last executing test programs: 9m17.271384462s ago: executing program 3 (id=1566): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB="415d6468b79c504c02e180cf923473c28f3b496f5b08a2e67539a6ea0c70", @ANYRESDEC=0x0]) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) close(r0) 9m16.95930409s ago: executing program 3 (id=1567): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe2$watch_queue(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', 0x0, 0xffffffffffffff80) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x6, "d9deea2a"}]}}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'sed\x00', 0x1, 0x400000, 0x4}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m14.91646237s ago: executing program 3 (id=1572): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0xfffffbff) (async, rerun: 32) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) (rerun: 32) 9m14.071528675s ago: executing program 3 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(r3, 0x0, 0x0, 0x7ff, 0x0) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) (async) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000a88000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x9, 0x0) (async) syz_fuse_handle_req(r2, &(0x7f00000027c0)="d9cf539302536e60479ecaf012fd80816e33b5b31bc2e76fab1942b8070f75572b73aae90d9691199a2c031ed82d5637429305aeee2bc5bcb51b1872ddef1f0a8ef7e036ef2c0b8bdb9b4b3901128b0d2e130339d5ecea75dae21754f1d50b4f93c6481461efefeef29e393063fafbfa50ac36fe24cd3d9639d72ba0d8fe1f2022daf7e59aa29351e58730c3c2ab6f4747f66bf51373ad60c5ac3f69c224c42dee0c5c0a9a82f127e9915e179b4e3d4ef06b1f1cb080272c668c71ebe84cd18a2e3918c83266fb7a9541dcb2de49ae6c8699a2e3ed8e92512e29b36dabd5e6af75f5d555fa5aa59c158d91aee3b7b4f1d8d2614c98bdff334794b7a8e8ba94671847aa2a960c2eb98b98407b5663fec26d55970191bf982fee18c51de602dc4362e4536bdceb038addad7316310f8a85056236ccecde4755f8fa4ee2f488642958f3a82d5a2a22f04bab00c28c1c5c3b7ed5715e6854463663188be847ace2adae30d52e4380d5e3be64604b4e0574de1dbcde1dad9deaa8fedda026d0cf1cccb2fa47ea1eaba99bbeef129958a73469a7e5fe455989089a82a503213a48c831c0cd807e0a9a88115e338f97ec9616bd4051cac36c835305ffe4891198d3adcdd034a64a5c6977cb6fc2a536bedbe713184ed7759df08fcfdeeabaab45c62b726c2ff48f0d72f1f58eb27aec7ec5cc118e62846408d81f93fc93f7675bc186911bec5135dc3dccac802fd4f8e92cddf9a7a2b3aaf79fd3fc1363bca244df9ac86c4077e768ae358dce823092ea460d6cd15136808061a1c8f83b18834d6f97c5e29bde4cb524e059dfdb86debc137dc702d3a78fde733b17a1934267c003f6360ad16873b1d7b48dd52d089de5c72e50e163e4f1f12aef80fd011c675ac35d9f52c7a6ebb43eb784d502fc785327065e5fb7a83515e3675eb6d762ef8977b1c260881bed726414e435cedf0534c555f745c306566af41063f37687816df8e5aa8489662bb35b7246a43914ed0c94cefd7a0633cb189a00b0a29b627d34defb09ed10337118304175570fad7d56b50d7269d7240703bad2b7a1cd1b3c1043f2bb1deb6d1fe6f90009255baa93b6981076fc3b0801b5036a3238f21abd44bbb60b33c06be510f21a693def159aecf34c21610f246576fbff63b681efdb68d1f58262a7a731db25fdb6558aeafc3b0161709744e77709b55727ed97836f99517a960fadfe3e9c0c2cc6afe20f99cabfc6648ba1d2fa324a06a2a59a4aefa0c20a903435cfc1dcf4b4cd2e71184e77e4496202889492c9fb93af7f24e4f000b8515e5208e4036038d4b30ab799ee0ce5b33098d2e78441b89a78fdc0b627b2167303281af24ad63fd7cec854c1d687e2d7036762a613c99d047023445fe5bc286080f8c1f15176c235bea0b434bb256947a3eeec558cfb21cac41b5b30e7c51fe7ce40ea552ea28bcb31ea316508d22701320ce8afd9a339ffffeeaf6d43676365e0aba386646b2ccfdaf4de28d9992ccfce5a0a3608d5a0c2f954f79b5b601765b850569f31d867f08e15316d6ea035e284e5e70bb009fbb8fa494df145bdc1927d5ce979c4b4d561d756c18f6c9b774b2238c257f6de700940296b855378648732a503883ba868d7d425d62d3535ad2fdce16bb64f227dbcad0846f465bd0ea92bfee1d549b6aa54728b0603a1047e805332fa98c3779b4f76464d1e5af2031bbd020045985bf64670a5065e9ceee06754670d0ce375c5c0d4d0e5bb1b9ae58229cb0d4e5b528022d9721fbcb30cc287c037a1f70635de20ec9502a4bd32d72ba82c0ad9c7f010050092fa6065ad1b172c914740c023b2efbea772b2d200b8d285bc73146335157fa339039c79d73561dfe7de6e9efe6bdd7175575c5db79435bdde8d7c4e39171519080175f2106e8acf90755ea2ecaa1e915c316d7eb193f0ff6f5206f2aa0904de56f4e0a8dece388fb864ea2ec81f089aca717fd42851837ee2a3a768e8f8da46303f057246c586e941c969ff36a8cc8e5615b295072a309183899c917420341137f3432f661e7e416fe559deff0dd1420a0e759cf37e148f01303934d0a362ff5855e6e919b867a75ed4fb78e26198eb0af0f5ff5ef9709b8a37cfe8d72a92ee45e8333300e34884b25fa01856e530a1fd5710bd6b5e21d9c81ca4583f09922aa42ff1b0a3e607c47a138e1a808b8802c14821127b201f4047849216fffa81b812694839b4d7bc39e86387dd003985a3e899e858a237b55aa1d830e561342a7e26aa1281c7fe3824a93419786f04db307439e93a12f83ccbb9e6a4002eb7dc09c2c13940a6b3c6fde81f2ca92ca909f38dc337480b44aee3333ec9555b97f9fd78f34a1800f720dd8919ac7d08abf12e3ecc9b668aac7ed73fe0fb41662636e2bfc38353cae9af15788f39a58d2d1b7e5e293900f1f99bdb2ae9aa0db461e52804997b10143ea04d51592617a5d9e48b6bdea95f4ea1eb0cabe710a4e1ba36bec237262aad8ed652074086f26693d79b353a4df041aa0f466687a957c2ab58bca701f9143cecb153d460df1bf38e7fd878c38ae4b3bfa309c5c0ace910c6fc2e0820e510f3e375864d536707dbbfcf519dce84e31f3601874736bed95e2313f8c2a44cf51b2af8ecfb99df65c38121bf81ca684559f3a7652e82fc0a8875046e2ad59e96562924ce13f9a6c7b31d76847c74943af978388270fc8261beac4d43f6293d0f7d6d2496c2a1ddc7c139086f55d45102ad36b4fe6a0667e5951dc5fa2fb3beacd5157c0e4c9d82e7ec85b892132d4235e6bae91f687f81e3af910c71723fd117cf2988543f1518722dbdfbb09a836ea36297bc83f1f9c10f107f1f15cb7050f025d48b2dd615e6474cad498cd374cd2d55dd1f5adba3d2fb129aa50f8f7869b30fc0eb7f2cbf66a86594ed63ca1d9dec93507bb3840d95afbf568ed82e5faca49d1a6702dec0388f4ba9b2061ffe1f430a637fffbd1d3b3f316dae1439d00185c667bbb3e6e74f15bf8fc51150d362b8533c03c009a0f11e6e55acc5ef727b0b2b60b72178bd9d7c961078c5b64ce81ab6756a6b53a50fa6c234d588edc5ae4811b5b220e6f8da839b444f35dcdf82e04732c8c56ef2863efcebb72f1a67561801e55a5e33847ed7e9714e393319eed1a412e035f4f19eb09fc98f7a544d6ee8e8acb7d13e9428ae8cb9849935aa87dd5c7e0dbb92086b730927ba74a4e49b6e9b8274459c9d77caba02ad5de167d7db9da3abcb0dd1574d6e838f094f57c7971704f398e914495f292e180438c8785bacaa9b1668d6cd1b094bbcf1fc452db12b349dcd0cab243a88a4e1f9b7d8bffa46882712eaef641a498168743e4529ccd1e1b68640440fa2d30909e34e87c1432fd6ad223b8f3f12c0184b6d1249e79ea40590d721e8bce5adee2e24897a572ecacf6a7ce124a7ae43923e80e59b5ddbfd2bfbb8bebbadea669186735772a8cd7f123cf957a5d138a6ae3d12da28d59d0a3f1fc35f4d574ac01dab38f982adaf0ba84a89e02f8f064deddf790fd2af44fac9e1f42e9bb951ce154d0befe8876761212f28cec1f6e75ad9fc7bc373b9044a8014d05d70d02cad12960f48f5e749a45081df4c04820de87ffcdd10a013adf019b1f86890b944d32616a336928cae5200245b186bf8f9f1359f8b4309e0488435fedb2b8048fad805fb56756be89049e7b78ec6ceba35baa8b9ad6a08c8e4cfd1b5fd28d136b1c7930d3be80b737eaaf13b91291340223c7918985bb83ad0031b55dae2a138a4a6ad7b158ab0367bef20b914e5b7987b3b3bc75c84351ef44931d1493d1ab4f357f5995e7f05df673f7c2bb9d5fafadf5814a6c04359f76f343bc623e1a7ba91c86cbf8de53ce129d90e002864506cc69f6de39bab758dd910c2c9c3477dac2617c5b396c5f7ec66b9653434993e417b86a49e3bd19d31981d13411520a844912ba90fd85a45530137124583c2e3afcd186541b0779e0de82fffaeb463cadc6c7e36b930f6ff71b8bfd14ea6e90741590d62a16af0a57a755b0ad262ef401984b276cfd436cbe63cc692f091e396f451219379a03b11d98412bd2d542c3d98753767059a1441e366877a9cc3cf7f1ea434579c5d93b0a38a839d8a25a673726950557d5060d413e77a9f31beb0afbd42ef639f785bb86261af8cedc6bf09f2211f1d347e354330647c7044bb38a134fd74bf69d7a3a8d2b148f5036bfee49ccee861f7f547049d2745e25d01b320b97aa913d9d2d7cddb862e69e62211203619b4ce916c1502a458a87a3fabe8ee2cefb95646993122d3ea92b51df3ef4729a80c0c17f6ad796bb0ab5a0d99baf2e0eb4068bbe9012fe25e4056d6a5d01a2e6febc39d3b33254e19917a898ee4f3d0295a5dafc802a5436c81a1c57d42a258106e5b6e9053770ddc968a32a023e628735eaef19247f0d030bcda624d02b4c2a163b8a3c295235a7ed4939c7958ae4b80f53444163a28eed37f3972055388c4f2cb4bfad3ef205ef58ba7f8a2919e6c649ff0e0c159411c981c797a5c3ef9aa9647ebba14e34348ab49661bb394793facc9d9cb9e87fe27ff36326d6c8d6e53fc9182fb51e316277ca284872d7f3e07d94701f952ad81d4a0429bbc3fa3ebc46028242963820d48caa6e87ecbd9a99b72547c2b15a233f6ed8a7ac37cc69ce183e452b4c59f118a1267bd6ef2edea2681bcb2cc5a4fa5e8a0eb717dee407583a857fff6a125e358bc6c407f3af53de0cddcce5e49b0c1fe5edb5b3dd00c9019e8ef0df374c0ef0bfcd1b5d55fbb841ddeb40c973f2e84102af0d8a053486877531d6d874cd89bf10743025d2531b181da06a5691a61a30b897e82480043341bc9b7ae643a16ace0aea4cee05c0c95e1d1546cb5ea786a95baff5d0ae8e3aa231fdb6ec5168d3f7ee22b0d0b5ef3334acc29c18bf625bdc85a6876ba47f12def7614cf74dfe06a64af7ad3f53decab1388532ddf8e0286a1aa1a2da92da0f2a8572ec5515a27c1694f4073596def602eb4c3c79c841ce46ff75693ae3dd5cccbbb8f89fb6059d398735ece36fb1efa9a56434e2a576d71c2d3086a296dd78ab80fe3b4a7135feccc2e824972300efaef2dbc31d2cd6e016987265362905b2c56959b6e3b734c5419a7d81a0626bf3880d33e35a7259793da9eb1eea9c4a6e52c2aeacb0244b99934bb84fd725b452953b7bcd956887cbbf9315e1aa72e3f5f206d9ea4e09c40afbc9d0307112cf4145e7527667767e05918614f6a4b22fe65a5502dc2fd086285472c4431fe2ecf0b1e81cdcc010d065d703bbc8e5b0d12b5d5ae85cc832119803b9cee05f013f63caee4aa58e6ae07ce3ee3e8edd849c5b09eded34e00cfaf617b2c5213cf3acc0d5647470f87ab9c435a85c9bad098669af676a07edc80c8648fb85e724643b7147895955a27825e80d3cfa5cc3bc36a71f72bd83f9f0d6e94ee65578f97a8acde640010dc075595348d0ec93f88161cd35a1752e59554dbb6cb0f70a41e3c3af69eab11c684dea74342a3229c96ccc2a0bc6425f2fb463721a6415b20e096afcc66e9ddb72652eaa239202d02ebb3d0c9d2abb7b37a7c6cd4776672dd559d6b202dfd3bfcee905d3f0d98f841d71ebc0efd4d831ada3857ec56e91725c907a61c435a5cc4022b8c72af3705e5854796465f3bef5519d9a8f865b43d1ab38dbe9490dc53eee7e5c42509ba1e36053448110665930f93fc5be77de3b1c849e5dfa782f24b8938783a441b7b895dfcb3e5ef2c31b60c2614ea1a258593d418c3ccb06620372b74023d90bff82e18b93871a78b8c64093a07edc22f4da29b09286f7efa4b59b8cea2940f3f099201bd379b543693c561372e17ff83cd8223ac78764a871edfef6ab1394aae22a21ee2f40805b22e340d27ddb140b6a1725898b5c75df700b2504a69b8f9f5aeab858db82167db4a9e85cb863fb7d0bc69a032f9adc0f68fdc8981e87dd55c9db9d56eb0c9c1b5c96c77703ae477e6e6b2fe6796563de13b832b4072cb318a07d7c0ea6fecd3472e265f09bbc5c12e34347841ca70eafe1b1446de9594a229c4cfe548f2ecdf012f80338b279480c20dc12f63fa49a6872dcb0b7673567349cd4dfdea474b84f8afb548919bfe81715fad878bcbbe0471fafeb7192d715b55e213eee22b79a15fecedbb4d8e82792caefd1f2cb0751f8b35e54bb841d62ba6173a7be5cfd80d5dcd9959887d03103b921c623b8945f19c7ea24c0cd37171844d8852bc12126dc0279dbb6f3215c9020c94e9629908819a47895c8f855e840f5c6dad1c0326be89d03f525eb9fea75f4c3e422e39968667ec27a5db61baccc69afbf2b64fcc08d7487471de5c9f48e4cc41d811a9a7686cc790f055187d271b098349cb293713a2072e7e7177947272e528b857993c53bc24e64db1f35dffe25b361f2b11944395b6cf8fc34a6a0b089ca12483b4131add3d2b6fc4e966a218ba4e994d200846f40a48a643cd5fac5c60f3160591648edf5574b7731e0daeb8774532ce22121d40614f1791c225d70f93fcc77ba1c0097db3dad4a011b38b334ae5035374c27b851f4578481329540e58e08361c4775b00a856d2d2c2c21e8bc5ef181521787123528ac960f7ed97f61822a01688c3798df85311bdacc2d5c231254e22d340940dff51c3637c478dd1b1f877d58b81200ae2890df5f2c83eb0f14dfb7ac98ecc192d4d5ed4f2603e9a48bea86b2c995427b737de2218a74d6b87eb24cc1aaf5a96a1d4b7ce065834c88d621bfe92872f13555778e72a7189211e6bb5707901189d5aaab1d3f0aa2ebb4cfb6919d9d28ad272405077401fc7a9c17110d44c76c8e449b59ca9a9604d89cbb9b52fa45de981773688180ffee9b33420dd85f164abbd05b47d7339e03be2ecef86fd3f0c113955a72ead25644f9bde7945ba6880c238fee666fc35927699f57a48fd9c1b4aa8502abbec9e8672225b55cacbac486f0bb6f0e86dd044337e384d7be4d325ea6c210aa4f6d25243790a0604cc8f2a23657ab3a0a04025ef83bf5051ff97f2ccc9f34b09053aa8eea50c2ddd47ae99deeea33b118af80204d0cc548984c0bb2a4abc7a5a314563e58c229b7abb7e995a7bc473a71138e1aa59ff704dbdd59c4aa21ffd643c2c8b6791363b7e1f255110ff53a7b531e6d1d0d65f619aef06ff6904c40085128ebd70c8b73fb2b8e5e2aad347e41fad16890394eb9a83b97cb5e29074390ab427d07b560d1584df67b7fff0aff6a800ad8171cfdbec7777c24520d0a4526671d038c396190c1b989183a2c708e46a7818316ceb3d03fcf9cd835eff646dab4f62d8ab31e78ec76806e20f54f0f76e894c4ae3d315715b5c2f3b28c47f6e64067a7efcabc46b1c9df6f1654bbc399b671caa62d676d182a58c99a7d6404e54b254cc593968c3a4c5c11277eb0e6c931c2e8fb64686908ea1be0a998745760dd44d178ecac0e569aafd31de7dd585db511fdd5afdaec3b1037ef72752cfd63053d30da3dc7e4e9320fe69aa49f3e361e184ba5c1989ae100aa0465bf288609da8fa2481c2245bdc637dd318965223d47773cc57b98660aade523a0a610b2607375564f48b7f0f669d68d64c84652b08110c5b9908b92814176696cb544728ddd27237a38f3b915cf078dbe37b7a5526571cfff30f928325f46a1c561407585bab97dfdb2e5c4ed8496f9567a7b5011754afb06176ea9cbe6cc5ef64878b79107d8836fe17f3f2f74dc0dbf82d79fce19de7b661e99b4a685ca9072abaf2eae7c1cb6b45414fbb8beb264ed1a6bda64a8944ca654eb4b1c140e10bbbc816ca5832a3a1b1129c515c3aea2e154f782de3de188096c7173bca3dd0e79e00877a7cada463566403b38f402da25da10670767179c291632ccf4d2a13cb339d95fce89c897260694767f5bfa37f34ff2e9aeb95abfff44e16ade09c1ea81ed510ac551adb58597a54011b2978acb6ced4b2373f19ffbdf4fccdcd3c3ab2786b81c968349c74edd0433748396877961ffcfd5ac4a4420d03f1d58163f0e1dfa77bff68b4148dc7ab4f443b0bd714ef9df8270672359b73c6c8df0754fe5226dbe1c0b53e242a076e8c6f7c2624c4e0147d337abdfff906da036b6aba92e1ab9d80df6db2d6aa4c7bf5b6e3f9df4bcf329e5d62fff2385683444cb5586e844e361468f5ad61f0fb4cdc7b19c823f060acbf8453a57c8674c684f7ad8b7512f394bddd345e5c152c5a3233d8c12e35335a3922e19858063acc3586591bd9d5789ef05a22ca3dd2fcfa27d0950f3d8ab742092919172b3fb9e6fad509b4c93d0679753c6e38ad39c9b5348058decdfd25f45bebfd75f73555073d06059a219ffe85a405050b4dbddb3c428fedcba6e4fc6b4fe2abedeff98e777e5441e87fc4691e8099a654e82605315ecd39ff37087831cb4f77db816c464e0bfa238d45e176fac4ff5e5bd72927f3d62f7d702a4ad68b07e9d1c29abe33c097a086e2bcef18283c5b05ecf4a289416b605ce295755c25f2a6368ab1cab9dffe1bab4d153660d78bfa08fadece67b2d11c9525eed52c03372bbca45ec366e6e99ae7deb78878eb25d002dcdb7a9e68b97c446d666e406c919f7b1b14befec7a59a9082c859f0254420e4ad039e478a88c171806aab7c36443ae36795a220b0abe911771bf953cd0c625bbcb8dc5255375610f3e3de8c7fa7591a86b94300e1f0febd29c56cfdac6ed799a2d84d9959bacc46323c7e4104f51b767fcedf20080c90ba0197d9819268377f34604f63d5de7414e468b4c397b96b2e5153dc741bdf3e6957a755de88de20695234dae69b5027239c3afbaf4aacfc3f775a951e23c0a36cb723a2b65855701e6e37878e77f7dfd9ef59530e1425971fa92f02a57a16edc44cc4751dd7255b5a4b17797509243926826205d358fe916d3d9652952f92d971937715b10dc3ed69e1cf6531f25565c00ba3979cf51e9f8e01d5e154a1d42336d64e110bc04cff5151c66139f47d88936fcd988c8e83a720d6e559218cd63d19df05b8e2909e3ae8455791effc2cc4b135677ba513526007d7432da2d64ce5e18606d6734a5cdbb7779ce69e3314c9bfec5ef9c637cf5070f1a8121acfdf14e82008b41d315e18e5b451cbd948d9a29ff78c4e1c8bbb814eaa7419365daae728dd226f2e39d327a4dc8b1d91a99b381c3755cc493974dc95608889e224a155c1443c3880544fb2078d3536d161b2ae6f129b200e053b005d0d67c5fe0dcb39c859b3c3728eadcceb07d0343304484fecfb553ca6e8279d37dbb75dc7810348c76c63d8ff98585ded4467bd456b5f104a9bde4ea0b8f795b004a00325c993dc487dfbbbbfd950248c