 0003:056A:0094.001E: ignoring exceeding usage max [ 975.425289][T21804] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 975.425354][ T5914] wacom 0003:056A:0094.001E: Using device in hidraw-only mode [ 975.442841][ T5914] wacom 0003:056A:0094.001E: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 975.597421][T21804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 975.607148][T21804] usb 4-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 975.624764][ T8195] usb 1-1: USB disconnect, device number 8 [ 975.648024][T21804] usb 4-1: config 1 interface 0 has no altsetting 0 [ 975.672315][T21804] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 975.684139][T21804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.696734][T21804] usb 4-1: Product: syz [ 975.702097][T21804] usb 4-1: Manufacturer: syz [ 975.707152][T21804] usb 4-1: SerialNumber: syz [ 975.908703][ T5914] tipc: Node number set to 134418688 [ 975.928570][T21804] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input77 [ 975.971422][T21804] usb 4-1: USB disconnect, device number 20 [ 976.515275][ T5914] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 976.545186][ T5934] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 976.675140][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 976.682085][ T5914] usb 1-1: config 1 has an invalid descriptor of length 193, skipping remainder of the config [ 976.693604][ T5914] usb 1-1: config 1 interface 0 altsetting 121 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 976.708264][ T5914] usb 1-1: config 1 interface 0 has no altsetting 0 [ 976.719138][ T5914] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 976.729490][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.737712][ T5914] usb 1-1: Product: syz [ 976.742589][ T5934] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 976.755536][ T5914] usb 1-1: Manufacturer: syz [ 976.760204][ T5914] usb 1-1: SerialNumber: syz [ 976.776961][ T5934] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 976.795209][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.811710][ T5934] usb 3-1: Product: syz [ 976.825146][ T5934] usb 3-1: Manufacturer: syz [ 976.829874][ T5934] usb 3-1: SerialNumber: syz [ 976.839206][ T5934] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 976.875539][T22162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5069'. [ 976.887833][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 976.887848][ T30] audit: type=1326 audit(1755386989.386:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22161 comm="syz.3.5069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f58ebe9 code=0x0 [ 977.007425][ T5914] usb 1-1: bad CDC descriptors [ 977.015774][ T5914] usb 1-1: USB disconnect, device number 9 [ 977.048455][ T30] audit: type=1326 audit(1755386989.536:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 977.099121][ T30] audit: type=1326 audit(1755386989.536:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 977.137452][ T30] audit: type=1326 audit(1755386989.536:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 977.173145][ T30] audit: type=1326 audit(1755386989.536:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 977.203424][ T30] audit: type=1326 audit(1755386989.536:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 977.226581][ T30] audit: type=1326 audit(1755386989.536:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 977.253755][ T30] audit: type=1326 audit(1755386989.536:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 977.278274][ T30] audit: type=1326 audit(1755386989.536:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 977.302035][ T30] audit: type=1326 audit(1755386989.536:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 977.442792][T22174] pim6reg: entered allmulticast mode [ 977.464711][T22174] pim6reg: left allmulticast mode [ 977.925132][T21804] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 978.155180][T21804] usb 4-1: Using ep0 maxpacket: 32 [ 978.177249][T21804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.205188][ T5934] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 978.238074][ T5934] usb 3-1: USB disconnect, device number 112 [ 978.240572][T21804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.277715][T21804] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 978.298625][T21804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.336752][T21804] usb 4-1: config 0 descriptor?? [ 978.354209][T22196] loop2: detected capacity change from 0 to 7 [ 978.363956][T19389] Dev loop2: unable to read RDB block 7 [ 978.369889][T19389] loop2: AHDI p1 p2 p3 [ 978.374250][T19389] loop2: partition table partially beyond EOD, truncated [ 978.382031][T19389] loop2: p1 start 1601398130 is beyond EOD, truncated [ 978.389078][T19389] loop2: p2 start 1702059890 is beyond EOD, truncated [ 978.396745][T22196] Dev loop2: unable to read RDB block 7 [ 978.404150][T22196] loop2: AHDI p1 p2 p3 [ 978.417179][T22196] loop2: partition table partially beyond EOD, truncated [ 978.424661][T22196] loop2: p1 start 1601398130 is beyond EOD, truncated [ 978.432576][T22196] loop2: p2 start 1702059890 is beyond EOD, truncated [ 978.527127][T22199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5079'. [ 978.563791][T22199] bridge1: port 1(veth0_to_bond) entered blocking state [ 978.575933][T22199] bridge1: port 1(veth0_to_bond) entered disabled state [ 978.583071][T22199] veth0_to_bond: entered allmulticast mode [ 978.590565][T22199] veth0_to_bond: entered promiscuous mode [ 978.602596][T22201] tipc: Failed to remove unknown binding: 66,1,1/0:3758036240/3758036242 [ 978.633397][T22201] tipc: Failed to remove unknown binding: 66,1,1/0:3758036240/3758036242 [ 978.672949][T22201] tipc: Failed to remove unknown binding: 66,1,1/0:3758036240/3758036242 [ 978.747463][T21804] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 978.945119][ T8195] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 978.952681][ T5972] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 978.960838][T21804] ft260 0003:0403:6030.001F: chip code: 0000 0000 [ 979.115097][ T8195] usb 2-1: Using ep0 maxpacket: 16 [ 979.115160][ T5934] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 979.120293][ T5972] usb 1-1: Using ep0 maxpacket: 16 [ 979.134694][ T8195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.145599][ T8195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.155148][ T5972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.165440][T21804] ft260 0003:0403:6030.001F: failed to retrieve system status [ 979.173035][T21804] ft260 0003:0403:6030.001F: probe with driver ft260 failed with error -71 [ 979.181750][ T5972] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 979.190832][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.200568][ T8195] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 979.210678][T21804] usb 4-1: USB disconnect, device number 21 [ 979.217091][ T8195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.225693][ T5972] usb 1-1: config 0 descriptor?? [ 979.233211][ T8195] usb 2-1: Product: syz [ 979.239080][ T5972] pxrc 1-1:0.0: Could not find endpoint [ 979.245170][ T8195] usb 2-1: Manufacturer: syz [ 979.249772][ T8195] usb 2-1: SerialNumber: syz [ 979.275104][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 979.281671][ T5934] usb 3-1: config 1 has an invalid interface number: 137 but max is 0 [ 979.291729][ T5934] usb 3-1: config 1 has no interface number 0 [ 979.298208][ T5934] usb 3-1: config 1 interface 137 has no altsetting 0 [ 979.308218][ T5934] usb 3-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 979.317292][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.325412][ T5934] usb 3-1: Product: syz [ 979.329579][ T5934] usb 3-1: Manufacturer: syz [ 979.334195][ T5934] usb 3-1: SerialNumber: syz [ 979.438525][T21804] usb 1-1: USB disconnect, device number 10 [ 979.462563][ T8195] usb 2-1: 0:2 : does not exist [ 979.472167][ T8195] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 979.490397][ T8195] usb 2-1: USB disconnect, device number 8 [ 979.507222][T19389] udevd[19389]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.738094][T22215] tipc: Enabled bearer , priority 10 [ 979.855945][ T5950] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 979.863474][ T5950] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 979.871886][ T5950] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 979.879711][ T5950] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 979.887584][ T5950] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 979.895323][ T5950] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 979.903231][ T5950] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 979.914604][ T5950] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 979.922215][ T5950] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 979.930598][ T5950] hid-generic 0002:0004:0009.0020: hidraw0: HID v0.04 Device [syz0] on syz0 [ 980.012607][T22221] fido_id[22221]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 980.118925][T22230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5090'. [ 980.138228][T22229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5091'. [ 980.290529][T22233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.309216][T22233] bond0: (slave vlan4): Opening slave failed [ 980.345146][ T8195] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 980.473006][T22236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5092'. [ 980.518371][ T8195] usb 1-1: Using ep0 maxpacket: 8 [ 980.528267][ T8195] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 980.537730][ T8195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.546254][ T8195] usb 1-1: Product: syz [ 980.550605][ T8195] usb 1-1: Manufacturer: syz [ 980.560858][ T8195] usb 1-1: SerialNumber: syz [ 980.656944][T22238] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 980.685474][T22238] vlan2: entered promiscuous mode [ 980.700592][ T8195] usb 1-1: config 0 descriptor?? [ 980.742847][ T8195] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 980.865090][ T5950] tipc: Node number set to 145549834 [ 981.265205][ T8195] gspca_sonixj: reg_w1 err -110 [ 981.272073][ T8195] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 981.847045][ T5934] pl2303 3-1:1.137: required interrupt-in endpoint missing [ 981.858892][ T5934] usb 3-1: USB disconnect, device number 113 [ 983.212677][T22264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.222964][T22264] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5099'. [ 983.662944][T22271] loop2: detected capacity change from 0 to 7 [ 983.681732][T22271] Dev loop2: unable to read RDB block 7 [ 983.707110][T22271] loop2: AHDI p1 p2 p3 [ 983.728188][T22271] loop2: partition table partially beyond EOD, truncated [ 983.775348][T22271] loop2: p1 start 1601398130 is beyond EOD, truncated [ 983.867875][T22271] loop2: p2 start 1702059890 is beyond EOD, truncated [ 984.084486][T22275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5101'. [ 984.105329][ T5234] Dev loop2: unable to read RDB block 7 [ 984.111002][ T5234] loop2: AHDI p1 p2 p3 [ 984.117036][ T5234] loop2: partition table partially beyond EOD, truncated [ 984.124952][ T5234] loop2: p1 start 1601398130 is beyond EOD, truncated [ 984.137403][ T5234] loop2: p2 start 1702059890 is beyond EOD, truncated [ 984.283965][T22283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5103'. [ 984.294537][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5102'. [ 984.310147][T22283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.321626][T22283] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5103'. [ 984.540116][T22286] loop6: detected capacity change from 0 to 7 [ 984.547601][T22286] Dev loop6: unable to read RDB block 7 [ 984.553267][T22286] loop6: AHDI p1 p2 p3 [ 984.557526][T22286] loop6: partition table partially beyond EOD, truncated [ 984.608957][T22286] loop6: p1 start 1405162169 is beyond EOD, truncated [ 984.616802][T22286] loop6: p2 start 1203593728 is beyond EOD, truncated [ 984.728676][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5105'. [ 984.900657][ T5934] usb 1-1: USB disconnect, device number 11 [ 985.049055][T22298] veth1_macvtap: left promiscuous mode [ 985.227124][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5110'. [ 985.734816][T22311] loop2: detected capacity change from 0 to 7 [ 985.744666][T22311] Dev loop2: unable to read RDB block 7 [ 985.771425][T22311] loop2: AHDI p1 p2 p3 [ 985.790260][T22311] loop2: partition table partially beyond EOD, truncated [ 985.837197][T22311] loop2: p1 start 1601398130 is beyond EOD, truncated [ 985.852843][T22311] loop2: p2 start 1702059890 