82a35f22c0023006cb4cab37fe668289031b8041370f28d6a9a52e6f17898ca2fea54c0cf2a96b6308b431bc19bb5bdf4608be77d89714a369bde067cae3543ce252e1965c52905248f5464304ead7f7cc359aad43cda54b88454f1f0b57b3fd738ff09ca390509452cb84ea616c427f7a56727b8432ea19baf0df1c29ed173d0786c66e6db3bbdb0cbcaeeed592eeae5e208cfe82a75961e2a35279b8100d7e6dae21e39cf1e887fdc37d3d7670c632d66c563eddf26caf06ec1db3763dba35be5dcb9add81e01e300e775b2bfadc1e3fe445501342b1a7935133c5840891f06bb69ef817a826e401671322ac9498d547d986e1050fcbc76d3e94a7f6281503e78b2e7a1da86dcba1d00ad0e5706fcebc8549da39adc67dcb4069835d5ac1cea07c9089657136ab38ae79866ea9f6ca39503a7c9ecb1affda1d663f7f07253daeab39b1cd3d582046005ad5866a725612c4a6836a7f8866a15a01068f033b28bd2d6f8f2bcc61141921d1dda2b2778ae3cdb17d73e1aa30990bad15899b5487d70b466fa849e31f813696f36e89f4ef8134299cba529541e1e330f94ab149654a44bebf134b6745c0db6989490980ff2680c9f0c2b1d90890b2e0ae9c8e567a83a1469e178091643b5508a86ef78b64a9d7932845c4aabe409f3cb02f529fb9aa5c76eeec4c5fe9fc609b6c39619ef178f598c39a6c696a213ae868725f9c250a7dabe793b47edd638e4c9ae3f786236bac8a3b465671c67e6543997eb15c779ef0b94d228999c2d207e751aafa919c86fd43128cad38a20e11ae12dfcb963b32f795a5dbae16b6dd29be1e3614b82addb2d10344a986d61c02c03426aaf7f5fa72e767859b8654b24c92ff6d128c3e433e6ea69f54a20aba4790e9672e54762f30daa326de44b2e5cac7c7d1e47a9b9096831e06bcec4cdd619e60d7c3c6d74162ca85ee4ba5dd36282635e322a8169be5f1028db897ef8a0ffa74e1fd06f48f171d6c8113452cd4159d421bdf0ed0d1f51dcbd001994c551b713195863592eb6f4601db009fb67bef8e11431d00fdd9365bf99645ad428c4fda537d46df0ca099d935b482f4672e9e775fd83991729260bc89d9006385ca8041c3d79d2c4580364767bd2775a1d4f6c06e945ad09b5be341cc90d4312d1306cc6c5a3beafd5325f65bbab2923a0a22335aa677a1de15b8d89bb4a67683f472d1b5474b189fb50c2defacb17427a726d2a6a59679b37a434c21144c1851951ccfef5a2ee12cbad4c7d418d6ffdbb934ceff935df88dc769ad786f41dd1fd04b0946cff7222947ca47505c5fdc334d383624cb4919d89ce8e5350577b14738382fb6381f4b66430a751dceeecdb1105ced9d275987eac14094904d2b43de37822a26dd6f67e6dc1764c514b4211a83eb0edfbb8a75b6c7150c015470428199abe9d9c38d834b4197f66e45fd8b6e1ef6d8235cfe46068c698a9ce68d8a85190e4d14ee2eb31513d8ffd3096b659fdad228b0bb6302d61c135e8c2b67e5b54111a7f0c033137af8d2d12d19f0bd2e8daf7306cdf82d63f3ebe890c7241db474f38aa6ba429dab5cc0a06c4f3384d912410cb4acce6e834c3f4874461d78f38deac05058010d17a333916fabae0feb597c6e7aeaeccb672afee7538250780eec6746aecb2a992a845c0f882785f7bb488e69405b8721ffdc18cd8cfae235f8350e6c5ccfc23e134a834f6bd08ccb6493ca379cc8c55e8ea4b2b1147171f987f8a14654cb7ccfb71b9be4bb6e91dd29a9fe4afb0b580bf77c60356b810100ff7c214ce5a38162b619929bfa4cf94e79aac0e0cdfb6ca31e30339a8426dced157d186bb92063f2d51da9d60baf2cb95e9ab65068f3fdff840a30a3cfd5a2b8bbba4b04be36f1f6ee4663143a8ccb1e60a5cf23ea0dc131edb153cb6873c632497d6703f04dac05cefccc219c12bc8b4c53eb5263df4bb52f0b18497a6db3b84e5a5404e452d913efba93a7059bbbbe4de94e5855ab289d69fbe5002143dcdb23f126e9c8b5d4e91e8c2059a106158a833020c2ed256c08aee35df8c32f9e09ec2d1a43b18c7427d70b0907793e6e0add1f07b411f24875b85797a564b7e8dd608163ba91cba9f219636c87c9ea714cb2bcc7a1d9b2c40a9621c81454fc4cb0ad74b34519f32e8152c1c4b192cb5e344e37b246172ebc5afe9ffec7a171fe4087b1d9", 0x2000, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)={0x90, 0x0, 0x4, {0x1, 0x2, 0x7, 0x1ff, 0x800, 0x10008, {0x5, 0x0, 0x10001, 0x6, 0x7b7, 0x6, 0xf29e, 0x0, 0xf5e2, 0x2000, 0x1, r5, r7, 0x0, 0x400005}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) open_by_handle_at(r3, &(0x7f0000002300)=ANY=[@ANYBLOB="1e000000810000000000000006ed1b416f6e40904f93b87ee3a08baf4145f84ea832775893f7edd79c6930954c58f17e0be4e785a6b92d31cc60f666fdfbfb65c4f14bdc6039303611402c97c92ea273aea9ad40c90be890bbe013d22e28c96b0a374b9db4741efbdffe7be94e417c15876f9ae0f8ca00f28b63cd4712d600aeb87d77"], 0xfeffffff) (async) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800480000340080000000059078ac1e00010a0101008907c5ac1e0001940200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0100009078"], 0x0) (async) r9 = semget$private(0x0, 0x7, 0x191) syz_emit_ethernet(0x52, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000001000000008106907864220101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="cc1000ca90781000080a8000000000000fbc0022021e0c14400000000000000001000000"], 0x0) (async) semtimedop(r9, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) (async) semop(r9, &(0x7f0000000140)=[{0x1, 0xce97}, {0x3, 0x5, 0x1000}], 0x2) (async) rt_sigtimedwait(&(0x7f0000002200)={[0x2e9]}, &(0x7f00000024c0), &(0x7f0000002540)={0x77359400}, 0x8) 9m13.903564145s ago: executing program 3 (id=1580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a00a0006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000ac1414380000000000000000000000000000000000000000000000000000000000000000000000000800001b0000000000000000000000000000000000000000050000000021000043050000000000000700000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000060000002cbd7000003500000200"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 9m13.212001823s ago: executing program 3 (id=1583): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='gid_map\x00') ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r8 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x29c780}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r11 = syz_open_dev$media(&(0x7f00000000c0), 0x1000002, 0x400) ioctl$MEDIA_IOC_G_TOPOLOGY(r11, 0xc0487c04, &(0x7f0000000400)={0x0, 0xffffffffffffff80, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0}) io_uring_enter(r8, 0x3518, 0xaddf, 0x2, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc001001b}]}) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000f9b000/0x4000)=nil) syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x101020) 9m12.425495453s ago: executing program 32 (id=1583): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='gid_map\x00') ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r8 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x29c780}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r11 = syz_open_dev$media(&(0x7f00000000c0), 0x1000002, 0x400) ioctl$MEDIA_IOC_G_TOPOLOGY(r11, 0xc0487c04, &(0x7f0000000400)={0x0, 0xffffffffffffff80, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0}) io_uring_enter(r8, 0x3518, 0xaddf, 0x2, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc001001b}]}) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000f9b000/0x4000)=nil) syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x101020) 7.501048205s ago: executing program 1 (id=3598): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = syz_io_uring_setup(0x34f, &(0x7f0000000300)={0x0, 0x400aee2, 0x1000, 0x3, 0x316, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x31, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x40, 0x0, 0x0, {0x0, r8}}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1809c2a, 0x0) 7.064598899s ago: executing program 1 (id=3601): socket$nl_netfilter(0x10, 0x3, 0xc) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x9da4164a451fcee7, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000840)={0x40000, 0x0, 0x5, 0xbd, 0x90}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 6.038310124s ago: executing program 0 (id=3604): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e8", 0x10}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x20049001) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4095, 0xfff}], 0x1}, 0x2) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000340)="2fcc", 0x2}], 0x1) read$FUSE(r1, &(0x7f0000002d00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r2, &(0x7f0000000040)='environ\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) 5.646520686s ago: executing program 2 (id=3606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_DELSETELEM={0x3e48, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x168c, 0x3, 0x0, 0x1, [{0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xf8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x68, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x72}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, {0x48, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x92, 0x1, "aa6cb58e34a393e80752f330ccf2cb18f4236c01d66e344c547cf128925843804d967ed09afadaece84529c1d62197eed0f73eb748ad6ab1fbab09f36e225d002f67b3f7d3280ef4e54777eb919b694985073f179a6496b2fe1e40a96611a2fbab49ce45be180a8fde72462987dcf1804926f62dd37e3b5e4518f3ef12a810b78b1fb74c40ede405849ee1d45258"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x1480, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1178, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "ba9cc61f01ba5108eca3334e10d73c02b73c55cfde93614d71627afb1afe0dc69bd5a179dc5c86b18a755fab1f902bcf6d798244df251c9d907d3bb21b51323c0223cd687e43d229ff7ffe6a2bc0f9ccef62d2a175e85cbbacc16a9ff16b78694fb4618891212fcf8d4d4f703aa62f0735f0f78fb04734"}, @NFTA_DATA_VALUE={0x6c, 0x1, "7d4137bcd6d0549f720a6e65ac927bd722254e3409208ee89d7feb521e01c6395649b7d15317413d04384207fe36884c1c23e912cc0f4300e96f5050af05c0aab231e658b8db70c84c00b12089ce608b080f0b9acaac81bc3544a2bfacb726b2530cb1333efcc022"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1f374d11176b0f13}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "e0b7fe5fafe304bab23b6b53e76975b1e26024b3604be29eebf04f5553a7445ea836427f7a7db48e31a6fc829cc4b698579a8d3377dc46c6045dab16a17eada6030ede6dbf2596b0c1b712174476822b18bc566721be505176bf7b2df5ab80ce34496cbd60c744444fdc6b95e9876b5ccc4f236e0bee49b7b50e68b9959e1cf95b6e35a95cb9ee432d849fc42da5a4fbff1e43da630cdbed91e3ac91bcab5134e1038ce8bb595e61ca75e2cbd0c9e09e6d75bf4589c163f420f91c9a49ca2e26c6568f71797d08925b33ec4f45f8b6f4043b34e97a99f11e3169a2047b52faeff966a5f9d789dd3efc9aa93bd9fb6ff7419670641941db0d60a48282324cc61ec2c5e7eafe69d7598e6e5dcfeb08c79f447c7d1e606a340ca7556eb964bfa678681fb6f391f4ad2f104d6a4b7052b40bfa7dd7bc5cd7036618a606a7a22cf08605d11dd2139cf8e35682985e31f2b1eaa927dc46eb03f7bfb040b57c4204704f1b7a8ff8dc0a1b0cfe372a1b1f6023e91de8aaf54e81f614d19d2cdbcf90b77291bd46b21e52230c68f1c3ff2112e054b5313f8a49cec45da8da171a9b4fcbf22f083ed2c3018bc740b0e472ca13f40906341ace25c092a069c9ac6a18ecedc9b03a8503467231b345cfffdc45fcfb157f7e31003ac67ebab2e5014ddb4d08c28fcfe8b5a6b0de94ddde20c9b6ce5fac233863651c0bb7463cdeb5788847434dd15d97a36e1419976d88dd93942b1bef88d0f680d072980da8e193186bc25e1487eb352a78781610dd8f4493c6d3b77fa98271e24407ad074a2de648db607fa076a7d932a635232d70796021e76ef2e67a9e695936c30d04fa678fe6cf587c91a1a8868b2af0bea9fb1b949de6b8b552b0402ef043bea906fc4e8d7dc263bfcc2060682572030f27bbcd20c8a085280f0d1ff1be8f6518286a1407647ecfb9e363949efeafe07f8515bbf15b901e7be3af866f609114530286bcddda1e4ae1295272f17a956a04e17dd45e95f28349ba19d4a990f19029e7c2ae89947a62f55683b4288db92909ac3f52a92ff3804907e0d3aa4bc2829e70778a6fdd74080340afaf201fbf7b6c81bb1ea9854269e5b1c291a32065d2093a918922275dc251e14518416ffed904f3409531d81122b76350bbd5b0c4699648797f93bfe6c1c3b1e54e7c486c2146a9a1f369c0434a57c137e70cf373814383d2f3fc936dae8db4ab618868c30d1c9b7357377bee97f7c10d1fc6e7f65efc65ff69d4f85d8c311e726633c0e4f1eeb9546799fdd0766fb94af71dc4fc756928cec175c2f5910b2ee12af1045b87496faa037338572fb9630b3fdb8a02a6a02fc6ca373460006e965e3e7e4b6bac20513ab0d7fc3a4234ff11fc6840fc8c7ed67faab02d25a9f6db775f87c8e3159c92d885adaaa75ab6ab87c23f725c7e86b286576c457ebe72790f1fa66e4d4d49df205cfd3af168110975ca7d46df511cd54a6789c1722f3396ec4794e99396864f099065672359d7d16077187c357c93b7d942e20c2619e4473238707b60a3fe73279a484a8e456de6e949b4995323678287576bf1078798291fcf8b7b088c19b10baf8690be889d1585a2e159da5b1ac57d0670a23d4cac7eac434a3e5f0d6ed9f444fc9bcc140cdaa1e34878c791f938e73ab0755d5017e5612329c3fa20a3daa22ee35c30e77786cd4a8427c8698c44d63ae94391d4c15b0c91cb057ac0509b4a5a681dec16531ed68c2ec20a14b21da0c72e9960fa0e54607a22da430cb43aa3a07351b34eb803fb691e162efc3d06a7dfea2b7a613e1a3f26c1ee52db049b6d78b2fc64faa122ff7e7f3782a150d09bfd361b84d391637c664513b0e4339aaaa9fd7b45bce94c6b95d88679bc7e48fd9325e0c919af5b868804d2a53f28d3098271d58c6f20c41adc8432fdff1376fe9778bc5291861d960a687414c0a522a031dcae5aec395bbac2f0f04d12c7ab3a2ed6e453106ae32ec712e032df4f5b5aaedf81c5f4affc3a82f40ea8f656e8598704e35c90c5f2291e2cb4990e3b9b2c50faf4bfb5114fcd6e179d453ea475cd9ec1500abe9c23e756b24735e504ff9b0db5d7da8895cf7ad279c263772550041f53c5aa1e35c6840a4c12b3f9ce068539c5ff10cfb3584c7d3e1e50ac3482fb186369e3bf7d992eec6e799e776be8091a18415b33c449591ab1c395f20bca66a5ac13fdd291ff607dcaebe3a2f28a8072fa715eb9d3a360e5a742a02fbab3455bd723243b9761acf25ebc9b164f56ceab3ecc3a80c4371ec5fb61502cf1af2a76c8f093ffe82fe3c04ad28047de33d2fbd16925639bfbe7145048c53196ef8a2af34fdd8d8326a34fac8387d461d13ca095fa3d2be1ca5a4643485dc696289d3dba059ba93be235aafe54b2a6697d82a2d19228c976af3bddb77fd80090c2f29742027c58de311e58e91f295fefaf25532f80d9a8d322c6c9af8ca350ab82060cb0f32486074212c511d9cfd2501a9401bb20dab7f8d6a9cd8214a4ac31b54135ae224f28b5157c7641393ff487d7b1de7593515a454ae4b21436e22bbb4123f35da9151c8fd0db24202c84e58e5525cfc3992951f0678c8f3fd40096c09252af0b5b6b6d0e331d82bfea4e54695e53b8ad8a71dd3f92cbca088cb8d81df735b8d6b82e799a045edfb34d3c55c85f27dd732cea3521e7ae63f7cc73d01779310916563db7c618622d28012cf9cb419887a5380bc7daeebc7bd5263f051c5f6461805f13ed8668535f19e8888599a0ab0f134774bb6e56beb9ddfc54c51c6715fa5f2324afe70db9a451cb407d2331f4cf469deeb6b399f40e493731f00a29defc378290438c02e9d8a9e16cf2ac0530e58e75e7d48341c406d4bacf26bbaaa199e417b09fa921f4d5821c22df485d063c2a6ed76177828494138677e3695475732f8052ee7e2da096fa4a1ce72a574fd9ca3832abeb0aa355e784a3aa36927578946eb75e177572d8a1f3cdce9c45cc17ae1c2a1fc65ab15ca1109783d76576b621904aef776d7f3944a70424c127124efa31ecf2c2f41f10a34840481f2e04d4f070ff7b358165784edb6f665b98eb2c7a750f105a27fd096fc830e6ad109c6fabca74a32986e01a38713d8f5beb0aa22ebbdfd824a42d4ec06a147a35c41673ffa7465deb5116098b5d4332f9ef63e6648487bfabce210aec17fdd66dae5be71e232b71dc57e9a091d00b93c146ca73f675ad720ee7492d2106a8031b4943ebea291f23b6b8ecc35b866139a43d4c732b0de1274fe4ffab555a1cb3a23af5483ea6c6b69296db6db33de666938fa8a4f30928251044f650239d9bc76a3063ffccefbe3aedfdcfb52eb656f3c4cb9430986f25b035c042f5ed46a0ff83de7b7a3afe44e03443d0f296e0041e5a8943ec4a73eb903a5b20947027d2bf66e41a6ff8104e7bc39e193f3c282ece9d45fec76e1ac2f0e3c110a44c4e7130f8ad47f787e5e21d4378a9bcf4be1d994400c94afa1ca8b335f450e9a7f04a5a8691a3e15a5c3579dd8384e09cfdbfdcd95da189a0eadc67459ab50ed6ff2e5aab2bf87a3da13c4ed70dfc490c1811c8170636011f2aeb055f98d3bec7d1d628f226a74ad2096234da62466216a98c41a3c65856325fe58d797471cabfaf4c7ea1b938ab974fbcc8340988517795d840e596093be62c5d7a5086a524a5e52df090718be027844cb428fa1da0318f8f47cd9a16f275b4c3417cb204a36ffedd129e66647948490fced12996c4111025e85d891aa6e9125fbc62b9d7e3780dc46e73d0fc736c9c616abddbf21adf8c0efd17b5bde5a82abb398567f300c3dfd2656113bd93352578d965569ab2981a1d0d76c5c5f614b105a878f4d44bcd8b41f4febbb7ebdb440c1f21b52d9490ab140b8198e09e13474ff76dfc932829dc45df0bde3192fa9f6511e9aa1204ea466589f3975773ef4cb19675d4176b113cffbed8b476e1cb93cd158b40b30b3004613113fcc8d606b2e287d808b007cd2a23c206ba3958fd79bcd1df907efd2803e1456d049f9d301e0e689755137569746c45ee417d285f119e39d1392737f4b078ef375ae58155d4f75b9b71273ea7da93aa911186001b95d779fa68756029d0388150ead9908729705eb3d1d5ec1f2ec4c82253d2584cb0c8f2523d268b205e7457fd1b75f07c94c271aeb42b15b77a54792e7bb58ad46765a937551c22b71ad39630f64356025ad5ae9aa74c87f9381aa1ecf140fff458913aeb48e66a2cd1a99c7d42a7025ec6d4467a414a9ebc636a7af09c08d8af61c31396863cd05058aae32409a59facbc8f49d3fa4f5f525b765d373a8fde59d16af50f1e910b292ed644bfa2ff70fe73470309dc295afb7a5ee7c3b7de23323b2cbf0a5de94d058d07fd1fa844da42dae1016b949e54fc565d8d71667edc3f6c6ce675939e1f8e7b3d844b25429d524b16fed2a4f8ee08cad96b16dea5b88bb808d2bde2d33de8341c3671e967b85f012250ee6b32350f764ed93a899671df44f2a4673c234d82f76fa95e2c8fb885aa2b1879f761cc704e4f05c888fc9c75c949ea6bcb555da547c22213446d2b3e98a8e15b3bf88b21942c71fc956f8b9f1129a7d7316c5e981e20772a069729115414f4f3c22c5f78f03f1d6c7ab6139fbf3192226c5b292bcb608230ae81b0036b9a497a898700af22bd0bf7e29cdbc52595f59f6dade7797069ec23fc31a3905e7ae3eae4695e976b23d500778ddab50a9268b83771ba051086e080a355f16a82339abc9e8613294b6c13db513a3e79a8eccaab7d98889a61e05124c8da6d29f103e2ba8dffb05c8e391638c1060e311f60a13f85af28f36afcec68deb5ac6a6e3fe1da6eeaa1680bf622f1ab4265321cd201e06c695a38f1bbbcddda26c690eeac89f97bb18cc2ee3c5eeadc54efc924e3fd52a02e567de93e8660ae0a52716d24e55b930afc3738f25333994589c01512a24ad19c225c59157d5cd625f6b51070dc79ad1d8c8c5ce743cafd5fe4dada466732194e4cbeed473d39e16b32a86231df474d8213a47f448efde53856176814d19e97ac3e1b82b9ee013b399f369bd3309cebf5a61f931155de63fb26fb2298662bd14e952f4107a117a87aeba18a510da903d62d1d708b767d897c05522e95c921f86ed66bd42f911d80f1e6fa09f1bfc5fbdcebe411bf188bb3a6333f94e612004c9928df32d3f9b83731058178226a7e68e0aba35152c0a44602e7e8962d4a3fc4bbf02e6f0815ca35858440131d3e957fc166b1967e2d235cb76633fcd5221d989b3f08ff7288832d79a63ae023b6a14a8f3721565454650666960a7a3fe2c82fd0f230536f633d9b52a48ae266000e7c06ab98ab324f06f247053ba7b4d7189cfb9f83fc05457059b5e48e05f2bf5e94e6be9b0ef210c6357ee0fcf24c9dab9cab275b67a157d26b1177eec049700d9722cdd248f4b58371c7d9b05f43ab6109498dc5400b3c5b758c0d7a10168b295730c7856f5e741ccebc19abd21d747a052c01f87ef2bb25fe3a7f70ec771053a8f91df929df2673ba5cb60b90fe912d72e2565b4dfde214bd563792b977d0f66aaa30930207d3714512e71014e1dba2ef23e5bb2932d264fa376d6a1b30e9e8c5d7e53b9b83e4660473ff2d2cddc9bb2d085bc892e7a3f5fdc9e05736de8faf1c48f7ce4216ab498a3babc59b82623c517282a11e43bd331ab2d0044a5b1a51b2d139fe2676600f7f0084c15de4466d78d73e9d5467102a2cb9d7f3e731ad53c929bd8ec05af021c4487f09720244608d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x2f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "6ca2db4510e352592b1fa3a14500da719ba41f7beb31b37161228bde781c415647a0af5be0ff899bffe551e2579c42b96b2ca06457eb6e081eeba3c49819ec6c87aa73579c3109753d48dfdc4844272aa13bcee37b8fbd24e80600cb1cfd15d4f4dee70335029a6732949bdf0ca3ffa8073c409594044097de9b7ac62ede89d41c818b6ce193edd4c8094e45ee0931bd0148de1e9b6b83602c29a48fefc50cb9fc2efa59246792698d03a0d801a8c936cfb2f87044bc7fb4f30172104855522a5937cb44d2aea3249df85359541e18d2f0f1f42fef9fe86cda81d6dd8b353ffda7dd73cdd468fd57c87a"}, @NFTA_DATA_VALUE={0x3c, 0x1, "2293df5bb2d5441231f4cbaccaccb85c95689b5329860af1958a22a5c6b0de43f5a8fe51d21d5d6370b748fbd20d864acf0fc0ee3705dc85"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "75966c9992a05bc10ef7ff07af1815a7ef743a6a6abf30aed3c4c2ec0e3f4a8679d82a3274ad14f5629fd206c4a9efee02b93f07c642e13aa26cb6971b7d60b6f2de9a2ceba3450993316c75a857a7ce8aa61bbcbf778936c2ea23b358b96b8ee6d773d4ac91695947301fe28e65f60172662afcb961140bf56cdcc5a85553a93aa7f0ac30c17871c87ddd98396eeae886f2a7926962f8fdaaa18a564a4b1d8311add92de013b9786fa85b6f1fe263c8efdd1992fa9b4454c3b61e2f71aa13994f85c3f3f785f65084624576c536756649f2a022e6f444bba56f2b"}, @NFTA_DATA_VALUE={0xa1, 0x1, "9a8ac7cbe2b9ab39041fdaba5cbfa0c2c253f7676547ef9c81b937f39899aaddfa50cc39a42304e848f43428b737dfef1548837bf44db45360d6bfa32d3b2ea9d9e1dd45b0cf13002defe290b0854a61ea73ce52f09845a8d401f591a2210b305800e0b62223e0c43d6c9be9fed4fcf9ab49c7cd50fa31779c5058186cf0c1bbf72ec52f1613bb3f37286c923501b0b51078afa28f0df8176b1925e359"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x278c, 0x3, 0x0, 0x1, [{0x2788, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x11e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x807ef64a70c60534}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x29, 0x1, "eb969e17aefaa945544ae4a3d50ca62b20cc5de33f195ed955f043a62e9a185dfdc40e1957"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "774ac11f290b4d01c358261e19fa7a8f49cf7b09abc56d76f99ea46fef9988be2cc6345213b682073222980014e76faa10457c1a28d28acdf040282d3bf0d49f37f4b4dcfcb1fd40648b67ebec52590a60204fb6fd7a05b8262b0330ea20f2dcb9cbca43b97172c39b1823815fc117ff35"}, @NFTA_SET_ELEM_DATA={0x11d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x9f, 0x1, "e48d9f1cdba8c849b5605f4e7a3a229c112711e5156750a71dea81b3f90de81efcd86ac4fbd45334650283db62a684b2d4ce1f5e3535238472029bc5c0fd9484112ea5aca9cd535632110f67e8d0c944b99be126adf35d9532354959814bb97928ae2634d22a612e1873a7f109d08720974e888551a72ff2a01d951744d187a56613c2098c4e4c26e97f9f5ac3f3dc8e8fb0ba9855e6fe6bded761"}, @NFTA_DATA_VALUE={0xf1, 0x1, "58997a666f3da824dec9a397d845bff49981172cfba1d808760c29067ca9c3917828eb8fb8c978f65692fffc5a9a999dfa778491b4377b8950495c7c28d490ae783a67af5bd9d3a71c2ddba704616343f47e8987556689ae9f7c48b783ab6724454623f4eb120b4ceaf6bb7935687339a090cd549541391e8f3fe30d5da8fe2d398cee9615b278ae8e01ad16f0d247a9ea508bae9698d0e09ca0179fd12307ff6f1b15efa3285515c6811db15590b25c407eb01ee00a86a44c68e34a2915b56e42b165b1dcb23de799e56812e3c2ba142e147de7f542bdcac027abf1c5c0d56939f750bbe764569c731a554e1c"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "a759ee9bd0434b88d61ce1d70b6810476d888370696f2b5c7bc16b87dd0d5c5b5b50a84ae2a5b7ab76e440e67baf7cb6dee71b"}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_SET_ELEM_KEY={0x2d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "2d86de6bd7593739db53e2a08fb60dcc353c5158536ab86110c0cf7c70cf744841dd06a34bf1cbffad12346673a39489a66f9e9aae0d9a0fe9074e064b908323efd034f5470135694c9bef4a0d6db0a45d9197afc09b8031cf5cedd6fc393d09be552ac75999cccba3b536e449a942c54914f5549bc3098a1288c176d2809d9ef18924365e9b967fc9339c81a1a59acb57cd6ee0c2a63a2e"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "ea0b0a4460663b5b767d7804bf9e87d1ae34819dda55ea31e395fcd034beeb1647d8fd9fd39bac39d685eab280d9f91e90448be5d6341290d4ef7aa2b812709cb25b656f344600afc7246f8588d4ded7348b91bb1b8bb7681978b22dfa1fa35eb2f158bac27038071221681dcd27b2cd6ee649ffc5934691002b529e7e8702b6aa8f46b9a34151f83c0271701ec6a3f43008d6b0a360e86edaf56f3c75dd17e0a48ac199b1a3"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "45ebc6b5790e2c51fc9ae6bc4d18a9757e605365696be6a54ef5d6a167133d4ec790ec3ec8351c7f841c534d12f4d64548f23a060d57307a4d48dcb9bee3aeff3407b0b42acb6ab44aaf6f12972f075ca13ec14b4e210dc455742359d5f72e8e17d24007bf013ab7b91a00fe6269da47a6fba2606df432b5aa0e919382f996c864acc65a1bb3"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x3e70}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_delneigh={0x20, 0x1e, 0x1, 0x1, 0x0, {0x7}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@hyper, 0x1}) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) fchown(r0, r5, r6) r7 = socket(0xb, 0x3, 0x401) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r11, 0x40047451, &(0x7f00000000c0)=0x7f) pwritev(r11, &(0x7f0000000040)=[{&(0x7f0000000500)="0021472577c6623bf7efa26dd4a0b4dd7d", 0x11}], 0x1, 0x73a, 0x1) ioctl$sock_SIOCETHTOOL(r10, 0x89b0, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000740)=@ethtool_rxnfc={0x2e, 0xc, 0x6, {0x3, @esp_ip6_spec={@ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x4, 0x6}, {0x0, @remote, 0x4, 0x5, [0x200003, 0x8]}, @usr_ip4_spec={@loopback, @loopback, 0x7, 0x9, 0x1, 0x7}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, 0x4, 0xddd3, [0x0, 0xe]}, 0xdce, 0xffffffff}, 0x4, [0xffff14d4, 0xedc, 0x89, 0x80000000]}}) 4.93295942s ago: executing program 0 (id=3607): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) 4.843949049s ago: executing program 0 (id=3608): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x26b, @local, 0x626}}, 0x0, 0x0, 0x4, 0x0, "96ed5113de14a5d7e78c7babe97a2c4ee9e140cdc3029225a2b50ee4baf9addab51ae139be17ed639e72229b65f374d28e02f80a0b533b87daca7254c89b0197205e5bbb371ca634c31204c3688fc658"}, 0x21) close(0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x5, 0x8, 0x5d, 0x10000}, {0x5, 0xe8, 0x8, 0x7}, {0x10, 0x1, 0x0, 0x2}, {0x7, 0x80, 0x9, 0xffff}]}) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1068) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000040)) 4.630065323s ago: executing program 2 (id=3611): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket(0x2, 0x80805, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) (async) rename(0x0, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0), &(0x7f0000000280)) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x4b, 0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) 4.497742767s ago: executing program 1 (id=3612): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) getpriority(0x1, 0x0) 4.469110104s ago: executing program 0 (id=3613): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000380)="22e9c980b9b91c3684b2f3d19c00", 0xe, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 4.419095454s ago: executing program 4 (id=3614): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102247600000008000500", @ANYRES32, @ANYBLOB="08001f00080000001c00128009000100766c616e000000000c0002800600010002000000"], 0x4c}, 0x1, 0xba01}, 0x8004) 4.334972749s ago: executing program 4 (id=3615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22a381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x40201, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000005c0)={0x8d8}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) (async) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000080)={0x40, 0x4, 0x80000000}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000"], 0x50) (async) r7 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000008c0)='us\xf7\x00\x00\x00\xff\a\x00\x00', &(0x7f0000000900)='\xa5\"\x81\x9a<\xb8\x95%OH\xe8\xbc\x938\xb5\xc7)z\xe0\b\x0f\x148\x05\x051X\xb9\xdf\xcf\xf7\xf24\xd0\xc7\xfd\xe7,2\x05L\x1dzz\xd2\xcf\x99\xech\x11\xc7\xdal\x97\xdd\x9a\xe5\x96\xde\x81\xc7\xdd\xb1P(\x86\x9a\xc2\x808\xba\x1d\xe7\xc0\xf9H\r\xdem\xf9', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='user\x00N\xb6]\x86\x8a\xa3\x7f\x00\'R\xd6\xf1B\x93\xf54K\x10\xa1\x90?\xbb\xfc\xfa-\xa6\xd6\x85]\xf24b\x13\xbe\xb7\xc1\x1d\xa4\xdeV>0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}], 0x7) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0x7ffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r9 = dup3(r4, r3, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 4.037652886s ago: executing program 4 (id=3618): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) 3.84321288s ago: executing program 4 (id=3619): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x15, "67856f081d309bb3188bf9098547cc93f2810444f3"}}) 3.586984654s ago: executing program 5 (id=3620): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0x45000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.56339761s ago: executing program 4 (id=3621): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) write$dsp(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = gettid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) capget(&(0x7f0000000240)={0x0, r3}, &(0x7f0000000400)={0x800, 0x3d92d803, 0x9, 0x7, 0x10000, 0x7}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000640)={&(0x7f0000000800)={0x110, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf801}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x24}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff7f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe4}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10048080}, 0x48021) (async) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000640)={&(0x7f0000000800)={0x110, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf801}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x24}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff7f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe4}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10048080}, 0x48021) syz_open_procfs(0x0, 0x0) (async) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/230, 0xe6}], 0x1, 0x185, 0x0) timerfd_gettime(r5, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85080) write$P9_RSETATTR(r7, &(0x7f0000000500)={0x7, 0x1b, 0x82}, 0x7) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="1e5600000000000044459d51404c7a26e265c64cdb3b7f5e301fe7a0b50a30f1f54b"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 3.561270249s ago: executing program 2 (id=3622): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @generic={0xf0, 0x0, 0x2, 0x3, 0x7}, @generic={0x7, 0xc, 0x8, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0x1, 0x4, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) 3.374304269s ago: executing program 5 (id=3623): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="1a91", 0x2}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="eed51a4331252f98ba609202689877e530ad4235053b7ed32a1ae61eee785e932b55c8212f7e45da93fc58282deb5bdc1cebccb0ac79fe9df998b3d7894b93fe382880f898b83467a7a9c20549074dc62b204236e951fc030662dbbbd29ee3710dba0f27c1df38df3b8bb4e58212241616d1438f24cc33b5d428bf580cb65edc3d02c574c449022599336603ec57e07a224f63a5", 0x94}, {&(0x7f0000000100)="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", 0xfc}, {&(0x7f0000000240)="8a9298857f4d09fe5b58c980c38280367853ed7088c6773f59c9b8677f2e929e8b9e678c6611156bd3a66cbb4fe5ec59158674bca7c9450c03cfc49c7a045fc0a0f8d68ba45a27e543bc995089c13d9e057418bf56438022ded87efd5a40275391c145ee1ac6811fb9bc1bcf03435a769549cd98529704f33798", 0x7a}, {&(0x7f00000002c0)="a13db76a8e4d687772231b76a3eade31dd0168986b31f436079a", 0x1a}], 0x4, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0x3, 0x3}) 3.214813293s ago: executing program 2 (id=3624): r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045731, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) fanotify_init(0x200, 