is beyond EOD, truncated [ 986.371991][T22316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5112'. [ 986.382541][T22316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.429619][T22316] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5112'. [ 986.963896][T22323] binder: BINDER_SET_CONTEXT_MGR already set [ 986.971324][T22324] binder: BINDER_SET_CONTEXT_MGR already set [ 986.977830][T22324] binder: 22322:22324 ioctl 4018620d 200000000040 returned -16 [ 986.986090][T22323] binder: 22322:22323 ioctl 4018620d 200000000040 returned -16 [ 986.996859][T22323] binder: 22322:22323 ioctl c0306201 2000000001c0 returned -22 [ 987.365448][ T8195] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 987.385437][T21804] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 987.545650][ T8195] usb 1-1: Using ep0 maxpacket: 16 [ 987.550857][T21804] usb 3-1: Using ep0 maxpacket: 32 [ 987.562999][T21804] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 987.571496][ T8195] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 987.579719][T21804] usb 3-1: config 0 has no interface number 0 [ 987.663427][T21804] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 987.690118][ T8195] usb 1-1: config 1 has no interface number 0 [ 987.713007][ T8195] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 987.729693][T21804] usb 3-1: config 0 interface 85 has no altsetting 0 [ 987.738318][ T8195] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 987.763354][T21804] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 987.785224][T21804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.793243][T21804] usb 3-1: Product: syz [ 987.797536][ T8195] usb 1-1: config 1 interface 105 has no altsetting 0 [ 987.801338][T22343] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5121'. [ 987.823670][T21804] usb 3-1: Manufacturer: syz [ 987.828382][T21804] usb 3-1: SerialNumber: syz [ 987.845435][ T8195] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 987.858901][T21804] usb 3-1: config 0 descriptor?? [ 987.868926][ T8195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.884400][ T8195] usb 1-1: Product: syz [ 987.925102][ T8195] usb 1-1: Manufacturer: syz [ 987.932322][ T8195] usb 1-1: SerialNumber: syz [ 987.948563][T22327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 987.969945][T22327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 988.580536][T21804] appletouch 3-1:0.85: Geyser mode initialized. [ 988.643763][T21804] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input78 [ 988.732552][T22348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 988.767684][T22348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 988.806045][ T5934] usb 3-1: USB disconnect, device number 114 [ 988.819218][ T5934] appletouch 3-1:0.85: input: appletouch disconnected [ 989.246509][ T8195] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 989.258750][ T8195] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 989.269991][ T8195] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 989.285147][ T8195] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, be:3b:ec:70:61:16 [ 989.301168][ T8195] usb 1-1: USB disconnect, device number 12 [ 989.311492][ T8195] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 989.376444][ T8195] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 989.386040][ T8195] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 989.395491][ T8195] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 989.469158][ T30] kauditd_printk_skb: 373 callbacks suppressed [ 989.469172][ T30] audit: type=1326 audit(1755387001.966:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 989.499804][ T30] audit: type=1326 audit(1755387001.996:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 989.525406][ T30] audit: type=1326 audit(1755387002.016:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 989.550125][T22355] program syz.2.5124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 989.560814][ T30] audit: type=1326 audit(1755387002.026:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 989.587555][ T30] audit: type=1326 audit(1755387002.046:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54b9f8d550 code=0x7ffc0000 [ 989.612081][ T30] audit: type=1326 audit(1755387002.046:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 989.644080][ T30] audit: type=1326 audit(1755387002.046:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 989.668010][ T30] audit: type=1326 audit(1755387002.046:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 989.691565][ T30] audit: type=1326 audit(1755387002.046:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 989.715524][ T30] audit: type=1326 audit(1755387002.046:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22352 comm="syz.2.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 990.515452][ T8195] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 990.653391][T22376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5131'. [ 990.663776][T22376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.675999][T22376] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5131'. [ 990.695621][ T8195] usb 2-1: Using ep0 maxpacket: 8 [ 990.703699][ T8195] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 990.847097][ T8195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.863629][ T8195] usb 2-1: Product: syz [ 990.869278][ T8195] usb 2-1: Manufacturer: syz [ 990.875549][ T8195] usb 2-1: SerialNumber: syz [ 990.883773][ T8195] usb 2-1: config 0 descriptor?? [ 991.099438][T22365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.125573][T22365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.234112][ T8195] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 991.472935][T22383] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5133'. [ 991.815091][ T5934] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 991.965109][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 991.971612][ T5934] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 991.981497][ T5934] usb 1-1: config 1 has no interface number 0 [ 991.991319][ T5934] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 992.004663][ T5934] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 992.019408][ T5934] usb 1-1: config 1 interface 105 has no altsetting 0 [ 992.030884][ T5934] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 992.069508][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.077554][ T5934] usb 1-1: Product: syz [ 992.081712][ T5934] usb 1-1: Manufacturer: syz [ 992.086577][ T5934] usb 1-1: SerialNumber: syz [ 992.094749][T22389] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 992.114507][T22389] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 992.182447][T22395] loop6: detected capacity change from 0 to 7 [ 992.189871][T22395] Dev loop6: unable to read RDB block 7 [ 992.195496][T22395] loop6: AHDI p1 p2 p3 [ 992.199770][T22395] loop6: partition table partially beyond EOD, truncated [ 992.208208][T22395] loop6: p1 start 1405162169 is beyond EOD, truncated [ 992.217366][T22395] loop6: p2 start 1203593728 is beyond EOD, truncated [ 992.459068][T22401] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5138'. [ 992.537475][ T8195] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 992.540789][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5139'. [ 992.576639][T22389] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 992.635438][T22389] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 992.905189][ T5950] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 993.058759][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 993.065558][ T5950] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 993.073762][ T5950] usb 3-1: config 0 has no interface number 0 [ 993.080236][ T5950] usb 3-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.091949][ T5950] usb 3-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.102170][ T5934] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 993.115110][ T5950] usb 3-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.136143][ T5950] usb 3-1: config 0 interface 63 has no altsetting 0 [ 993.142932][ T5934] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 993.155176][ T5950] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 993.164592][ T5934] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 993.175629][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.201407][ T5934] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ae:ba:d3:af:3b:91 [ 993.232147][ T5950] usb 3-1: config 0 descriptor?? [ 993.247997][ T5934] usb 1-1: USB disconnect, device number 13 [ 993.304635][ T5934] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 993.306264][ T8195] usb 2-1: USB disconnect, device number 9 [ 993.385520][ T5934] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 993.396430][ T5934] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 993.408346][ T5934] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 993.644250][ T5950] uclogic 0003:28BD:0909.0021: interface is invalid, ignoring [ 993.687797][ T8195] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 993.844125][T22437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.857328][T22437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.886778][ T8195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 993.909879][ T8195] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 993.926653][T21804] usb 3-1: USB disconnect, device number 115 [ 993.956465][ T8195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.999201][ T8195] usb 2-1: config 0 descriptor?? [ 994.021607][T22415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 994.056372][T22444] loop6: detected capacity change from 0 to 7 [ 994.067770][T19389] Dev loop6: unable to read RDB block 7 [ 994.074081][T19389] loop6: AHDI p1 p2 p3 [ 994.079761][T19389] loop6: partition table partially beyond EOD, truncated [ 994.087878][T19389] loop6: p1 start 1405162169 is beyond EOD, truncated [ 994.094824][T19389] loop6: p2 start 1203593728 is beyond EOD, truncated [ 994.103979][T22444] Dev loop6: unable to read RDB block 7 [ 994.112356][T22444] loop6: AHDI p1 p2 p3 [ 994.117696][T22444] loop6: partition table partially beyond EOD, truncated [ 994.126001][T22444] loop6: p1 start 1405162169 is beyond EOD, truncated [ 994.132888][T22444] loop6: p2 start 1203593728 is beyond EOD, truncated [ 994.143252][T22446] loop2: detected capacity change from 0 to 7 [ 994.150661][T22446] Dev loop2: unable to read RDB block 7 [ 994.157438][T22446] loop2: AHDI p1 p2 p3 [ 994.162014][T22446] loop2: partition table partially beyond EOD, truncated [ 994.173144][T22446] loop2: p1 start 1601398130 is beyond EOD, truncated [ 994.191365][T22446] loop2: p2 start 1702059890 is beyond EOD, truncated [ 994.360618][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5150'. [ 994.437457][T22415] netlink: 'syz.1.5143': attribute type 2 has an invalid length. [ 994.446049][T22415] netlink: 'syz.1.5143': attribute type 8 has an invalid length. [ 994.459061][T22415] netlink: 1160 bytes leftover after parsing attributes in process `syz.1.5143'. [ 994.760177][ T8195] usbhid 2-1:0.0: can't add hid device: -71 [ 994.777668][ T8195] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 994.811633][ T8195] usb 2-1: USB disconnect, device number 10 [ 995.879329][T22489] loop6: detected capacity change from 0 to 7 [ 995.892744][T19389] Dev loop6: unable to read RDB block 7 [ 995.901627][T19389] loop6: AHDI p1 p2 p3 [ 995.908111][T19389] loop6: partition table partially beyond EOD, truncated [ 995.962348][T19389] loop6: p1 start 1405162169 is beyond EOD, truncated [ 996.057915][T22480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.075113][T19389] loop6: p2 start 1203593728 is beyond EOD, truncated [ 996.092379][T22489] Dev loop6: unable to read RDB block 7 [ 996.102181][T22489] loop6: AHDI p1 p2 p3 [ 996.128600][T22489] loop6: partition table partially beyond EOD, truncated [ 996.152316][T22489] loop6: p1 start 1405162169 is beyond EOD, truncated [ 996.245885][T22489] loop6: p2 start 1203593728 is beyond EOD, truncated [ 997.625104][ T5950] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 997.789966][T22530] loop6: detected capacity change from 0 to 7 [ 997.798633][T22530] Dev loop6: unable to read RDB block 7 [ 997.813472][T22530] loop6: AHDI p1 p2 p3 [ 997.822094][T22530] loop6: partition table partially beyond EOD, truncated [ 997.999287][T22530] loop6: p1 start 1405162169 is beyond EOD, truncated [ 998.012509][T22530] loop6: p2 start 1203593728 is beyond EOD, truncated [ 998.020386][ T5950] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 998.033171][ T5950] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 998.060233][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.072481][ T5950] usb 1-1: Product: syz [ 998.082669][ T5950] usb 1-1: Manufacturer: syz [ 998.087297][ T5950] usb 1-1: SerialNumber: syz [ 998.103385][ T5950] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 998.388974][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 998.388991][ T30] audit: type=1326 audit(1755387010.816:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 998.466494][ T5934] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 998.466562][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.481578][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.507732][ T30] audit: type=1326 audit(1755387010.816:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 998.531230][ T30] audit: type=1326 audit(1755387010.816:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 998.553926][ T30] audit: type=1326 audit(1755387010.816:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 998.576256][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.582625][ T30] audit: type=1326 audit(1755387010.816:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 998.618198][T22542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5174'. [ 998.627613][ T30] audit: type=1326 audit(1755387010.836:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 998.757798][ T5934] usb 2-1: config index 0 descriptor too short (expected 48, got 43) [ 998.843552][T22545] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5168'. [ 998.887437][ T30] audit: type=1326 audit(1755387010.836:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 998.976733][ T5934] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 998.984980][ T5934] usb 2-1: config 0 has no interface number 0 [ 999.002025][ T30] audit: type=1326 audit(1755387010.836:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 999.057767][ T5934] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 999.155975][ T5934] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 999.169160][ T30] audit: type=1326 audit(1755387010.836:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 999.191811][ T5934] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 999.203687][ T5934] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 999.213703][ T30] audit: type=1326 audit(1755387010.836:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22523 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 999.236926][ T5934] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 999.255925][ T5934] usb 2-1: New USB device found, idVendor=07b4, idProduct=180a, bcdDevice= 1.02 [ 999.284090][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.315413][ T5934] usb 2-1: Product: syz [ 999.320025][ T5934] usb 2-1: Manufacturer: syz [ 999.324955][ T5934] usb 2-1: SerialNumber: syz [ 999.362934][ T5934] usb 2-1: config 0 descriptor?? [ 999.371570][T22534] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 999.922663][T22565] loop6: detected capacity change from 0 to 7 [ 999.932387][T19389] Dev loop6: unable to read RDB block 7 [ 999.940842][T19389] loop6: AHDI p1 p2 p3 [ 999.946911][T19389] loop6: partition table partially beyond EOD, truncated [ 999.955143][T19389] loop6: p1 start 1405162169 is beyond EOD, truncated [ 999.962348][T19389] loop6: p2 start 1203593728 is beyond EOD, truncated [ 999.971591][T22565] Dev loop6: unable to read RDB block 7 [ 999.978587][T22565] loop6: AHDI p1 p2 p3 [ 999.982892][T22565] loop6: partition table partially beyond EOD, truncated [ 1000.007773][T22565] loop6: p1 start 1405162169 is beyond EOD, truncated [ 1000.025717][ T5950] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1000.043189][T22565] loop6: p2 start 1203593728 is beyond EOD, truncated [ 1000.074036][ T5950] usb 1-1: USB disconnect, device number 14 [ 1000.406799][ T8195] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1000.492637][T22577] fuse: Unknown parameter 'pcr' [ 1000.589613][ T8195] usb 3-1: Using ep0 maxpacket: 16 [ 1000.592357][T22582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5189'. [ 1000.596213][ T8195] usb 3-1: config 0 has an invalid interface number: 94 but max is 0 [ 1000.622296][ T8195] usb 3-1: config 0 has no interface number 0 [ 1000.637079][ T8195] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 1000.652261][ T8195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.710714][T22584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1000.769102][ T8195] usb 3-1: Product: syz [ 1000.778844][ T8195] usb 3-1: Manufacturer: syz [ 1000.835762][ T8195] usb 3-1: SerialNumber: syz [ 1000.889859][ T5950] usb 2-1: USB disconnect, device number 11 [ 1000.928020][ T8195] usb 3-1: config 0 descriptor?? [ 1000.939847][ T8195] usb 3-1: unsupported MDLM descriptors [ 1001.585097][ T5950] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1001.822038][ T5950] usb 2-1: config 0 has no interfaces? [ 1001.842214][ T5950] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1001.899935][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.932804][ T5950] usb 2-1: Product: syz [ 1001.954163][ T5950] usb 2-1: Manufacturer: syz [ 1001.976894][ T5950] usb 2-1: SerialNumber: syz [ 1002.011570][ T5950] usb 2-1: config 0 descriptor?? [ 1002.382587][T22592] loop6: detected capacity change from 0 to 524288000 [ 1002.598566][T22593] support for the xor transformation has been removed. [ 1002.780822][ T5950] usb 3-1: USB disconnect, device number 116 [ 1003.577139][ T5907] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1003.777580][ T5907] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1003.902397][ T5907] usb 5-1: USB disconnect, device number 14 [ 1004.476221][ T8195] usb 2-1: USB disconnect, device number 12 [ 1004.675089][ T5907] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1005.225360][ T8195] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1005.436647][ T8195] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.453844][ T8195] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1005.465860][ T8195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.478084][ T8195] usb 1-1: Product: syz [ 1005.484062][ T8195] usb 1-1: Manufacturer: syz [ 1005.511574][ T8195] usb 1-1: SerialNumber: syz [ 1005.552610][ T8195] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1005.748051][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 1005.748069][ T30] audit: type=1326 audit(1755387018.246:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1005.817632][ T30] audit: type=1326 audit(1755387018.276:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1005.921313][ T30] audit: type=1326 audit(1755387018.276:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1005.945487][ T30] audit: type=1326 audit(1755387018.276:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1005.967878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.006628][ T30] audit: type=1326 audit(1755387018.276:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1006.156419][ T30] audit: type=1326 audit(1755387018.276:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1006.215330][ T30] audit: type=1326 audit(1755387018.276:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1006.241065][ T30] audit: type=1326 audit(1755387018.276:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1006.315453][ T30] audit: type=1326 audit(1755387018.276:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1006.346861][ T30] audit: type=1326 audit(1755387018.276:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6a58ebe9 code=0x7ffc0000 [ 1006.434359][ T8195] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1006.455730][ T8195] usb 1-1: USB disconnect, device number 15 [ 1007.015211][ T5907] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1007.187851][ T5907] usb 5-1: config 0 has no interfaces? [ 1007.199597][ T5907] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1007.522907][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.532558][ T5907] usb 5-1: Product: syz [ 1007.536798][ T5907] usb 5-1: Manufacturer: syz [ 1007.541396][ T5907] usb 5-1: SerialNumber: syz [ 1007.578478][ T5907] usb 5-1: config 0 descriptor?? [ 1007.676214][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5209'. [ 1007.776338][T22676] fuse: Unknown parameter '' [ 1007.802042][T22677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.809001][ T8195] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1007.941205][T22658] loop6: detected capacity change from 0 to 524288000 [ 1008.108491][ T8195] usb 3-1: config 0 has no interfaces? [ 1008.118588][ T8195] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1008.127856][ T8195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.136235][ T8195] usb 3-1: Product: syz [ 1008.140504][ T8195] usb 3-1: Manufacturer: syz [ 1008.149908][ T8195] usb 3-1: SerialNumber: syz [ 1008.161999][ T8195] usb 3-1: config 0 descriptor?? [ 1008.305981][T22658] support for the xor transformation has been removed. [ 1008.378536][T22685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5212'. [ 1008.424325][T22685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5212'. [ 1008.465307][T22671] support for the xor transformation has been removed. [ 1009.459863][T22705] loop2: detected capacity change from 0 to 7 [ 1009.467816][T18852] Dev loop2: unable to read RDB block 7 [ 1009.473418][T18852] loop2: AHDI p1 p2 p3 [ 1009.478003][T18852] loop2: partition table partially beyond EOD, truncated [ 1009.486635][T18852] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1009.497773][T18852] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1009.528116][T22705] Dev loop2: unable to read RDB block 7 [ 1009.533873][T22705] loop2: AHDI p1 p2 p3 [ 1009.546711][T22705] loop2: partition table partially beyond EOD, truncated [ 1009.554863][T22705] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1009.562254][T22705] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1010.079932][ T8195] usb 3-1: USB disconnect, device number 117 [ 1010.095305][ T5234] Dev loop2: unable to read RDB block 7 [ 1010.100935][ T5234] loop2: AHDI p1 p2 p3 [ 1010.107210][ T5234] loop2: partition table partially beyond EOD, truncated [ 1010.134602][ T5234] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1010.187637][ T5234] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1010.240666][ T5234] Dev loop2: unable to read RDB block 7 [ 1010.259945][ T5234] loop2: AHDI p1 p2 p3 [ 1010.269369][ T5234] loop2: partition table partially beyond EOD, truncated [ 1010.279891][ T5234] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1010.292909][ T5234] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1010.634194][T22725] (J: renamed from lo (while UP) [ 1010.650999][ T5934] usb 5-1: USB disconnect, device number 16 [ 1010.657002][ T5950] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1010.786926][T22732] tipc: Enabled bearer , priority 0 [ 1010.817116][ T5950] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.847995][ T5950] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1010.880450][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.896264][T22731] tipc: Disabling bearer [ 1011.007352][ T5950] usb 3-1: Product: syz [ 1011.037302][ T5950] usb 3-1: Manufacturer: syz [ 1011.075100][ T5950] usb 3-1: SerialNumber: syz [ 1011.094376][ T5950] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1011.290965][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 1011.290982][ T30] audit: type=1326 audit(1755387023.786:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.358834][ T30] audit: type=1326 audit(1755387023.786:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.425700][ T30] audit: type=1326 audit(1755387023.786:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.450915][ T30] audit: type=1326 audit(1755387023.816:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.473843][ T30] audit: type=1326 audit(1755387023.816:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.496958][ T30] audit: type=1326 audit(1755387023.816:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.625213][ T30] audit: type=1326 audit(1755387023.816:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.648664][ T30] audit: type=1326 audit(1755387023.816:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.671944][ T30] audit: type=1326 audit(1755387023.816:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.696632][ T30] audit: type=1326 audit(1755387023.816:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.2.