0x101000) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x60b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0x9, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5bc1, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x8, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r2, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000029000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r6], 0x168}}], 0x1, 0x8000004) 3.015593094s ago: executing program 0 (id=3625): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3d, 0x0, 0x9, 0x0, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) r2 = creat(0x0, 0x122) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x58, r3, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4621, @remote}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32=0x0], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendto$inet(r6, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'batadv_slave_0\x00'}, 0x20}) 2.850998052s ago: executing program 2 (id=3626): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000002c0)) close(r4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f0308000000010000e2ffca1b1f0000001104c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f20900f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r10, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r10}}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) munlockall() socket(0x840000000002, 0x3, 0xff) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 2.847612843s ago: executing program 5 (id=3627): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x3, 0x8, 0x20, "570000000000000062c4f4d0fc031ca7e5d7db56ff55d9da90aebb3b7468be88", 0x43353039}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000002000900020073797a3200000000140000001100"], 0xb0}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x88201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.719898176s ago: executing program 5 (id=3628): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) getpid() (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) (async) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) 2.178764719s ago: executing program 5 (id=3629): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 2.050078392s ago: executing program 0 (id=3630): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001c40)={'#! ', './file1/../file0/file0', [{0x20, 'cgroQ\xedB\x9f\xc6\vQ\xf8~up.23\x06\xc6\x8bSG\xfbstat\x00\x88\xd8K\x91\x17\xb3\xe4w\x956\xf1\xce\xdcX\xf5\x03\x1a\x84\xdaj\xf8\v\x00#g\xad\x8d;xu\x16W_!m\xd0I\xe1\x98?3lA\x82\xa1. K\xa6\x9c\xcc\x02:k\x9d\xd4\x14\xb1\xdfK\xf3\x9e$\xe4\x04\x91\xc2\xf6\xc5%+r*zt\"c\x03N%E\xee\x9c9\xfe\xa5\xeb\xda\xa3\xfa\xdf\xbfQS\xcbx'}, {0x20, 'EY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\xe8 \x00\x01\x00\x00\x00\x00\x00\x00\x1a\x13C\xf6\xb1\xc2\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?gpv5\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xad\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0eN\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R)\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x0e\a\x00\x00\x00\x00\x00\x00\x00\a\xdbt\xb3\x84\x98\x87$\xbc\xf8\x91\x06D\xa6\xc0\x90?J\xec@\xa3\xfd\x193\xe7\x01d\xd4\xdfP~\xa1}\x83\x12~>\x89\xcd\xf7\x9d\xbfgV\x02\xb0\x88\x9a\x17\xf2\xb2\xa5z4\xe3&Zc\n\xf4\x19U\xeb\a\xe2W\xeeU\xc6\x06\xeb\n\x045\xe7\x94Ho\xb1\x91+9\xb8=\xe2b\xc0+\xfc\xd1oz\xdd\xbdDHh\xf8\x04m\a\r$\x8f\x93\xfdw\x05\x00&CF$\xeb\x91\xad\x1b-\r\xbe2f\xd38R\\?O;\x01\xac\xb3\xa8\xdc\xf5\x9f]\xc2O\xda]=\r\xff8\x99\xa1\xbd\x85#\x88QO\xeb\xbd\xa8%a\xddX\xaa\xfb1\xfc\xb9\xbb\xa2\t\x90xao\x9d\x1d.\x82g\x9b\x13\b\x84\x1d\xba?\xb7\x0elp1\x9b\xac\x8c\xaex\x7f\x12\xd6\xf1C%\xec<\xec\xeblp\xd9\x9dt\x97\xe2|8\x9aVE\xa7\xdc\xdf\xe3L\xd4N\xce\x7fbb$$,48\x12\xa0w\x8c\x90x\xdd_t\x1b\x93O\xdc\x12\f\xf0\x99\xb10\xc1\xecW\xe2/\x1e\x1d\xc2\x8a\x90d\xb6C-\xdb<\x86\xe5\xd8\xfa\x9f\xd5\x9bJ\x06\xfd\xa1Y\x90\x01\xbd\xbcC#\x00'/536}]}, 0x2b1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc010000000000000000000000000000ff0100000000000000000000000000010000ecdf000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) unshare(0x20400) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000140)={0x20, 0x1, 0x0, 0xb, 0x9d}) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="02090000020000000700000000000000"], 0x10}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x8000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x5dd]}}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000500)={0x48, 0xa, r9, 0x0, r10}) close(0x3) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x1, 0x89}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r11, 0x207a98, 0x363, 0xc, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc094) 1.387266616s ago: executing program 5 (id=3631): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x15, "67856f081d309bb3188bf9098547cc93f2810444f3"}}) 155.465094ms ago: executing program 2 (id=3632): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x8000000d}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000093"], 0x20) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\t', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r10 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "00781beca8267798", "d9126a286bc05380c199d04f41ad9dfc24b430a77b6f6a722839d492519b521f", "af7a86ef", "54d5c7080263672f"}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000000), &(0x7f0000000140)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000009000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 154.869411ms ago: executing program 4 (id=3633): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x395180, 0x149) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010700ffffff"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 1 (id=3634): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) close(0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r4, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/207, 0xcf}], 0x2}, 0x7fffffff}], 0x1, 0x2022, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r4, &(0x7f00000002c0), 0x220, 0x100, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r3) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20005081) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x32}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x700) kernel console output (not intermixed with test programs): ce: batadv_slave_0 [ 1060.756847][T18228] sctp: [Deprecated]: syz.1.3156 (pid 18228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1060.756847][T18228] Use struct sctp_sack_info instead [ 1060.805440][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.830589][T18228] netlink: 'syz.1.3156': attribute type 9 has an invalid length. [ 1060.833464][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.873886][T18232] loop6: detected capacity change from 0 to 7 [ 1060.898081][ T7863] Dev loop6: unable to read RDB block 7 [ 1060.904913][ T13] veth1_macvtap: left promiscuous mode [ 1060.910925][ T7863] loop6: AHDI p1 p2 p3 p4 [ 1060.917754][ T7863] loop6: partition table partially beyond EOD, truncated [ 1060.935029][ T7863] loop6: p1 start 512 is beyond EOD, truncated [ 1060.939194][ T13] veth0_macvtap: left promiscuous mode [ 1060.946947][ T13] veth1_vlan: left promiscuous mode [ 1060.952084][ T7863] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1060.959379][ T13] veth0_vlan: left promiscuous mode [ 1060.980241][ T7863] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1061.001159][T18232] Dev loop6: unable to read RDB block 7 [ 1061.014462][T18232] loop6: AHDI p1 p2 p3 p4 [ 1061.024935][T18232] loop6: partition table partially beyond EOD, truncated [ 1061.057747][T18232] loop6: p1 start 512 is beyond EOD, truncated [ 1061.071820][T18232] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1061.098464][T18232] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1061.397770][ T7863] udevd[7863]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1061.603479][ T7863] udevd[7863]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1062.164449][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1062.180018][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1062.219041][ T5906] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1062.409572][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 1062.411452][ T5832] Bluetooth: hci2: command tx timeout [ 1062.429350][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1062.469655][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1062.497300][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.514727][ T5906] usb 6-1: config 0 descriptor?? [ 1062.540879][T18256] loop4: detected capacity change from 0 to 1 [ 1062.547752][ T5906] hub 6-1:0.0: bad descriptor, ignoring hub [ 1062.548222][T18256] Dev loop4: unable to read RDB block 1 [ 1062.566847][T18256] loop4: unable to read partition table [ 1062.574637][ T5906] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1062.576260][T18256] loop4: partition table beyond EOD, [ 1062.592953][ T5906] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1062.606298][T18256] truncated [ 1062.606327][T18256] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1062.860167][ T13] IPVS: stop unused estimator thread 0... [ 1062.869567][ T5906] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1062.991698][T18119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1063.022446][T18119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1063.031221][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 1063.042976][ T5906] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1063.056443][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1063.070050][T18119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1063.086240][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1063.105127][T18119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1063.119497][ T5906] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.163811][ T5906] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1063.189768][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.433272][T18256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1063.523042][T18280] bridge0: port 3(hsr0) entered blocking state [ 1063.563999][ T5906] usb 2-1: usb_control_msg returned -71 [ 1063.593761][ T5906] usbtmc 2-1:16.0: can't read capabilities [ 1063.600533][T18280] bridge0: port 3(hsr0) entered disabled state [ 1063.607666][T18280] hsr0: entered allmulticast mode [ 1063.612999][T18280] hsr_slave_0: entered allmulticast mode [ 1063.618777][T18280] hsr_slave_1: entered allmulticast mode [ 1063.628983][T18280] hsr0: entered promiscuous mode [ 1063.635233][T18280] bridge0: port 3(hsr0) entered blocking state [ 1063.641579][T18280] bridge0: port 3(hsr0) entered forwarding state [ 1063.682993][T18119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.735115][ T5906] usb 2-1: USB disconnect, device number 98 [ 1063.785840][T18119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.805188][T11671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.812495][T11671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.851936][T11671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.859147][T11671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.131126][T18119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.593849][T18119] veth0_vlan: entered promiscuous mode [ 1064.616186][T18119] veth1_vlan: entered promiscuous mode [ 1064.793041][T18119] veth0_macvtap: entered promiscuous mode [ 1064.851995][T18119] veth1_macvtap: entered promiscuous mode [ 1064.940771][T18119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.988360][T18119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.072560][ T3530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.127172][ T3530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.168842][ T3530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.280822][ T3530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.421789][T18297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3168'. [ 1065.645788][T11672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.659078][T11672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.699376][ T5906] usb 6-1: USB disconnect, device number 73 [ 1065.837654][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.853769][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.128315][T18322] netlink: 652 bytes leftover after parsing attributes in process `syz.0.3174'. [ 1066.149138][T18322] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3174'. [ 1066.188612][T18322] netlink: 'syz.0.3174': attribute type 8 has an invalid length. [ 1066.196783][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3174'. [ 1066.216490][T18322] bond0: entered promiscuous mode [ 1066.222406][T18322] bond_slave_0: entered promiscuous mode [ 1066.228418][T18322] bond_slave_1: entered promiscuous mode [ 1066.237231][T18322] gretap0: entered promiscuous mode [ 1066.248087][T18322] bond0: left promiscuous mode [ 1066.253922][T18322] bond_slave_0: left promiscuous mode [ 1066.268882][T16028] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1066.291794][T18322] bond_slave_1: left promiscuous mode [ 1066.302207][T18322] gretap0: left promiscuous mode [ 1066.432149][T16028] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1066.463716][T16028] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1066.485863][T16028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 1066.529021][T16028] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1066.554803][T16028] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1066.564190][T16028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.575767][T16028] usb 3-1: Product: syz [ 1066.585884][T16028] usb 3-1: Manufacturer: syz [ 1066.598957][T16028] usb 3-1: SerialNumber: syz [ 1066.625735][T16028] usb 3-1: config 0 descriptor?? [ 1066.637910][T18318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1066.646370][T18318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1066.848249][T16028] usb 3-1: ucan: probing device on interface #0 [ 1067.074207][T16028] usb 3-1: ucan: device protocol version 0 is not supported [ 1067.115279][T18344] trusted_key: encrypted_key: insufficient parameters specified [ 1067.153950][T16028] usb 3-1: ucan: probe failed; try to update the device firmware [ 