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1011.722939][T22762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5230'. [ 1011.865439][T22768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.879740][T22768] vlan3: entered promiscuous mode [ 1012.065584][T22773] tipc: Enabled bearer , priority 0 [ 1012.152020][T22776] syzkaller0: entered promiscuous mode [ 1012.208038][T22777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5232'. [ 1012.274832][T22776] syzkaller0: entered allmulticast mode [ 1012.459525][ T5950] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1012.460523][T22772] tipc: Resetting bearer [ 1012.503141][T22772] tipc: Disabling bearer [ 1012.509606][ T5950] usb 3-1: USB disconnect, device number 118 [ 1012.950391][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5235'. [ 1013.132512][T22786] loop2: detected capacity change from 0 to 7 [ 1013.140313][T22786] Dev loop2: unable to read RDB block 7 [ 1013.148937][T22786] loop2: AHDI p1 p2 p3 [ 1013.157127][T22786] loop2: partition table partially beyond EOD, truncated [ 1013.164328][T22786] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1013.172796][T22786] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1013.468725][ T5234] Dev loop2: unable to read RDB block 7 [ 1013.474454][ T5234] loop2: AHDI p1 p2 p3 [ 1013.479555][ T5234] loop2: partition table partially beyond EOD, truncated [ 1013.491425][ T5234] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1013.527234][ T5234] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1013.734280][T22804] netlink: 'syz.0.5241': attribute type 10 has an invalid length. [ 1013.742698][T22804] bond0: (slave wlan1): Opening slave failed [ 1013.884835][T22808] dlm: non-version read from control device 36 [ 1014.605178][ T5950] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1014.745132][ T8195] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1014.775078][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 1014.782662][ T5950] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 1014.791031][ T5950] usb 3-1: config 0 has no interface number 0 [ 1014.799311][ T5950] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1014.808378][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.816423][ T5950] usb 3-1: Product: syz [ 1014.820582][ T5950] usb 3-1: Manufacturer: syz [ 1014.825203][ T5950] usb 3-1: SerialNumber: syz [ 1014.832996][ T5950] usb 3-1: config 0 descriptor?? [ 1014.840030][ T5950] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1014.905060][ T8195] usb 2-1: Using ep0 maxpacket: 16 [ 1014.912250][ T8195] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1014.924412][ T8195] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1014.933571][ T8195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.941762][ T8195] usb 2-1: Product: syz [ 1014.946359][ T8195] usb 2-1: Manufacturer: syz [ 1014.951126][ T8195] usb 2-1: SerialNumber: syz [ 1015.040022][T22813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.085280][T22813] IPVS: set_ctl: invalid protocol: 60 172.30.0.3:20004 [ 1015.095316][ T5950] gspca_topro: reg_w err -71 [ 1015.135113][ T5950] gspca_topro: Sensor soi763a [ 1015.156511][ T5950] usb 3-1: USB disconnect, device number 119 [ 1015.196589][ T8195] cdc_ncm 2-1:1.0: bind() failure [ 1015.212821][ T8195] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1015.231120][ T8195] cdc_ncm 2-1:1.1: bind() failure [ 1015.243007][ T8195] usb 2-1: USB disconnect, device number 13 [ 1015.244473][T22821] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1015.572329][T22826] syz.0.5248 (22826): drop_caches: 2 [ 1015.944358][ T5950] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1016.119568][ T5950] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.132252][ T5950] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1016.141757][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.150182][ T5950] usb 5-1: Product: syz [ 1016.154568][ T5950] usb 5-1: Manufacturer: syz [ 1016.159550][ T5950] usb 5-1: SerialNumber: syz [ 1016.170557][ T5950] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1016.312079][T22839] loop2: detected capacity change from 0 to 7 [ 1016.321207][T22839] Dev loop2: unable to read RDB block 7 [ 1016.327437][T22839] loop2: AHDI p1 p2 p3 [ 1016.331746][T22839] loop2: partition table partially beyond EOD, truncated [ 1016.342704][T22839] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1016.358013][T22839] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1016.377911][ T30] kauditd_printk_skb: 256 callbacks suppressed [ 1016.377926][ T30] audit: type=1326 audit(1755387028.876:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1016.407686][ T30] audit: type=1326 audit(1755387028.876:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1016.448550][ T30] audit: type=1326 audit(1755387028.946:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1016.540221][ T30] audit: type=1326 audit(1755387029.036:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1016.605488][ T30] audit: type=1326 audit(1755387029.036:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1016.705210][ T30] audit: type=1326 audit(1755387029.036:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1016.859218][ T30] audit: type=1326 audit(1755387029.036:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1016.940654][ T30] audit: type=1326 audit(1755387029.036:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1017.145513][ T30] audit: type=1326 audit(1755387029.036:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1017.175302][ T30] audit: type=1326 audit(1755387029.036:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22828 comm="syz.4.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5018ebe9 code=0x7ffc0000 [ 1017.237982][ T5950] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1017.272061][ T5950] usb 5-1: USB disconnect, device number 17 [ 1017.375082][ T5934] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1017.525151][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 1017.534803][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.548690][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.566865][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1017.582360][ T5934] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1017.600705][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.610688][ T5934] usb 2-1: config 0 descriptor?? [ 1017.837127][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 1017.843554][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1018.040929][ T5934] usb 2-1: USB disconnect, device number 14 [ 1018.388825][T22858] tipc: Enabled bearer , priority 24 [ 1018.675553][ T8195] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1018.847023][ T8195] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1018.855312][ T8195] usb 1-1: config 0 has no interface number 0 [ 1018.861435][ T8195] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1018.874441][ T8195] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=fc.88 [ 1018.885369][ T8195] usb 1-1: New USB device strings: Mfr=255, Product=1, SerialNumber=3 [ 1018.894477][ T8195] usb 1-1: Product: syz [ 1018.898741][ T8195] usb 1-1: Manufacturer: syz [ 1018.903741][ T8195] usb 1-1: SerialNumber: syz [ 1018.911134][ T8195] usb 1-1: config 0 descriptor?? [ 1018.925859][ T5934] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1019.087736][ T5934] usb 5-1: config 0 has an invalid interface number: 187 but max is 0 [ 1019.096190][ T5934] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1019.107792][ T5934] usb 5-1: config 0 has no interface number 0 [ 1019.113983][ T5934] usb 5-1: config 0 interface 187 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1019.150254][ T5934] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1019.160982][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.170131][ T5934] usb 5-1: Product: syz [ 1019.170149][ T5934] usb 5-1: Manufacturer: syz [ 1019.170165][ T5934] usb 5-1: SerialNumber: syz [ 1019.171872][ T5934] usb 5-1: config 0 descriptor?? [ 1019.172376][T22862] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1019.201280][ T5934] peak_usb 5-1:0.187 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1019.201307][ T5934] peak_usb 5-1:0.187: unable to read PCAN-USB serial number (err -22) [ 1019.243256][T22872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5258'. [ 1019.277226][ T5934] peak_usb 5-1:0.187: probe with driver peak_usb failed with error -22 [ 1019.295188][T21804] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1019.340954][ T8195] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1019.441571][ T8195] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 1019.441765][ T5934] usb 5-1: USB disconnect, device number 18 [ 1019.463833][ T8195] usb 1-1: USB disconnect, device number 16 [ 1019.491557][T18848] udevd[18848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.505137][ T5950] tipc: Node number set to 3411398581 [ 1019.535619][T21804] usb 3-1: Using ep0 maxpacket: 16 [ 1019.542694][T21804] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1019.551219][T21804] usb 3-1: config 1 has no interface number 0 [ 1019.557469][T21804] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1019.577461][T21804] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1019.594754][T21804] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1019.605874][T21804] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1019.615065][T21804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.624557][T21804] usb 3-1: Product: syz [ 1019.631206][T21804] usb 3-1: Manufacturer: syz [ 1019.639180][T21804] usb 3-1: SerialNumber: syz [ 1019.648023][T22868] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1019.655851][T22868] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1020.062734][T22876] netlink: 'syz.0.5263': attribute type 1 has an invalid length. [ 1020.111943][T22876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1020.147309][T22876] bond2: (slave gretap1): making interface the new active one [ 1020.157129][T22876] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1020.176988][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5264'. [ 1020.188333][T22879] bridge_slave_1: left allmulticast mode [ 1020.194050][T22879] bridge_slave_1: left promiscuous mode [ 1020.200421][T22879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.218778][T22882] Invalid logical block size (67108864) [ 1020.233860][T22868] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1020.242930][T22879] bridge_slave_0: left allmulticast mode [ 1020.250475][T22868] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1020.258478][T22879] bridge_slave_0: left promiscuous mode [ 1020.264566][T22879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.343705][T22887] loop7: detected capacity change from 0 to 7 [ 1020.352191][T19389] Dev loop7: unable to read RDB block 7 [ 1020.357996][T19389] loop7: unable to read partition table [ 1020.364108][T19389] loop7: partition table beyond EOD, truncated [ 1020.372703][T22887] Dev loop7: unable to read RDB block 7 [ 1020.381950][T22887] loop7: unable to read partition table [ 1020.388056][T22887] loop7: partition table beyond EOD, truncated [ 1020.398042][T22887] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 1020.459208][T21804] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 1020.473231][T21804] aqc111 3-1:1.105: probe with driver aqc111 failed with error -61 [ 1020.777310][T21804] usb 3-1: USB disconnect, device number 120 [ 1022.105291][T22919] PKCS7: Unknown OID: [4] 0.0.127.58.108.27.13(bad) [ 1022.112128][T22919] PKCS7: Only support pkcs7_signedData type [ 1022.125380][T21804] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1022.275157][T21804] usb 4-1: Using ep0 maxpacket: 16 [ 1022.283752][T21804] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1022.301420][T21804] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1022.320532][T21804] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.40 [ 1022.330969][T21804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.383845][T21804] usb 4-1: Product: 꾤戏嵻郫๾淁提⎬䴃ꐁ䡶墲渞သ閶ᅳ㞟飴嚰삗ეᅽञ篙鍄諱̟⛙猏씨⁹䎿豴煳贎갨넉痗쬓㷹㺞浶ᑤ鮕鰔薤癰譢冿೮骝ᗙద浠計㙽겫䍙洳₏ᣤڑ鷷嫄⊦힥꿴わᤲ緗홌﫢≘﷞㪸躾檿䠨 [ 1022.459723][T21804] usb 4-1: Manufacturer: ц [ 1022.639161][T22928] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5277'. [ 1022.676281][T21804] usbhid 4-1:1.0: can't add hid device: -71 [ 1022.682390][T21804] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1022.721924][T21804] usb 4-1: USB disconnect, device number 22 [ 1022.927395][T22937] loop2: detected capacity change from 0 to 7 [ 1022.934992][T18852] Dev loop2: unable to read RDB block 7 [ 1022.940962][T18852] loop2: AHDI p1 p2 p3 [ 1022.946657][T18852] loop2: partition table partially beyond EOD, truncated [ 1022.954190][T18852] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1022.961716][T18852] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1022.970466][T22937] Dev loop2: unable to read RDB block 7 [ 1022.976371][T22937] loop2: AHDI p1 p2 p3 [ 1022.981460][T22937] loop2: partition table partially beyond EOD, truncated [ 1022.989072][T22937] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1022.996464][T22937] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1023.077040][T22940] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5280'. [ 1023.102224][T22940] vivid-004: disconnect [ 1023.154839][T22942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5282'. [ 1023.281063][T22944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.297467][T22944] vlan4: entered promiscuous mode [ 1023.303580][T22944] bond0: (slave vlan4): Opening slave failed [ 1023.730254][T22934] vivid-004: reconnect [ 1024.085272][ T5934] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1024.253039][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 1024.271497][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.296359][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.342023][ T5934] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1024.371580][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.403154][ T5934] usb 1-1: config 0 descriptor?? [ 1025.050561][ T5934] usbhid 1-1:0.0: can't add hid device: -71 [ 1025.078048][ T5934] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1025.099487][ T5934] usb 1-1: USB disconnect, device number 17 [ 1025.383175][T22971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1025.428753][T22971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1025.620993][T22978] loop2: detected capacity change from 0 to 7 [ 1025.625847][T21804] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1025.629434][T18852] Dev loop2: unable to read RDB block 7 [ 1025.643780][T18852] loop2: AHDI p1 p2 p3 [ 1025.649228][T18852] loop2: partition table partially beyond EOD, truncated [ 1025.658279][T18852] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1025.665827][T18852] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1025.677203][T22978] Dev loop2: unable to read RDB block 7 [ 1025.697392][T22978] loop2: AHDI p1 p2 p3 [ 1025.701732][T22978] loop2: partition table partially beyond EOD, truncated [ 1025.711355][T22978] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1025.718876][T22978] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1025.817612][T21804] usb 3-1: Using ep0 maxpacket: 32 [ 1025.824301][T21804] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1025.837785][T21804] usb 3-1: config 0 has no interface number 0 [ 1025.868171][T21804] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1025.896633][T21804] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1025.905872][T21804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.951069][T21804] usb 3-1: Product: syz [ 1025.966417][T21804] usb 3-1: Manufacturer: syz [ 1025.984169][T21804] usb 3-1: SerialNumber: syz [ 1026.014747][T21804] usb 3-1: config 0 descriptor?? [ 1026.245371][ T5907] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1026.259152][T21804] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1026.297682][T22995] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5296'. [ 1026.308245][T22995] vivid-000: disconnect [ 1026.613744][T21804] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 1026.625223][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.778910][T21804] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 1026.782131][T22990] vivid-000: reconnect [ 1026.785762][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.805292][T21804] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 1026.812249][ T5907] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1026.854794][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.867359][T21804] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 1026.886559][T21804] usb 3-1: USB disconnect, device number 121 [ 1026.894109][T23002] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5300'. [ 1026.906208][ T5907] usb 4-1: config 0 descriptor?? [ 1027.181274][T23021] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5297'. [ 1027.248542][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1027.248559][ T30] audit: type=1326 audit(1755387039.746:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.0.5306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6a58ebe9 code=0x0 [ 1027.441620][ T5934] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1027.595076][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 1027.601565][ T5934] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1027.610633][T22993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.612843][T22993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.619218][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.640424][ T5934] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1027.647632][ T5934] pvrusb2: ********** [ 1027.651291][ T5907] usbhid 4-1:0.0: can't add hid device: -32 [ 1027.651673][ T5934] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1027.659400][ T5907] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1027.667946][ T5934] pvrusb2: Important functionality might not be entirely working. [ 1027.683598][ T5934] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1027.689440][ T5907] usb 4-1: USB disconnect, device number 23 [ 1027.697702][ T5934] pvrusb2: ********** [ 1027.705172][ T5950] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1027.839099][ T2345] pvrusb2: Invalid write control endpoint [ 1027.857147][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 1027.864129][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1027.873416][ T5950] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.883265][ T2345] pvrusb2: Invalid write control endpoint [ 1027.884932][ T5950] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1027.892328][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1027.901699][ T5950] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1027.923949][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1027.923963][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1027.923973][ T2345] pvrusb2: Device being rendered inoperable [ 1027.924024][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1027.924065][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1027.929619][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1027.932693][ T5950] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1027.944459][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1027.951416][ T5950] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1027.998285][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1028.002724][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.017942][ T5950] usb 3-1: Product: syz [ 1028.022240][ T5950] usb 3-1: Manufacturer: syz [ 1028.027062][ T5950] usb 3-1: SerialNumber: syz [ 1028.036834][T23033] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1028.088598][ T5907] usb 2-1: USB disconnect, device number 15 [ 1028.156074][T23043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5312'. [ 1028.258767][ T5950] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input79 [ 1028.425252][ T5934] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1028.535515][T23053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5314'. [ 1028.596679][T23055] loop6: detected capacity change from 0 to 7 [ 1028.606134][T23055] Dev loop6: unable to read RDB block 7 [ 1028.611835][T23055] loop6: AHDI p1 p2 p3 [ 1028.622186][T23055] loop6: partition table partially beyond EOD, truncated [ 1028.637720][T23055] loop6: p1 start 1405162169 is beyond EOD, truncated [ 1028.661006][T23055] loop6: p2 start 1203593728 is beyond EOD, truncated [ 1028.745145][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 1028.752384][ T5934] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.772430][ T5934] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.833925][ T5934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1028.862716][ T5907] usb 3-1: USB disconnect, device number 122 [ 1028.862837][ C1] bcm5974 3-1:1.0: trackpad urb failed: -19 [ 1028.889157][ T5907] bcm5974 3-1:1.0: could not read from device [ 1028.897040][ T5934] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1028.922058][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.956907][ T5934] usb 1-1: config 0 descriptor?? [ 1029.512269][ T5934] hid_parser_main: 8 callbacks suppressed [ 1029.512286][ T5934] kye 0003:0458:4018.0022: unknown main item tag 0x0 [ 1029.534106][ T5934] kye 0003:0458:4018.0022: reserved main item tag 0xe [ 1029.541982][ T5934] kye 0003:0458:4018.0022: item fetching failed at offset 15/133 [ 1029.624733][ T5934] kye 0003:0458:4018.0022: parse failed [ 1029.686164][ T5934] kye 0003:0458:4018.0022: probe with driver kye failed with error -22 [ 1029.709993][T23067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.721745][T23067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.749627][ T5907] usb 1-1: USB disconnect, device number 18 [ 1030.026302][T23076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5322'. [ 1030.148632][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5322'. [ 1030.210214][T23081] loop2: detected capacity change from 0 to 7 [ 1030.226786][T18852] Dev loop2: unable to read RDB block 7 [ 1030.232489][T18852] loop2: unable to read partition table [ 1030.259276][T18852] loop2: partition table beyond EOD, truncated [ 1030.279946][T23081] Dev loop2: unable to read RDB block 7 [ 1030.286021][T23081] loop2: unable to read partition table [ 1030.470736][T23081] loop2: partition table beyond EOD, truncated [ 1030.488560][T23081] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1030.646639][ T30] audit: type=1326 audit(1755387043.126:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23065 comm="syz.2.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7fc00000 [ 1030.945527][T23097] loop6: detected capacity change from 0 to 7 [ 1030.989626][T23097] Dev loop6: unable to read RDB block 7 [ 1031.006311][T23097] loop6: AHDI p1 p2 p3 [ 1031.010490][T23097] loop6: partition table partially beyond EOD, truncated [ 1031.048437][T23097] loop6: p1 start 1405162169 is beyond EOD, truncated [ 1031.075115][T23097] loop6: p2 start 1203593728 is beyond EOD, truncated [ 1031.207142][T23106] netlink: 'syz.0.5331': attribute type 3 has an invalid length. [ 1031.295242][ T5934] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1031.459136][ T5934] usb 4-1: config 0 has an invalid interface number: 194 but max is 0 [ 1031.467417][ T5934] usb 4-1: config 0 has no interface number 0 [ 1031.476013][ T5934] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2 [ 1031.485113][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.493106][ T5934] usb 4-1: Product: syz [ 1031.498300][ T5934] usb 4-1: Manufacturer: syz [ 1031.502888][ T5934] usb 4-1: SerialNumber: syz [ 1031.508734][ T5934] usb 4-1: config 0 descriptor?? [ 1031.575115][T21804] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1031.582761][ T5907] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1031.590527][ T8195] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1031.725154][ T5907] usb 3-1: device descriptor read/64, error -71 [ 1031.731489][ T8195] usb 2-1: device descriptor read/64, error -71 [ 1031.746679][T21804] usb 1-1: Using ep0 maxpacket: 16 [ 1031.787331][ T5972] usb 4-1: USB disconnect, device number 24 [ 1031.805945][ T5972] f81534a_ctrl 4-1:0.194: failed to set register 0x116: -19 [ 1031.815361][T21804] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1031.829011][ T5972] f81534a_ctrl 4-1:0.194: failed to enable ports: -19 [ 1031.836132][T21804] usb 1-1: config 1 has no interface number 0 [ 1031.844250][T21804] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1031.854543][T21804] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1031.865409][T21804] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1031.873902][T21804] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1031.884176][T21804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.894046][T21804] usb 1-1: Product: syz [ 1031.944809][T21804] usb 1-1: Manufacturer: syz [ 1031.950170][T21804] usb 1-1: SerialNumber: syz [ 1031.959245][T23114] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1031.967396][T23114] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1031.995148][ T5907] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1032.005111][ T8195] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1032.129571][ T5907] usb 3-1: device descriptor