1067.337865][T16028] usb 3-1: USB disconnect, device number 16 [ 1068.930352][T12536] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1069.129065][T12536] usb 3-1: Using ep0 maxpacket: 32 [ 1069.157958][T12536] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1069.237504][T12536] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1069.378920][T12536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.406470][T12536] usb 3-1: config 0 descriptor?? [ 1069.427634][T12536] hub 3-1:0.0: bad descriptor, ignoring hub [ 1069.475744][T12536] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1069.508557][T12536] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1069.658833][ T5906] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1069.897211][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 1069.918191][ T5906] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 1069.933099][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.963280][ T5906] usb 6-1: Product: syz [ 1069.976606][ T5906] usb 6-1: Manufacturer: syz [ 1069.991869][ T5906] usb 6-1: SerialNumber: syz [ 1070.021639][ T5906] usb 6-1: config 0 descriptor?? [ 1070.523086][ T5906] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1070.585137][ T5906] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1070.631620][ T5906] usb 6-1: USB disconnect, device number 74 [ 1072.326242][T18417] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1073.188985][ T5821] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1073.219569][T16028] usb 3-1: USB disconnect, device number 17 [ 1073.234408][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3195'. [ 1073.278987][T18428] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3195'. [ 1073.370726][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 1073.384937][ T5821] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 1073.397693][ T5821] usb 2-1: config 4 has no interface number 0 [ 1073.404785][ T5821] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.416652][ T5821] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.427237][ T5821] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1073.436736][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.459510][ T5821] hub 2-1:4.128: USB hub found [ 1073.665867][ T5821] hub 2-1:4.128: 2 ports detected [ 1073.665933][ T5821] hub 2-1:4.128: Using single TT (err -22) [ 1073.978367][ T5821] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 1074.013354][ T5821] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 1074.224968][ T5821] usb 2-1: USB disconnect, device number 99 [ 1074.519215][T18455] FAULT_INJECTION: forcing a failure. [ 1074.519215][T18455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.575478][T18455] CPU: 1 UID: 0 PID: 18455 Comm: syz.5.3204 Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.575510][T18455] Tainted: [L]=SOFTLOCKUP [ 1074.575517][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1074.575529][T18455] Call Trace: [ 1074.575538][T18455] [ 1074.575547][T18455] dump_stack_lvl+0xe8/0x150 [ 1074.575591][T18455] should_fail_ex+0x412/0x560 [ 1074.575620][T18455] strncpy_from_user+0x36/0x2b0 [ 1074.575648][T18455] do_getname+0x77/0x250 [ 1074.575673][T18455] user_path_at+0x2a/0x160 [ 1074.575702][T18455] __se_sys_mount+0x2dc/0x420 [ 1074.575732][T18455] ? __pfx___se_sys_mount+0x10/0x10 [ 1074.575763][T18455] ? __x64_sys_mount+0x20/0xc0 [ 1074.575788][T18455] do_syscall_64+0x14d/0xf80 [ 1074.575815][T18455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.575836][T18455] ? trace_irq_disable+0x37/0x100 [ 1074.575861][T18455] ? clear_bhb_loop+0x40/0x90 [ 1074.575886][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.575906][T18455] RIP: 0033:0x7f69bdf9bf79 [ 1074.575926][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.575944][T18455] RSP: 002b:00007f69bedd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1074.575966][T18455] RAX: ffffffffffffffda RBX: 00007f69be215fa0 RCX: 00007f69bdf9bf79 [ 1074.575981][T18455] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 1074.575995][T18455] RBP: 00007f69bedd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.576008][T18455] R10: 0000000001808c2a R11: 0000000000000246 R12: 0000000000000001 [ 1074.576021][T18455] R13: 00007f69be216038 R14: 00007f69be215fa0 R15: 00007f69be33fa48 [ 1074.576053][T18455] [ 1075.472812][T18473] batman_adv: batadv0: Adding interface: gretap1 [ 1075.485030][T18473] batman_adv: batadv0: Interface activated: gretap1 [ 1075.521489][ T5884] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1075.679062][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 1075.688441][ T5884] usb 2-1: config 123 interface 0 has no altsetting 0 [ 1075.700174][ T5884] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice=e5.51 [ 1075.709772][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.725146][ T5884] usb 2-1: Product: syz [ 1075.735891][ T5884] usb 2-1: Manufacturer: syz [ 1075.741857][ T5884] usb 2-1: SerialNumber: syz [ 1075.787116][ T5821] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1075.953851][ T5821] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1075.968916][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.990463][ T5821] usb 6-1: Product: syz [ 1076.005043][ T5821] usb 6-1: Manufacturer: syz [ 1076.012160][ T5821] usb 6-1: SerialNumber: syz [ 1076.039158][ T5821] usb 6-1: config 0 descriptor?? [ 1076.083964][T18480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.122104][T16741] Bluetooth: hci4: urb ffff888027cdc800 submission failed (2) [ 1076.139573][T18480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.711395][ T5821] IPVS: starting estimator thread 0... [ 1076.798906][T18488] IPVS: using max 29 ests per chain, 69600 per kthread [ 1077.138821][T16741] Bluetooth: hci5: command 0x0406 tx timeout [ 1078.228845][ T5884] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 1078.250840][ T5884] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1078.288863][ T5821] usb 6-1: USB disconnect, device number 75 [ 1078.338679][ T5884] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 1078.364128][ T5884] usb 2-1: media controller created [ 1078.455834][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1078.558214][ T5884] usb 2-1: selecting invalid altsetting 1 [ 1078.576279][ T5884] set interface failed [ 1078.576726][ T5884] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1078.606466][ T5884] error writing reg: 0xff, val: 0x00 [ 1078.890494][ T5884] dvb_usb_mxl111sf 2-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1078.952393][ T5884] usb 2-1: USB disconnect, device number 100 [ 1079.687212][T18516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3220'. [ 1079.696990][T18516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3220'. [ 1082.046794][T18537] program syz.0.3227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1082.078551][T18537] openvswitch: netlink: Flow key attr not present in new flow. [ 1082.091127][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1082.479412][T12536] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1082.541444][T18554] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1082.648239][T12536] usb 2-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1082.661735][T18558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3233'. [ 1082.672208][T12536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.682996][T12536] usb 2-1: Product: syz [ 1082.743152][T12536] usb 2-1: Manufacturer: syz [ 1082.753037][T12536] usb 2-1: SerialNumber: syz [ 1082.776548][T12536] usb 2-1: config 0 descriptor?? [ 1082.793483][T12536] f81232 2-1:0.0: f81232 converter detected [ 1082.935369][T12536] usb 2-1: f81232 converter now attached to ttyUSB0 [ 1083.018400][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1083.028474][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1083.116272][T18566] loop6: detected capacity change from 0 to 2640 [ 1083.190234][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1083.229152][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1083.238876][ T42] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1083.257188][ T8467] buffer_io_error: 5 callbacks suppressed [ 1083.257208][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.312509][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1083.353975][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1083.423265][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.438901][T18568] loop6: detected capacity change from 2640 to 524288000 [ 1083.457179][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.480599][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.507948][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.529020][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 1083.542838][ T42] usb 3-1: config 0 has no interfaces? [ 1083.551712][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1083.567178][ T42] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1083.581647][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.600072][ T42] usb 3-1: Manufacturer: syz [ 1083.606515][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.631892][ T42] usb 3-1: config 0 descriptor?? [ 1083.641874][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.664911][T12536] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1083.699605][ T8467] ldm_validate_partition_table(): Disk read failed. [ 1083.726519][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.736287][ T8467] Buffer I/O error on dev loop6, logical block 0, async page read [ 1083.756830][ T8467] Dev loop6: unable to read RDB block 0 [ 1083.763443][ T8467] loop6: unable to read partition table [ 1083.790156][T18566] ldm_validate_partition_table(): Disk read failed. [ 1083.805875][T18566] Dev loop6: unable to read RDB block 0 [ 1083.818236][T18566] loop6: unable to read partition table [ 1083.823573][T12536] usb 6-1: config 0 has an invalid interface number: 197 but max is 4 [ 1083.946592][T18566] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 1084.006002][ T42] IPVS: starting estimator thread 0... [ 1084.130679][T12536] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.139305][T18576] IPVS: using max 38 ests per chain, 91200 per kthread [ 1084.155648][ T5906] usb 2-1: USB disconnect, device number 101 [ 1084.161962][T12536] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1084.175723][ T5906] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 1084.190605][T12536] usb 6-1: config 0 has no interface number 0 [ 1084.201860][ T5906] f81232 2-1:0.0: device disconnected [ 1084.210218][T12536] usb 6-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1084.247475][T12536] usb 6-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1084.280684][T12536] usb 6-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1084.366791][T12536] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1084.377731][T12536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.404077][T12536] usb 6-1: Product: syz [ 1084.426264][T12536] usb 6-1: Manufacturer: syz [ 1084.437923][T12536] usb 6-1: SerialNumber: syz [ 1084.471891][T12536] usb 6-1: config 0 descriptor?? [ 1084.505807][T18571] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1084.734664][T18571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.769416][T18571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.851678][ T5884] usb 6-1: USB disconnect, device number 76 [ 1085.767394][T18594] FAULT_INJECTION: forcing a failure. [ 1085.767394][T18594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.866225][T18594] CPU: 1 UID: 0 PID: 18594 Comm: syz.5.3242 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.866259][T18594] Tainted: [L]=SOFTLOCKUP [ 1085.866267][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1085.866280][T18594] Call Trace: [ 1085.866289][T18594] [ 1085.866299][T18594] dump_stack_lvl+0xe8/0x150 [ 1085.866332][T18594] should_fail_ex+0x412/0x560 [ 1085.866362][T18594] _copy_from_user+0x2d/0xb0 [ 1085.866392][T18594] ___sys_sendmsg+0x1c6/0x360 [ 1085.866416][T18594] ? __lock_acquire+0x6b5/0x2cf0 [ 1085.866443][T18594] ? __pfx____sys_sendmsg+0x10/0x10 [ 1085.866498][T18594] ? __fget_files+0x2a/0x420 [ 1085.866520][T18594] ? __fget_files+0x3a0/0x420 [ 1085.866553][T18594] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1085.866580][T18594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1085.866614][T18594] ? __pfx_ksys_write+0x10/0x10 [ 1085.866652][T18594] do_syscall_64+0x14d/0xf80 [ 1085.866678][T18594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.866699][T18594] ? trace_irq_disable+0x37/0x100 [ 1085.866723][T18594] ? clear_bhb_loop+0x40/0x90 [ 1085.866748][T18594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.866769][T18594] RIP: 0033:0x7f69bdf9bf79 [ 1085.866789][T18594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.866806][T18594] RSP: 002b:00007f69bedd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.866826][T18594] RAX: ffffffffffffffda RBX: 00007f69be215fa0 RCX: 00007f69bdf9bf79 [ 1085.866840][T18594] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1085.866851][T18594] RBP: 00007f69bedd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.866862][T18594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.866871][T18594] R13: 00007f69be216038 R14: 00007f69be215fa0 R15: 00007f69be33fa48 [ 1085.866901][T18594] [ 1086.410794][ T5906] usb 3-1: USB disconnect, device number 18 [ 1086.604066][T18610] __nla_validate_parse: 72 callbacks suppressed [ 1086.604082][T18610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3248'. [ 1086.861915][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3248'. [ 1088.021067][T18629] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3252'. [ 1088.040839][T18629] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1088.595154][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3253'. [ 1088.604749][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3253'. [ 1089.677358][T18649] netlink: 'syz.2.3258': attribute type 10 has an invalid length. [ 1089.696073][T18649] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1089.728846][T10123] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1089.868830][T12536] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1089.881390][T10123] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1089.907261][T10123] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1089.948781][T10123] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1089.997713][T10123] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1090.022356][T10123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.043178][T12536] usb 