read/64, error -71 [ 1032.145133][ T8195] usb 2-1: device descriptor read/64, error -71 [ 1032.245663][T23134] netlink: 'syz.3.5341': attribute type 10 has an invalid length. [ 1032.255922][ T5907] usb usb3-port1: attempt power cycle [ 1032.263065][T23134] bond0: (slave wlan1): Opening slave failed [ 1032.287301][T21804] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 1032.295599][ T8195] usb usb2-port1: attempt power cycle [ 1032.304288][T21804] usb 1-1: USB disconnect, device number 19 [ 1032.509539][T23137] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5340'. [ 1032.641614][ T5907] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1032.649546][ T8195] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1032.722143][ T8195] usb 2-1: device descriptor read/8, error -71 [ 1032.728526][ T5907] usb 3-1: device descriptor read/8, error -71 [ 1033.176959][ T8195] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1033.205127][ T5907] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1033.213439][ T8195] usb 2-1: device descriptor read/8, error -71 [ 1033.236690][ T5907] usb 3-1: device descriptor read/8, error -71 [ 1033.289464][T23145] loop6: detected capacity change from 0 to 7 [ 1033.299957][T23145] Dev loop6: unable to read RDB block 7 [ 1033.310033][T23145] loop6: AHDI p1 p2 p3 [ 1033.314361][T23145] loop6: partition table partially beyond EOD, truncated [ 1033.325557][ T8195] usb usb2-port1: unable to enumerate USB device [ 1033.336891][T23145] loop6: p1 start 1405162169 is beyond EOD, truncated [ 1033.343959][T23145] loop6: p2 start 1203593728 is beyond EOD, truncated [ 1033.356938][ T5907] usb usb3-port1: unable to enumerate USB device [ 1034.245405][T23167] FAULT_INJECTION: forcing a failure. [ 1034.245405][T23167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.259073][T23167] CPU: 0 UID: 0 PID: 23167 Comm: syz.4.5349 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1034.259098][T23167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1034.259110][T23167] Call Trace: [ 1034.259117][T23167] [ 1034.259125][T23167] dump_stack_lvl+0x189/0x250 [ 1034.259150][T23167] ? __pfx____ratelimit+0x10/0x10 [ 1034.259173][T23167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1034.259194][T23167] ? __pfx__printk+0x10/0x10 [ 1034.259217][T23167] ? __might_fault+0xb0/0x130 [ 1034.259243][T23167] ? rcu_is_watching+0x15/0xb0 [ 1034.259261][T23167] should_fail_ex+0x414/0x560 [ 1034.259282][T23167] _copy_from_user+0x2d/0xb0 [ 1034.259298][T23167] ___sys_sendmsg+0x158/0x2a0 [ 1034.259314][T23167] ? __pfx____sys_sendmsg+0x10/0x10 [ 1034.259327][T23167] ? rcu_is_watching+0x15/0xb0 [ 1034.259342][T23167] ? rcu_is_watching+0x15/0xb0 [ 1034.259363][T23167] ? __fget_files+0x2a/0x420 [ 1034.259375][T23167] ? __fget_files+0x3a0/0x420 [ 1034.259390][T23167] __x64_sys_sendmsg+0x19b/0x260 [ 1034.259404][T23167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1034.259422][T23167] ? __pfx_ksys_write+0x10/0x10 [ 1034.259439][T23167] ? rcu_is_watching+0x15/0xb0 [ 1034.259460][T23167] ? rcu_is_watching+0x15/0xb0 [ 1034.259474][T23167] do_syscall_64+0xfa/0x3b0 [ 1034.259494][T23167] ? rcu_is_watching+0x15/0xb0 [ 1034.259507][T23167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.259521][T23167] ? clear_bhb_loop+0x60/0xb0 [ 1034.259536][T23167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.259550][T23167] RIP: 0033:0x7f3a5018ebe9 [ 1034.259562][T23167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.259574][T23167] RSP: 002b:00007f3a50f68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1034.259589][T23167] RAX: ffffffffffffffda RBX: 00007f3a503b6180 RCX: 00007f3a5018ebe9 [ 1034.259600][T23167] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1034.259609][T23167] RBP: 00007f3a50f68090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.259618][T23167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.259627][T23167] R13: 00007f3a503b6218 R14: 00007f3a503b6180 R15: 00007f3a504dfa28 [ 1034.259642][T23167] [ 1034.486010][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.545103][ T5934] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1034.699643][ T5934] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1034.710449][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1034.723666][ T5934] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1034.736291][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1034.764776][ T5934] usb 4-1: Product: syz [ 1034.772686][ T5934] usb 4-1: Manufacturer: syz [ 1034.784771][ T5934] usb 4-1: SerialNumber: syz [ 1034.800676][ T5934] usb 4-1: config 0 descriptor?? [ 1034.915066][ T5950] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1034.964958][ T5934] usb 4-1: selecting invalid altsetting 0 [ 1035.115166][ T5950] usb 1-1: device descriptor read/64, error -71 [ 1035.149371][T23177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.157991][T23177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.284880][T23179] loop6: detected capacity change from 0 to 7 [ 1035.293777][T18852] Dev loop6: unable to read RDB block 7 [ 1035.300898][T18852] loop6: AHDI p3 p4 [ 1035.304889][T18852] loop6: partition table partially beyond EOD, truncated [ 1035.316447][T18852] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1035.324394][T23179] Dev loop6: unable to read RDB block 7 [ 1035.331302][T23179] loop6: AHDI p3 p4 [ 1035.340362][T23179] loop6: partition table partially beyond EOD, truncated [ 1035.349398][T23179] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1035.377610][ T5950] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1035.515097][ T5950] usb 1-1: device descriptor read/64, error -71 [ 1035.628068][ T5950] usb usb1-port1: attempt power cycle [ 1035.790527][T23187] loop6: detected capacity change from 0 to 7 [ 1035.803851][T23187] Dev loop6: unable to read RDB block 7 [ 1035.817029][T23187] loop6: AHDI p1 p2 p3 [ 1035.824882][T23187] loop6: partition table partially beyond EOD, truncated [ 1035.861862][T23187] loop6: p1 start 1405162169 is beyond EOD, truncated [ 1035.879869][T23187] loop6: p2 start 1203593728 is beyond EOD, truncated [ 1035.886979][ T5934] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1035.985213][ T5950] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1036.025659][ T5950] usb 1-1: device descriptor read/8, error -71 [ 1036.054148][T23190] input: syz1 as /devices/virtual/input/input80 [ 1036.062863][ T5934] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1036.074993][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.087518][ T5934] usb 5-1: config 0 descriptor?? [ 1036.265093][ T5950] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1036.285646][ T5950] usb 1-1: device descriptor read/8, error -71 [ 1036.314585][T23182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.323252][T23182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.395549][ T5950] usb usb1-port1: unable to enumerate USB device [ 1036.919621][T23196] netlink: 'syz.2.5358': attribute type 2 has an invalid length. [ 1036.927605][T23196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1037.219346][ T5950] usb 4-1: USB disconnect, device number 25 [ 1037.480826][T23216] loop6: detected capacity change from 0 to 7 [ 1037.490089][T18852] Dev loop6: unable to read RDB block 7 [ 1037.496213][T18852] loop6: AHDI p1 p2 p3 [ 1037.504388][T18852] loop6: partition table partially beyond EOD, truncated [ 1037.525362][T18852] loop6: p1 start 1405162169 is beyond EOD, truncated [ 1037.533377][T18852] loop6: p2 start 1203593728 is beyond EOD, truncated [ 1037.572000][T23216] Dev loop6: unable to read RDB block 7 [ 1037.578327][T23216] loop6: AHDI p1 p2 p3 [ 1037.585466][T23216] loop6: partition table partially beyond EOD, truncated [ 1037.615255][T23216] loop6: p1 start 1405162169 is beyond EOD, truncated [ 1037.622187][T23216] loop6: p2 start 1203593728 is beyond EOD, truncated [ 1038.008576][T23235] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1038.210533][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5375'. [ 1038.231563][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5375'. [ 1038.325174][ T5950] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1038.325419][ T8195] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1038.445616][ T5934] usb 5-1: string descriptor 0 read error: -71 [ 1038.465870][ T5934] cp210x 5-1:0.0: cp210x converter detected [ 1038.482556][ T5934] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1038.498172][ T5934] cp210x 5-1:0.0: querying part number failed [ 1038.500694][ T8195] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.506200][ T5950] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.529219][ T5934] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1038.537313][ T5950] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1038.537393][ T5907] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1038.543969][ T5950] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1038.565862][ T5934] usb 5-1: USB disconnect, device number 19 [ 1038.567400][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1038.567700][ T5934] cp210x 5-1:0.0: device disconnected [ 1038.570591][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.572389][ T5950] usb 1-1: config 0 descriptor?? [ 1038.607047][ T8195] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1038.607072][ T8195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.607091][ T8195] usb 2-1: Product: syz [ 1038.607106][ T8195] usb 2-1: Manufacturer: syz [ 1038.607120][ T8195] usb 2-1: SerialNumber: syz [ 1038.626824][ T8195] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1038.749259][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1038.838001][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.848065][ T30] audit: type=1326 audit(1755387051.336:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1038.848760][ T5907] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1038.896582][T23264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5380'. [ 1038.935464][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.950754][ T5907] usb 3-1: config 0 descriptor?? [ 1038.957352][ T30] audit: type=1326 audit(1755387051.336:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1038.979911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.007947][T23264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.047911][T23264] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5380'. [ 1039.072500][ T30] audit: type=1326 audit(1755387051.336:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1039.094963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.105179][ T5950] apple 0003:05AC:027A.0023: item fetching failed at offset 3/5 [ 1039.113425][ T5950] apple 0003:05AC:027A.0023: parse failed [ 1039.119352][ T5950] apple 0003:05AC:027A.0023: probe with driver apple failed with error -22 [ 1039.128255][ T30] audit: type=1326 audit(1755387051.336:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1039.156814][ T30] audit: type=1326 audit(1755387051.336:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1039.179283][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.188534][ T30] audit: type=1326 audit(1755387051.336:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1039.210990][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.219750][ T30] audit: type=1326 audit(1755387051.336:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1039.244819][ T30] audit: type=1326 audit(1755387051.336:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1039.314251][ T5950] usb 1-1: USB disconnect, device number 24 [ 1039.362410][ T30] audit: type=1326 audit(1755387051.336:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1039.387530][ T30] audit: type=1326 audit(1755387051.336:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23239 comm="syz.1.