2-1: Using ep0 maxpacket: 32 [ 1090.053294][T10123] usb 5-1: Product: syz [ 1090.058029][T10123] usb 5-1: Manufacturer: syz [ 1090.069603][T12536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.079414][T10123] usb 5-1: SerialNumber: syz [ 1090.081962][T12536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.107817][T12536] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1090.120901][T12536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.139476][T12536] usb 2-1: config 0 descriptor?? [ 1090.167170][T12536] hub 2-1:0.0: USB hub found [ 1090.364870][T12536] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1090.416267][T10123] usb 5-1: USB disconnect, device number 6 [ 1090.456297][ T7863] udevd[7863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1090.793928][T12536] hid-generic 0003:046D:C31C.0020: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 1091.032692][T18670] gre1: entered promiscuous mode [ 1091.037783][T18670] gre1: entered allmulticast mode [ 1091.448824][T18646] usb 2-1: reset high-speed USB device number 102 using dummy_hcd [ 1091.844731][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3270'. [ 1091.859875][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3270'. [ 1092.006420][ T29] audit: type=1326 audit(1770990424.258:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1092.127179][ T29] audit: type=1326 audit(1770990424.258:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1092.131271][T18693] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3271'. [ 1092.179422][ T5821] usb 2-1: USB disconnect, device number 102 [ 1092.183056][T18646] usbhid 2-1:0.0: reset_resume error -19 [ 1092.522468][ T29] audit: type=1326 audit(1770990424.258:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1092.586839][ T29] audit: type=1326 audit(1770990424.328:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1092.664358][ T29] audit: type=1326 audit(1770990424.328:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1092.716275][ T29] audit: type=1326 audit(1770990424.368:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1092.800440][ T29] audit: type=1326 audit(1770990424.378:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1092.947678][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1092.957540][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1092.969348][ T29] audit: type=1326 audit(1770990424.378:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1093.027159][ T29] audit: type=1326 audit(1770990424.388:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1093.094350][ T29] audit: type=1326 audit(1770990424.578:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1093.618209][T18712] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3277'. [ 1094.157067][T18728] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1094.378841][T10123] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1094.618803][T10123] usb 2-1: Using ep0 maxpacket: 8 [ 1094.755402][T10123] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 1094.769658][T10123] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.782660][T10123] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 1094.798872][T10123] usb 2-1: config 127 has no interface number 0 [ 1094.812058][T10123] usb 2-1: config 127 interface 171 has no altsetting 0 [ 1094.843909][T10123] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1094.982376][T10123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.029186][T10123] usb 2-1: Product: syz [ 1095.039082][T10123] usb 2-1: Manufacturer: syz [ 1095.049069][T10123] usb 2-1: SerialNumber: syz [ 1095.837051][T10123] usb 2-1: USB disconnect, device number 103 [ 1096.255045][T18748] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3288'. [ 1096.264482][T18748] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3288'. [ 1096.759573][T15888] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1097.004858][T15888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.015848][T15888] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1097.056500][T16028] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1097.200284][T15888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1097.216655][T15888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1097.232816][T15888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1097.262423][T15888] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1097.272898][T15888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1097.284629][T15888] usb 2-1: Product: syz [ 1097.296302][T15888] usb 2-1: Manufacturer: syz [ 1097.305802][T15888] usb 2-1: SerialNumber: syz [ 1097.319515][T15888] usb 2-1: config 0 descriptor?? [ 1097.348877][T16028] usb 3-1: device descriptor read/64, error -71 [ 1097.535631][T15888] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1097.557467][T15888] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1097.591754][T16028] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1097.604472][T15888] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 1097.632704][T15888] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1097.862586][T16028] usb 3-1: device descriptor read/64, error -71 [ 1097.878877][T15888] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1097.957986][T15888] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1097.995895][T16028] usb usb3-port1: attempt power cycle [ 1098.010498][T15888] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1098.033069][T15888] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1098.059566][T15888] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1098.075653][T18765] netlink: 'syz.0.3294': attribute type 10 has an invalid length. [ 1098.092433][T15888] usb 2-1: USB disconnect, device number 104 [ 1098.102301][T18765] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3294'. [ 1098.364169][T16028] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1098.389094][T12536] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1098.401805][T16028] usb 3-1: device descriptor read/8, error -71 [ 1098.691411][T12536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1098.711161][T15888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1098.711160][T12536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1098.711193][T12536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1098.740050][T16028] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1098.769414][T16028] usb 3-1: device descriptor read/8, error -71 [ 1098.786314][T12536] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1098.805300][T12536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.822849][T12536] usb 6-1: Product: syz [ 1098.832660][T12536] usb 6-1: Manufacturer: syz [ 1098.841210][T12536] usb 6-1: SerialNumber: syz [ 1098.854740][T12536] usb 6-1: config 0 descriptor?? [ 1098.879097][T16028] usb usb3-port1: unable to enumerate USB device [ 1098.912282][T15888] usb 5-1: Using ep0 maxpacket: 8 [ 1098.925629][T15888] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 1098.945533][T15888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.105741][T15888] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1099.304624][T18769] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3296'. [ 1099.345462][T12536] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1099.363772][T15888] usb 5-1: config 0 has no interface number 0 [ 1099.376564][T12536] usb 6-1: USB disconnect, device number 77 [ 1099.397674][T15888] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1099.414369][T15888] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1099.445696][T15888] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 1099.475336][T15888] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1099.506515][T15888] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1099.518790][T15888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.534909][T15888] usb 5-1: Product: syz [ 1099.547150][T15888] usb 5-1: Manufacturer: syz [ 1099.564001][T15888] usb 5-1: SerialNumber: syz [ 1099.578533][T15888] usb 5-1: config 0 descriptor?? [ 1099.593690][T18780] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1099.606461][T15888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1099.781163][T12536] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1099.806667][T15888] usb 5-1: USB disconnect, device number 7 [ 1099.949396][T12536] usb 6-1: Using ep0 maxpacket: 32 [ 1099.959914][T12536] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1099.969282][T12536] usb 6-1: config 40 has an invalid interface number: 160 but max is 0 [ 1099.977928][T12536] usb 6-1: config 40 has an invalid descriptor of length 115, skipping remainder of the config [ 1099.990171][T12536] usb 6-1: config 40 has no interface number 0 [ 1099.997022][T12536] usb 6-1: config 40 interface 160 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1100.011759][T12536] usb 6-1: config 40 interface 160 has no altsetting 0 [ 1100.021301][T12536] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=74.b7 [ 1100.030900][T12536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.039221][T12536] usb 6-1: Product: syz [ 1100.043501][T12536] usb 6-1: Manufacturer: syz [ 1100.048490][T12536] usb 6-1: SerialNumber: syz [ 1100.188859][T15888] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1100.238852][T16028] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1100.270877][T12536] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1100.342510][T15888] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.367844][T12536] snd-usb-audio 6-1:40.160: probe with driver snd-usb-audio failed with error -2 [ 1100.374163][T15888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1100.394048][T15888] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1100.403377][T12536] usb 6-1: USB disconnect, device number 78 [ 1100.426909][T15888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.427345][T16028] usb 3-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 1100.454739][T15888] usb 2-1: config 0 descriptor?? [ 1100.472715][T16028] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1100.485293][T16028] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1100.494876][T16028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.505954][T16028] usb 3-1: Product: syz [ 1100.516851][ T7867] udevd[7867]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:40.160/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1100.535307][T16028] usb 3-1: Manufacturer: syz [ 1100.549019][T16028] usb 3-1: SerialNumber: syz [ 1100.566103][T16028] usb 3-1: config 0 descriptor?? [ 1101.082038][T18802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1101.092696][T18802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1101.119597][T15888] elecom 0003:056E:00FB.0021: hidraw0: USB HID v0.02 Device [HID 056e:00fb] on usb-dummy_hcd.1-1/input0 [ 1101.310067][T18790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.322859][T18790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.338347][ T5821] usb 2-1: USB disconnect, device number 105 [ 1101.432214][T18810] netlink: 'syz.5.3309': attribute type 10 has an invalid length. [ 1101.440391][T18810] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3309'. [ 1101.950739][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1101.950754][ T29] audit: type=1326 audit(1770990434.198:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.001346][ T29] audit: type=1326 audit(1770990434.208:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.090745][ T29] audit: type=1326 audit(1770990434.208:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.130451][ T29] audit: type=1326 audit(1770990434.208:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.156783][ T29] audit: type=1326 audit(1770990434.208:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.180685][ T29] audit: type=1326 audit(1770990434.208:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.223641][ T29] audit: type=1326 audit(1770990434.238:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.314646][ T29] audit: type=1326 audit(1770990434.238:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.340944][ T29] audit: type=1326 audit(1770990434.238:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.365553][ T29] audit: type=1326 audit(1770990434.238:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18787 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d19bf79 code=0x7ffc0000 [ 1102.808072][T18839] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3316'. [ 1103.263029][T12536] usb 3-1: USB disconnect, device number 23 [ 1103.568035][T18853] netlink: 'syz.2.3320': attribute type 10 has an invalid length. [ 1103.589545][T18853] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3320'. [ 1103.998843][T15888] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1104.158916][T15888] usb 2-1: Using ep0 maxpacket: 32 [ 1104.173641][T15888] usb 2-1: no configurations [ 1104.178440][T15888] usb 2-1: can't read configurations, error -22 [ 1104.738951][T15888] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1104.981494][T15888] usb 2-1: Using ep0 maxpacket: 32 [ 1105.027741][T15888] usb 2-1: no configurations [ 1105.038106][T15888] usb 2-1: can't read configurations, error -22 [ 1105.052257][T15888] usb usb2-port1: attempt power cycle [ 1105.438832][T15888] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1105.469509][T15888] usb 2-1: Using ep0 maxpacket: 32 [ 1105.475818][T15888] usb 2-1: no configurations [ 1105.481935][T15888] usb 2-1: can't read configurations, error -22 [ 1105.699541][T15888] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1105.740101][T15888] usb 2-1: Using ep0 maxpacket: 32 [ 1105.761422][T15888] usb 2-1: no configurations [ 1105.766328][T15888] usb 2-1: can't read configurations, error -22 [ 1105.787164][T15888] usb usb2-port1: unable to enumerate USB device [ 1105.879123][T10123] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1105.931737][T18894] xfrm1: entered promiscuous mode [ 1105.936860][T18894] xfrm1: entered allmulticast mode [ 1106.041089][T10123] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1106.052188][T10123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.066594][T10123] usb 6-1: config 0 descriptor?? [ 1106.094149][T10123] cp210x 6-1:0.0: cp210x converter detected [ 1106.218916][T15888] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1106.414410][T15888] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1106.422769][T15888] usb 3-1: config 0 has no interface number 0 [ 1106.431007][T15888] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1106.455618][T15888] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 4 [ 1106.477177][T15888] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1106.489345][T15888] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1106.508481][T15888] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1106.524144][T15888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.551983][T15888] usb 3-1: config 0 descriptor?? [ 1106.564420][T18896] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1106.580606][T15888] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1106.588500][T15888] keyspan 3-1:0.11: unsupported endpoint type 1 [ 1106.606705][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1106.618869][T12536] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1106.635448][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1106.653272][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1106.667636][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1106.682030][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1106.697895][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1106.705798][T10123] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 1106.714434][T10123] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 1106.759173][T15888] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1106.774444][T10123] usb 6-1: cp210x converter now attached to ttyUSB2 [ 1106.796112][T12536] usb 5-1: Using ep0 maxpacket: 16 [ 1106.841252][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1106.847713][T12536] usb 5-1: config 0 has no interfaces? [ 1106.873275][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1106.884228][T12536] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1106.898850][T12536] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1106.918808][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1106.923973][T12536] usb 5-1: Manufacturer: syz [ 1106.948329][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1106.956795][T18904] netlink: 'syz.1.3334': attribute type 10 has an invalid length. [ 1106.967777][T12536] usb 5-1: config 0 descriptor?? [ 1106.993647][T18904] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3334'. [ 1107.008371][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 1107.025221][T15888] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1107.068658][T15888] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1107.235253][T18907] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3335'. [ 1107.432518][T18901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.447471][T18901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.455794][T12536] usb 3-1: USB disconnect, device number 24 [ 1108.476394][T12536] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1108.511945][T12536] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1108.525200][T12536] keyspan 3-1:0.11: device disconnected [ 1108.581216][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1108.581233][ T29] audit: type=1326 audit(1770990440.838:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18917 comm="syz.2.3340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb94d19bf79 code=0x0 [ 1108.655310][T16028] usb 6-1: USB disconnect, device number 79 [ 1108.664226][T16028] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 1108.697426][T16028] cp210x 6-1:0.0: device disconnected [ 1108.971521][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3342'. [ 1108.998829][T12536] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1109.157835][T18932] loop4: detected capacity change from 0 to 1 [ 1109.168434][ T7863] Dev loop4: unable to read RDB block 1 [ 1109.174437][ T7863] loop4: unable to read partition table [ 1109.180390][T12536] usb 3-1: Using ep0 maxpacket: 8 [ 1109.188564][T12536] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1109.197294][T12536] usb 3-1: config 0 has no interface number 0 [ 1109.204017][ T7863] loop4: partition table beyond EOD, truncated [ 1109.215431][T18932] Dev loop4: unable to read RDB block 1 [ 1109.222343][T12536] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1109.233986][T18932] loop4: unable to read partition table [ 1109.240877][T12536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.251058][T12536] usb 3-1: Product: syz [ 1109.255557][T18932] loop4: partition table beyond EOD, truncated [ 1109.266144][T12536] usb 3-1: Manufacturer: syz [ 1109.277433][T12536] usb 3-1: SerialNumber: syz [ 1109.283161][T18932] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1109.306552][T12536] usb 3-1: config 0 descriptor?? [ 1109.523941][T12536] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1109.538818][T12536] uvcvideo 3-1:0.31: Failed to initialize entity for entity 32774 [ 1109.552717][T12536] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1109.755918][T18940] netlink: 'syz.5.3345': attribute type 10 has an invalid length. [ 1109.777173][T18924] fuse: Bad value for 'fd' [ 1109.796642][T18940] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3345'. [ 1110.319367][T15888] usb 5-1: USB disconnect, device number 8 [ 1110.337058][ T5189] Dev loop4: unable to read RDB block 1 [ 1110.351290][ T5189] loop4: unable to read partition table [ 1110.387266][ T5189] loop4: partition table beyond EOD, truncated [ 1110.499194][ T5189] Dev loop4: unable to read RDB block 1 [ 1110.510265][ T5189] loop4: unable to read partition table [ 1110.532974][ T5189] loop4: partition table beyond EOD, truncated [ 1110.586614][T18953] loop5: detected capacity change from 0 to 7 [ 1110.593692][T18953] Dev loop5: unable to read RDB block 7 [ 1110.599614][T18953] loop5: unable to read partition table [ 1110.640164][T18953] loop5: partition table beyond EOD, truncated [ 1110.660031][T18953] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1110.804210][ T5189] Dev loop4: unable to read RDB block 1 [ 1110.848094][ T5189] loop4: unable to read partition table [ 1110.861414][ T5189] loop4: partition table beyond EOD, truncated [ 1111.078381][ T5189] Dev loop4: unable to read RDB block 1 [ 1111.102319][ T5189] loop4: unable to read partition table [ 1111.108149][ T5189] loop4: partition table beyond EOD, truncated [ 1111.992974][ T5906] usb 3-1: USB disconnect, device number 25 [ 1112.681453][T18991] netlink: 'syz.1.3360': attribute type 10 has an invalid length. [ 1112.716090][T18991] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3360'. [ 1112.965424][ T29] audit: type=1326 audit(1770990445.208:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1113.028966][ T29] audit: type=1326 audit(1770990445.208:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1113.252710][T12536] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1113.288778][ T29] audit: type=1326 audit(1770990445.208:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1113.438750][T12536] usb 2-1: Using ep0 maxpacket: 32 [ 1113.470418][ T29] audit: type=1326 audit(1770990445.218:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1113.476603][T12536] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1113.591209][T12536] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1113.618838][ T29] audit: type=1326 audit(1770990445.218:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1113.638835][T12536] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1113.697883][ T29] audit: type=1326 audit(1770990445.218:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1113.718585][T12536] usb 2-1: Product: syz [ 1113.776492][ T29] audit: type=1326 audit(1770990445.218:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1113.783214][T12536] usb 2-1: Manufacturer: syz [ 1113.906164][ T29] audit: type=1326 audit(1770990445.218:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1113.908823][T12536] usb 2-1: SerialNumber: syz [ 1114.049726][T12536] usb 2-1: config 0 descriptor?? [ 1114.050598][ T29] audit: type=1326 audit(1770990445.218:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1114.079970][T18993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1114.185549][ T29] audit: type=1326 audit(1770990445.218:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f970435c84e code=0x7ffc0000 [ 1114.238820][T16028] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1114.284605][ T29] audit: type=1326 audit(1770990445.218:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f970439bc0b code=0x7ffc0000 [ 1114.382433][ T29] audit: type=1326 audit(1770990445.218:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f970439bc0b code=0x7ffc0000 [ 1114.431734][T16028] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1114.449342][T16028] usb 5-1: not running at top speed; connect to a high speed hub [ 1114.459837][T16028] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 1114.477441][ T29] audit: type=1326 audit(1770990445.248:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f970439bc0b code=0x7ffc0000 [ 1114.480111][T16028] usb 5-1: config 129 has no interface number 0 [ 1114.532308][ T29] audit: type=1326 audit(1770990445.248:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18992 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f970439bc0b code=0x7ffc0000 [ 1114.572026][T16028] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1114.610074][T16028] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1114.647976][T16028] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1114.683814][T16028] usb 5-1: config 129 interface 28 has no altsetting 0 [ 1114.713522][T16028] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1114.743001][T16028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.761330][T16028] usb 5-1: Product: ㋡嬺땱驸쫟⒱膷ᾂ왏靫縿뎿鲧긯癩䞮ꓕ瘍荂흉깮᳨놛뼦겺木猻쩀ꪌ졦ꛃꢎ┾細ꆴ㪂뽞屶垤힦빱ꚭ＿짳릊죸襭⸢㳤錇⯔ꛃୖࠨ菃牅뙥廠姾Դ펚斗﷚럧㔆䩔銠︴鄲䨰܋훖憻䐍婜뢼웃䭢錀ꄻ跷씾윱㜳窆ց浩យᯤᔢ渗ꉂ쿙ⳁ焇얿띔匄櫭⫈ྰ⌅ձﰒ뻏ꍡ᱐㜂阈ዜ뒝 [ 1114.890635][T16028] usb 5-1: Manufacturer: ц [ 1114.918022][T16028] usb 5-1: SerialNumber: ᰉ [ 1114.941878][T18998] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1115.098647][T19020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3368'. [ 1115.506495][T16028] etas_es58x 5-1:129.28: Starting ц ㋡嬺땱驸쫟⒱膷ᾂ왏靫縿뎿鲧긯癩䞮ꓕ瘍荂흉깮᳨놛뼦겺木猻쩀ꪌ졦ꛃꢎ┾細ꆴ㪂뽞屶垤힦빱ꚭ＿짳릊죸襭⸢㳤錇⯔ꛃୖࠨ菃牅뙥廠姾Դ펚斗﷚럧㔆䩔銠︴鄲䨰܋훖憻䐍婜뢼웃䭢錀ꄻ跷씾윱㜳窆ց浩យᯤᔢ渗ꉂ쿙ⳁ焇얿띔匄櫭⫈ྰ⌅ձﰒ뻏ꍡ᱐㜂阈ዜ뒝 (Serial Number ᰉ) [ 1115.560516][T16028] etas_es58x 5-1:129.28: could not retrieve the product info string [ 1115.586572][T16028] usb 5-1: USB disconnect, device number 9 [ 1115.600516][T16028] etas_es58x 5-1:129.28: Disconnecting ц ㋡嬺땱驸쫟⒱膷ᾂ왏靫縿뎿鲧긯癩䞮ꓕ瘍荂흉깮᳨놛뼦겺木猻쩀ꪌ졦ꛃꢎ┾細ꆴ㪂뽞屶垤힦빱ꚭ＿짳릊죸襭⸢㳤錇⯔ꛃୖࠨ菃牅뙥廠姾Դ펚斗﷚럧㔆䩔銠︴鄲䨰܋훖憻䐍婜뢼웃䭢錀ꄻ跷씾윱㜳窆ց浩យᯤᔢ渗ꉂ쿙ⳁ焇얿띔匄櫭⫈ྰ⌅ձﰒ뻏ꍡ᱐㜂阈ዜ뒝 [ 1115.691491][T19025] loop4: detected capacity change from 0 to 1 [ 1115.707667][T19026] netlink: 'syz.2.3371': attribute type 10 has an invalid length. [ 1115.717751][T19025] Dev loop4: unable to read RDB block 1 [ 1115.727377][T19026] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3371'. [ 1115.737538][T19025] loop4: unable to read partition table [ 1115.745476][T19025] loop4: partition table beyond EOD, truncated [ 1115.779053][ T5821] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1115.829551][T19025] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1115.930780][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 1116.001146][ T5821] usb 6-1: config 0 has no interfaces? [ 1116.067005][ T5189] Dev loop4: unable to read RDB block 1 [ 1116.081425][ T5189] loop4: unable to read partition table [ 1116.087320][ T5189] loop4: partition table beyond EOD, truncated [ 1116.119868][ T5821] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1116.138877][ T5821] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1116.157280][ T5821] usb 6-1: Manufacturer: syz [ 1116.264510][ T5821] usb 6-1: config 0 descriptor?? [ 1116.331600][T10123] usb 2-1: USB disconnect, device number 110 [ 1117.126555][ T5189] Dev loop4: unable to read RDB block 1 [ 1117.158358][ T5189] loop4: unable to read partition table [ 1117.182749][ T5189] loop4: partition table beyond EOD, truncated [ 1117.712923][T10123] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1117.871147][T10123] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.921661][T10123] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1117.967080][T10123] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1118.006279][T10123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.039057][T16741] Bluetooth: hci0: command 0x0406 tx timeout [ 1118.073035][T10123] usb 2-1: Product: syz [ 1118.088142][T10123] usb 2-1: Manufacturer: syz [ 1118.129758][T10123] usb 2-1: SerialNumber: syz [ 1118.149707][T10123] usb 2-1: config 0 descriptor?? [ 1118.168940][T12536] usb 6-1: USB disconnect, device number 80 [ 1118.377183][T19045] netlink: 24 bytes leftover after parsing attributes in process `vcan0'. [ 1118.406093][T19045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.480615][T19045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.528309][T19045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.579215][T19045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.599641][ T5189] Dev loop4: unable to read RDB block 1 [ 1118.626902][ T5189] loop4: unable to read partition table [ 1118.649791][ T5189] loop4: partition table beyond EOD, truncated [ 1118.690261][T19063] netlink: 'syz.5.3382': attribute type 10 has an invalid length. [ 1118.757441][T19063] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3382'. [ 1118.794722][T15888] usb 2-1: USB disconnect, device number 111 [ 1120.548868][T12536] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1120.613334][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 1120.613354][ T29] audit: type=1326 audit(1770990452.868:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1120.664032][ T29] audit: type=1326 audit(1770990452.868:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1120.688321][ T29] audit: type=1326 audit(1770990452.908:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1120.715971][ T29] audit: type=1326 audit(1770990452.908:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1120.761719][ T29] audit: type=1326 audit(1770990452.908:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1120.804966][T12536] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1120.824486][T12536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.832887][T12536] usb 