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0798ebe9 code=0x7ffc0000 [ 1039.424477][ T8195] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1039.455941][ T8195] usb 2-1: USB disconnect, device number 20 [ 1039.665289][ T5907] savu 0003:1E7D:2D5A.0024: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1039.886312][T23270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1039.919094][T23273] loop3: detected capacity change from 0 to 1 [ 1039.926976][T18852] Dev loop3: unable to read RDB block 1 [ 1039.932632][T18852] loop3: unable to read partition table [ 1039.941277][T18852] loop3: partition table beyond EOD, truncated [ 1039.948433][T23273] Dev loop3: unable to read RDB block 1 [ 1039.954666][T23273] loop3: unable to read partition table [ 1039.961206][T23273] loop3: partition table beyond EOD, truncated [ 1039.969061][T23273] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1040.215231][ T5950] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1040.352063][T23295] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.358334][T23295] binder: 23294:23295 ioctl 4018620d 2000000000c0 returned -16 [ 1040.372341][T23298] binder: 23294:23298 ioctl c0306201 2000000003c0 returned -14 [ 1040.380104][T23295] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.391267][T23295] binder: 23294:23295 ioctl 4018620d 200000000040 returned -16 [ 1040.435171][ T5950] usb 4-1: device descriptor read/64, error -71 [ 1040.735925][ T5950] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1040.877410][T23310] syzkaller1: entered promiscuous mode [ 1040.882897][T23310] syzkaller1: entered allmulticast mode [ 1040.955551][ T5950] usb 4-1: device descriptor read/64, error -71 [ 1041.015087][ T5914] usb 3-1: reset full-speed USB device number 127 using dummy_hcd [ 1041.065317][ T5950] usb usb4-port1: attempt power cycle [ 1041.135579][T21804] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1041.316440][T21804] usb 2-1: Using ep0 maxpacket: 32 [ 1041.561416][T21804] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1041.569802][T21804] usb 2-1: config 0 has no interface number 0 [ 1041.581596][T21804] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1041.585326][ T5950] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1041.591061][T21804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.608227][T21804] usb 2-1: Product: syz [ 1041.615232][T21804] usb 2-1: Manufacturer: syz [ 1041.620450][T21804] usb 2-1: SerialNumber: syz [ 1041.625532][ T5950] usb 4-1: device descriptor read/8, error -71 [ 1041.646710][T21804] usb 2-1: config 0 descriptor?? [ 1041.657417][T21804] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1041.685641][T21804] usb 2-1: selecting invalid altsetting 1 [ 1041.692460][T21804] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1041.706868][T21804] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1041.732574][T21804] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1041.755092][T21804] usb 2-1: media controller created [ 1041.787653][T21804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1041.796380][ T5934] usb 3-1: USB disconnect, device number 127 [ 1041.865171][ T5950] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1041.906322][ T5950] usb 4-1: device descriptor read/8, error -71 [ 1041.935100][ T5934] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1041.964218][T21804] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1041.977019][T21804] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1041.984539][T21804] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1042.015465][ T5950] usb usb4-port1: unable to enumerate USB device [ 1042.024280][T21804] usb 2-1: USB disconnect, device number 21 [ 1042.055099][ T5914] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1042.087405][ T5934] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1042.096799][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.114045][ T5934] usb 3-1: config 0 descriptor?? [ 1042.121283][ T5934] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1042.206353][ T5914] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.224895][ T5914] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1042.241998][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.255887][ T5914] usb 5-1: Product: syz [ 1042.260070][ T5914] usb 5-1: Manufacturer: syz [ 1042.264666][ T5914] usb 5-1: SerialNumber: syz [ 1042.282744][ T5914] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1042.752624][T23314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.778520][T23314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.812218][ T5934] gspca_stv06xx: I2C: Read error writing address: -71 [ 1042.865859][ T5934] usb 3-1: USB disconnect, device number 2 [ 1043.855545][ T30] kauditd_printk_skb: 466 callbacks suppressed [ 1043.855562][ T30] audit: type=1326 audit(1755387056.356:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1043.885223][ T30] audit: type=1326 audit(1755387056.386:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1043.979194][ T5914] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1043.991081][ T30] audit: type=1326 audit(1755387056.406:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1044.018400][ T5914] usb 5-1: USB disconnect, device number 20 [ 1044.029248][ T30] audit: type=1326 audit(1755387056.406:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1044.082658][ T30] audit: type=1326 audit(1755387056.416:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1044.139312][ T30] audit: type=1326 audit(1755387056.416:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1044.166192][ T30] audit: type=1326 audit(1755387056.426:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1044.207692][ T30] audit: type=1326 audit(1755387056.426:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1044.231505][ T30] audit: type=1326 audit(1755387056.436:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1044.254139][ T30] audit: type=1326 audit(1755387056.436:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23321 comm="syz.4.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a501c14a5 code=0x7ffc0000 [ 1044.675335][ T8195] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1044.837078][ T8195] usb 2-1: Using ep0 maxpacket: 16 [ 1044.851447][ T8195] usb 2-1: config 149 has an invalid descriptor of length 60, skipping remainder of the config [ 1044.862250][ T8195] usb 2-1: config 149 has 0 interfaces, different from the descriptor's value: 1 [ 1044.874523][ T8195] usb 2-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=65.f4 [ 1044.884395][ T8195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.894026][ T8195] usb 2-1: Product: syz [ 1044.898514][ T8195] usb 2-1: Manufacturer: syz [ 1044.905342][ T8195] usb 2-1: SerialNumber: syz [ 1045.137126][ T8195] usb 2-1: USB disconnect, device number 22 [ 1045.252553][T23380] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1045.445379][T21804] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1045.456720][ T5914] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1045.570841][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1045.606523][T21804] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1045.608660][ T5914] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1045.616003][T21804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.623770][ T5914] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1045.679778][T21804] usb 4-1: config 0 descriptor?? [ 1045.696759][T21804] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1045.713034][ T5914] usb 5-1: config 0 has no interface number 0 [ 1045.725093][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1045.735426][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.743846][ T5914] usb 5-1: Product: syz [ 1045.748827][ T5914] usb 5-1: Manufacturer: syz [ 1045.753455][ T5914] usb 5-1: SerialNumber: syz [ 1045.760130][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 1045.767358][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.778474][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1045.799631][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1045.810061][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1045.810596][ T5914] usb 5-1: config 0 descriptor?? [ 1045.829443][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.853424][T23397] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5416'. [ 1045.904297][ T5914] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 1045.924454][ T5934] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1045.934027][ T5934] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1045.993472][ T5934] usb 3-1: Manufacturer: syz [ 1046.027556][ T5934] usb 3-1: config 0 descriptor?? [ 1046.064213][T23399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5418'. [ 1046.106313][ T5914] usb 5-1: USB disconnect, device number 21 [ 1046.325155][ T5934] rc_core: IR keymap rc-hauppauge not found [ 1046.331109][ T5934] Registered IR keymap rc-empty [ 1046.370041][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.415842][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.445776][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1046.449869][T23404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1046.474631][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input82 [ 1046.605239][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.625200][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.695191][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.735142][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.766380][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.787562][T21804] gspca_cpia1: usb_control_msg 05, error -110 [ 1046.805082][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.821383][T21804] gspca_cpia1: usb_control_msg 01, error -32 [ 1046.825138][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.849762][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.859840][T21804] gspca_cpia1: usb_control_msg 01, error -32 [ 1046.875139][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.887617][T21804] gspca_cpia1: usb_control_msg 01, error -32 [ 1046.898570][T21804] gspca_cpia1: usb_control_msg 01, error -32 [ 1046.912736][T21804] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1046.915244][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1046.947007][ T5934] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1046.957199][ T5934] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1047.150085][T23386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.217647][T23386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.465160][ T5914] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1047.687876][ T5914] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1047.697838][ T5914] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 47850, setting to 64 [ 1047.709187][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1047.717875][ T5914] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1047.729097][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.797015][ T5914] usb 5-1: Product: syz [ 1047.801508][ T5914] usb 5-1: Manufacturer: syz [ 1047.824326][ T5914] usb 5-1: SerialNumber: syz [ 1047.865820][ T5914] usb 5-1: config 0 descriptor?? [ 1047.890022][T23420] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1047.938857][T21804] usb 4-1: USB disconnect, device number 30 [ 1048.075434][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5427'. [ 1048.103199][T23420] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1048.336091][ T5934] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1048.427401][T21804] usb 3-1: USB disconnect, device number 3 [ 1048.499836][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.511009][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.605233][ T5934] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1048.700062][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.718778][ T5934] usb 2-1: config 0 descriptor?? [ 1049.205168][ T5934] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 1049.230286][ T5934] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 1049.501609][ T5934] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0025/input/input83 [ 1049.614708][ T5934] cm6533_jd 0003:0D8C:0022.0025: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1049.710579][T23449] fuse: Unknown parameter 'x6Ői?\^g㥡kSr`8V/_0iOQ#V~D'KG0x0000000000000004' [ 1049.853027][T21804] usb 5-1: USB disconnect, device number 22 [ 1049.878994][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1049.879012][ T30] audit: type=1326 audit(1755387062.376:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23452 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1050.016332][ T30] audit: type=1326 audit(1755387062.406:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23452 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1050.114598][T23463] (J: renamed from lo [ 1050.248270][ T30] audit: type=1326 audit(1755387062.406:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23452 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1050.289233][ T30] audit: type=1326 audit(1755387062.406:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23452 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1050.324347][T23466] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5434'. [ 1050.333543][ T30] audit: type=1326 audit(1755387062.406:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23452 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1050.381204][ T30] audit: type=1326 audit(1755387062.416:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23452 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1050.432523][ T30] audit: type=1326 audit(1755387062.416:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23452 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b9f8ebe9 code=0x7ffc0000 [ 1050.765055][T21804] usb 2-1: reset high-speed USB device number 23 using dummy_hcd [ 1051.555375][T21804] usb 2-1: device descriptor read/64, error -71 [ 1051.759848][ T8195] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1052.195384][T21804] usb 2-1: reset high-speed USB device number 23 using dummy_hcd [ 1052.203915][T21804] usb 2-1: device reset changed ep0 maxpacket size! [ 1052.211444][ T5907] usb 2-1: USB disconnect, device number 23 [ 1052.234580][ T8195] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1052.248840][ T8195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.260769][ T8195] usb 1-1: Product: syz [ 1052.272601][ T8195] usb 1-1: Manufacturer: syz [ 1052.282682][ T8195] usb 1-1: SerialNumber: syz [ 1052.298049][ T8195] usb 1-1: config 0 descriptor?? [ 1052.310680][ T8195] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1052.375421][ T5907] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1052.555095][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 1052.570573][ T5907] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1052.592699][T23491] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.5440'. [ 1052.613387][T23491] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5440'. [ 1052.626037][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.639278][ T5907] usb 2-1: config 0 descriptor?? [ 1052.657978][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5441'. [ 1052.762382][T23491] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5440'. [ 1052.857560][ T5907] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1052.866079][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1052.932081][ T5907] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1052.954908][ T5907] usb 2-1: media controller created [ 1053.055104][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.120558][T23491] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5440'. [ 1053.165200][ T5907] az6027: usb out operation failed. (-71) [ 1053.227724][ T5907] az6027: usb out operation failed. (-71) [ 1053.247171][ T5907] stb0899_attach: Driver disabled by Kconfig [ 1053.253331][ T5907] az6027: no front-end attached [ 1053.253331][ T5907] [ 1053.263689][ T30] audit: type=1326 audit(1755387065.746:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23475 comm="syz.0.5438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6a58ebe9 code=0x0 [ 1053.308409][T23509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1053.387161][ T5907] az6027: usb out operation failed. (-71) [ 1053.447278][ T5907] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1053.487580][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input84 [ 1053.631659][ T5907] dvb-usb: schedule remote query interval to 400 msecs. [ 1053.655376][ T5907] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1053.684607][ T5907] usb 2-1: USB disconnect, device number 24 [ 1053.734503][ T5907] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1054.254895][T23528] loop2: detected capacity change from 0 to 7 [ 1054.280630][T18852] Dev loop2: unable to read RDB block 7 [ 1054.280652][T18852] loop2: AHDI p1 p2 p3 [ 1054.280670][T18852] loop2: partition table partially beyond EOD, truncated [ 1054.280796][T18852] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1054.280810][T18852] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1054.281820][T23528] Dev loop2: unable to read RDB block 7 [ 1054.281846][T23528] loop2: AHDI p1 p2 p3 [ 1054.281864][T23528] loop2: partition table partially beyond EOD, truncated [ 1054.282012][T23528] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1054.282031][T23528] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1054.376804][T21804] usb 1-1: USB disconnect, device number 25 [ 1054.445244][ T5934] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1054.595068][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 1054.603290][ T5934] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1054.603313][ T5934] usb 2-1: config 1 has no interface number 0 [ 1054.603343][ T5934] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1054.603360][ T5934] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1054.603376][ T5934] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1054.613741][ T5934] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1054.613770][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.613788][ T5934] usb 2-1: Product: syz [ 1054.613802][ T5934] usb 2-1: Manufacturer: syz [ 1054.613821][ T5934] usb 2-1: SerialNumber: syz [ 1054.664702][T23522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1054.664810][T23522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1055.075075][ T5914] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1055.093544][T23538] ------------[ cut here ]------------ [ 1055.099134][T23538] WARNING: CPU: 0 PID: 23538 at arch/x86/kvm/lapic.c:3367 kvm_apic_accept_events+0x341/0x490 [ 1055.106590][T23522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1055.109678][T23538] Modules linked in: [ 1055.118404][T23522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1055.120366][T23538] CPU: 0 UID: 0 PID: 23538 Comm: syz.2.5453 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1055.139852][T23538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1055.150209][T23538] RIP: 0010:kvm_apic_accept_events+0x341/0x490 [ 1055.156454][T23538] Code: eb 0c e8 82 ae 71 00 eb 05 e8 7b ae 71 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 ae 71 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f [ 1055.176480][T23538] RSP: 0018:ffffc9000ede7c10 EFLAGS: 00010283 [ 1055.182584][T23538] RAX: ffffffff814dfd30 RBX: 0000000000000002 RCX: 0000000000080000 [ 1055.190618][T23538] RDX: ffffc90020d54000 RSI: 000000000000039a RDI: 000000000000039b [ 1055.198651][T23538] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1055.206967][T23538] R10: dffffc0000000000 R11: ffffed100b422008 R12: 0000000000000002 [ 1055.214962][T23538] R13: dffffc0000000000 R14: ffff888077d50c00 R15: ffff88805a1102d8 [ 1055.223106][T23538] FS: 00007f54bad216c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1055.232092][T23538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1055.238989][T23538] CR2: 0000001b2e40aff8 CR3: 000000005c0be000 CR4: 00000000003526f0 [ 1055.247018][T23538] Call Trace: [ 1055.250311][T23538] [ 1055.253259][T23538] kvm_arch_vcpu_ioctl_get_mpstate+0x16f/0x530 [ 1055.255708][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 1055.259557][T23538] ? kvm_arch_vcpu_ioctl_get_mpstate+0x11d/0x530 [ 1055.268280][ T5914] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1055.271180][T23538] kvm_vcpu_ioctl+0x625/0xe90 [ 1055.280339][ T5914] usb 1-1: can't read configurations, error -61 [ 1055.283097][T23538] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1055.283130][T23538] ? do_futex+0x333/0x420 [ 1055.299298][T23538] ? lock_release+0x4b/0x3e0 [ 1055.303923][T23538] ? __se_sys_futex+0x36f/0x400 [ 1055.308831][T23538] ? __fget_files+0x2a/0x420 [ 1055.313438][T23538] ? __fget_files+0x3a0/0x420 [ 1055.318200][T23538] ? __fget_files+0x2a/0x420 [ 1055.322820][T23538] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1055.328156][T23538] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1055.330346][ T5934] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 1055.333396][T23538] __se_sys_ioctl+0xf9/0x170 [ 1055.333425][T23538] do_syscall_64+0xfa/0x3b0 [ 1055.353632][T23538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.354539][ T5934] aqc111 2-1:1.105: probe with driver aqc111 failed with error -32 [ 1055.359779][T23538] ? clear_bhb_loop+0x60/0xb0 [ 1055.359806][T23538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.359826][T23538] RIP: 0033:0x7f54b9f8ebe9 [ 1055.359844][T23538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.403091][T23538] RSP: 002b:00007f54bad21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.411561][T23538] RAX: ffffffffffffffda RBX: 00007f54ba1b5fa0 RCX: 00007f54b9f8ebe9 [ 1055.419584][T23538] RDX: 0000200000000280 RSI: 000000008004ae98 RDI: 0000000000000008 [ 1055.427797][T23538] RBP: 00007f54ba011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1055.435130][ T5914] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1055.435796][T23538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.451305][T23538] R13: 00007f54ba1b6038 R14: 00007f54ba1b5fa0 R15: 00007f54ba2dfa28 [ 1055.459482][T23538] [ 1055.462496][T23538] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1055.469775][T23538] CPU: 0 UID: 0 PID: 23538 Comm: syz.2.5453 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1055.481839][T23538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1055.491888][T23538] Call Trace: [ 1055.495164][T23538] [ 1055.498118][T23538] dump_stack_lvl+0x99/0x250 [ 1055.502710][T23538] ? __asan_memcpy+0x40/0x70 [ 1055.507303][T23538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1055.512500][T23538] ? __pfx__printk+0x10/0x10 [ 1055.517092][T23538] vpanic+0x281/0x750 [ 1055.521106][T23538] ? __pfx__printk+0x10/0x10 [ 1055.525718][T23538] ? __pfx_vpanic+0x10/0x10 [ 1055.530221][T23538] ? is_bpf_text_address+0x292/0x2b0 [ 1055.535521][T23538] panic+0xb9/0xc0 [ 1055.539257][T23538] ? __pfx_panic+0x10/0x10 [ 1055.543708][T23538] __warn+0x31b/0x4b0 [ 1055.547689][T23538] ? kvm_apic_accept_events+0x341/0x490 [ 1055.553231][T23538] ? kvm_apic_accept_events+0x341/0x490 [ 1055.558768][T23538] report_bug+0x2be/0x4f0 [ 1055.563097][T23538] ? kvm_apic_accept_events+0x341/0x490 [ 1055.568636][T23538] ? kvm_apic_accept_events+0x341/0x490 [ 1055.574178][T23538] ? kvm_apic_accept_events+0x343/0x490 [ 1055.579720][T23538] handle_bug+0x84/0x160 [ 1055.583959][T23538] exc_invalid_op+0x1a/0x50 [ 1055.588452][T23538] asm_exc_invalid_op+0x1a/0x20 [ 1055.593296][T23538] RIP: 0010:kvm_apic_accept_events+0x341/0x490 [ 1055.599442][T23538] Code: eb 0c e8 82 ae 71 00 eb 05 e8 7b ae 71 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 ae 71 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f [ 1055.619039][T23538] RSP: 0018:ffffc9000ede7c10 EFLAGS: 00010283 [ 1055.625108][T23538] RAX: ffffffff814dfd30 RBX: 0000000000000002 RCX: 0000000000080000 [ 1055.633083][T23538] RDX: ffffc90020d54000 RSI: 000000000000039a RDI: 000000000000039b [ 1055.641055][T23538] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1055.649023][T23538] R10: dffffc0000000000 R11: ffffed100b422008 R12: 0000000000000002 [ 1055.656993][T23538] R13: dffffc0000000000 R14: ffff888077d50c00 R15: ffff88805a1102d8 [ 1055.665001][T23538] ? kvm_apic_accept_events+0x340/0x490 [ 1055.670593][T23538] kvm_arch_vcpu_ioctl_get_mpstate+0x16f/0x530 [ 1055.676756][T23538] ? kvm_arch_vcpu_ioctl_get_mpstate+0x11d/0x530 [ 1055.683084][T23538] kvm_vcpu_ioctl+0x625/0xe90 [ 1055.687759][T23538] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1055.692960][T23538] ? do_futex+0x333/0x420 [ 1055.697292][T23538] ? lock_release+0x4b/0x3e0 [ 1055.701881][T23538] ? __se_sys_futex+0x36f/0x400 [ 1055.706732][T23538] ? __fget_files+0x2a/0x420 [ 1055.711308][T23538] ? __fget_files+0x3a0/0x420 [ 1055.715995][T23538] ? __fget_files+0x2a/0x420 [ 1055.720596][T23538] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1055.725535][T23538] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1055.730736][T23538] __se_sys_ioctl+0xf9/0x170 [ 1055.735360][T23538] do_syscall_64+0xfa/0x3b0 [ 1055.739884][T23538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.745939][T23538] ? clear_bhb_loop+0x60/0xb0 [ 1055.750608][T23538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.756518][T23538] RIP: 0033:0x7f54b9f8ebe9 [ 1055.760925][T23538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.780523][T23538] RSP: 002b:00007f54bad21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.788932][T23538] RAX: ffffffffffffffda RBX: 00007f54ba1b5fa0 RCX: 00007f54b9f8ebe9 [ 1055.796896][T23538] RDX: 0000200000000280 RSI: 000000008004ae98 RDI: 0000000000000008 [ 1055.804860][T23538] RBP: 00007f54ba011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1055.812826][T23538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.820789][T23538] R13: 00007f54ba1b6038 R14: 00007f54ba1b5fa0 R15: 00007f54ba2dfa28 [ 1055.828759][T23538] [ 1055.832120][T23538] Kernel Offset: disabled [ 1055.836446][T23538] Rebooting in 86400 seconds..