6-1: Product: syz [ 1120.837085][T12536] usb 6-1: Manufacturer: syz [ 1120.842532][ T29] audit: type=1326 audit(1770990452.908:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1120.875001][T19108] netlink: 'syz.4.3396': attribute type 10 has an invalid length. [ 1120.883797][T12536] usb 6-1: SerialNumber: syz [ 1120.888798][T19108] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3396'. [ 1120.901752][T12536] usb 6-1: config 0 descriptor?? [ 1120.908669][T12536] ch341 6-1:0.0: ch341-uart converter detected [ 1120.939681][ T29] audit: type=1326 audit(1770990452.908:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1120.975495][ T29] audit: type=1326 audit(1770990452.908:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1121.033939][ T29] audit: type=1326 audit(1770990452.918:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1121.066086][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.073141][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.080417][T19110] loop4: detected capacity change from 0 to 1 [ 1121.090211][T19110] Dev loop4: unable to read RDB block 1 [ 1121.095839][T19110] loop4: unable to read partition table [ 1121.102772][T19110] loop4: partition table beyond EOD, truncated [ 1121.126703][ T29] audit: type=1326 audit(1770990452.918:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1121.149661][T19110] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1121.398906][T16028] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1121.410021][ T5189] Dev loop4: unable to read RDB block 1 [ 1121.415660][ T5189] loop4: unable to read partition table [ 1121.422036][ T5189] loop4: partition table beyond EOD, truncated [ 1121.519645][T19112] netlink: 'syz.5.3393': attribute type 1 has an invalid length. [ 1121.538804][ T5821] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1121.568873][T16028] usb 3-1: Using ep0 maxpacket: 8 [ 1121.577039][T19104] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1121.597987][T16028] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1121.623790][T19124] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3393'. [ 1121.635580][T16028] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1121.647227][T16028] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1121.659125][T19104] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1121.684151][T16028] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1121.704937][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 1121.718851][T16028] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1121.726971][T19104] bond1: (slave vxcan3): making interface the new active one [ 1121.736806][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.761066][T16028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.771185][ T5821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.783499][T19104] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 1121.900774][ T5821] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.931508][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.987521][ T5821] usb 2-1: Product: syz [ 1121.995856][ T5821] usb 2-1: Manufacturer: syz [ 1122.006868][ T5821] usb 2-1: SerialNumber: syz [ 1122.030431][T19112] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1122.063897][T19112] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 1122.084966][T12536] usb 6-1: failed to send control message: -71 [ 1122.101571][T12536] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1122.127830][T12536] usb 6-1: USB disconnect, device number 81 [ 1122.144085][T19110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.156853][T16028] usb 3-1: usb_control_msg returned -71 [ 1122.163115][T16028] usbtmc 3-1:16.0: can't read capabilities [ 1122.191208][T12536] ch341 6-1:0.0: device disconnected [ 1122.200678][T16028] usb 3-1: USB disconnect, device number 26 [ 1122.450970][T19119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.464830][T19119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.489009][T19119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.507292][T19119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.541937][T19119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.558393][T19119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.684374][T19119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.756336][T19119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.791833][ T5821] usb 2-1: 0:2 : does not exist [ 1123.082766][T19145] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1123.086338][ T5821] usb 2-1: USB disconnect, device number 112 [ 1123.284756][ T7863] udevd[7863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.402581][T19153] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1124.659451][T16028] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1124.898593][T16028] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1124.907876][T16028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.919626][T16028] usb 3-1: config 0 descriptor?? [ 1125.173040][T16028] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 1125.239427][T16028] hackrf 3-1:0.0: Could not detect board [ 1125.253577][T16028] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 1125.293448][T16028] usb 3-1: USB disconnect, device number 27 [ 1126.251882][T15888] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1126.484148][T15888] usb 2-1: Using ep0 maxpacket: 32 [ 1126.524427][T15888] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1126.552042][T15888] usb 2-1: config 0 has no interface number 0 [ 1126.566872][T15888] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1126.583074][T15888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.601326][T15888] usb 2-1: Product: syz [ 1126.629224][T15888] usb 2-1: Manufacturer: syz [ 1126.638850][T15888] usb 2-1: SerialNumber: syz [ 1126.668407][T15888] usb 2-1: config 0 descriptor?? [ 1126.767196][ T42] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1126.791666][T15888] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1127.086341][ T42] usb 6-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 1127.126500][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1127.145690][ T42] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1127.183295][ T42] usb 6-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 1127.233265][T15888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1127.246550][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1127.284547][ T42] usb 6-1: SerialNumber: syz [ 1127.291827][T15888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1127.344108][ T42] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1127.367395][ T42] cdc_ncm 6-1:1.0: bind() failure [ 1127.643109][T19195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.775570][T19195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.902990][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1127.912751][T16028] usb 2-1: USB disconnect, device number 113 [ 1127.992154][T16028] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1128.020899][T16028] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1128.040048][T16028] quatech2 2-1:0.51: device disconnected [ 1128.173650][T19205] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1128.206371][T19208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1128.312280][T19211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3419'. [ 1129.431765][T19219] netlink: 'syz.4.3423': attribute type 27 has an invalid length. [ 1129.517375][T19219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.524854][T19219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.578295][ T5821] usb 6-1: USB disconnect, device number 82 [ 1129.668828][T15888] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1129.757345][T19219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.779181][T19219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.820556][T15888] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1129.831621][T15888] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1129.857057][T15888] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1129.876607][T15888] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1129.886437][T15888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.902346][T15888] usb 3-1: Product: syz [ 1129.910045][T15888] usb 3-1: Manufacturer: syz [ 1129.915360][T15888] usb 3-1: SerialNumber: syz [ 1129.941895][T19221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1129.951616][T19221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1130.026606][T19219] batman_adv: batadv0: Interface deactivated: gretap1 [ 1130.037596][T19219] xfrm1: left promiscuous mode [ 1130.042827][T19219] xfrm1: left allmulticast mode [ 1130.218642][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.238894][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.266066][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.336919][T11672] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.549065][T10123] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1130.798984][T10123] usb 2-1: Using ep0 maxpacket: 8 [ 1130.807161][T10123] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 1130.816053][T10123] usb 2-1: config 0 has no interface number 0 [ 1130.822254][T10123] usb 2-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1130.833424][T10123] usb 2-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1131.054331][T10123] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 1131.063896][T10123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.072100][T10123] usb 2-1: Product: syz [ 1131.076404][T10123] usb 2-1: Manufacturer: syz [ 1131.081306][T10123] usb 2-1: SerialNumber: syz [ 1131.092675][T10123] usb 2-1: config 0 descriptor?? [ 1131.142564][T10123] appletouch 2-1:0.154: Could not find int-in endpoint [ 1131.170057][T10123] appletouch 2-1:0.154: probe with driver appletouch failed with error -5 [ 1131.245281][T10123] usbhid 2-1:0.154: couldn't find an input interrupt endpoint [ 1131.734688][T15888] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4a:c0:b3:0e:be:c6 [ 1131.773895][ T5821] usb 2-1: USB disconnect, device number 114 [ 1131.808988][T15888] rtl8150 3-1:1.0: eth5: rtl8150 is detected [ 1131.867608][T15888] usb 3-1: USB disconnect, device number 28 [ 1131.993888][T19249] netlink: 'syz.1.3430': attribute type 13 has an invalid length. [ 1132.051784][T19249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1132.158539][T19257] netlink: 'syz.4.3433': attribute type 10 has an invalid length. [ 1132.169962][T10123] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1132.200406][T19257] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1132.352021][T10123] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 1132.386275][T10123] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.421127][T19268] program syz.0.3434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1132.429006][T10123] usb 6-1: config 0 has no interface number 0 [ 1132.436593][T10123] usb 6-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1132.454944][T10123] usb 6-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1132.478960][T10123] usb 6-1: config 0 interface 106 has no altsetting 0 [ 1132.487426][T10123] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1132.502704][T10123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.523210][T10123] usb 6-1: config 0 descriptor?? [ 1132.577079][T10123] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1132.586855][ T42] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1132.748816][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 1132.767556][ T42] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1132.791481][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.806365][ T42] usb 3-1: Product: syz [ 1132.816297][T19274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.828090][ T42] usb 3-1: Manufacturer: syz [ 1132.856914][ T42] usb 3-1: SerialNumber: syz [ 1132.871811][ T42] usb 3-1: config 0 descriptor?? [ 1132.893595][ T42] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1132.949434][T19274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.017091][T19274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.069859][T19274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.133487][T19274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.146373][T19274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.209583][T19279] ptrace attach of "./syz-executor exec"[17610] was attempted by "./syz-executor exec"[19279] [ 1133.261897][T19280] random: crng reseeded on system resumption [ 1133.451672][ T42] gspca_sq930x: reg_r 001f failed -110 [ 1133.457407][ T42] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 1133.699075][T17918] usb 6-1: Failed to submit usb control message: -110 [ 1133.706389][T17918] usb 6-1: unable to send the bmi data to the device: -110 [ 1133.783665][T17918] usb 6-1: unable to get target info from device [ 1133.790261][T17918] usb 6-1: could not get target info (-110) [ 1133.800421][T17918] usb 6-1: could not probe fw (-110) [ 1134.428875][T16028] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1134.580614][T16028] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1134.589651][T16028] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.600534][T16028] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1134.609619][T16028] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1134.624292][T16028] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 8.40 [ 1134.635220][T16028] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 1134.643376][T16028] usb 2-1: Product: syz [ 1134.653535][T16028] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1134.853262][T15888] usb 2-1: USB disconnect, device number 115 [ 1134.899667][T16028] usb 6-1: USB disconnect, device number 83 [ 1135.059239][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1135.298834][T16028] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1135.361548][T12536] usb 3-1: USB disconnect, device number 29 [ 1135.458909][T16028] usb 6-1: Using ep0 maxpacket: 16 [ 1135.472199][T16028] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1135.481597][ T5821] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1135.489341][T16028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.497447][T16028] usb 6-1: Product: syz [ 1135.501941][T16028] usb 6-1: Manufacturer: syz [ 1135.507126][T16028] usb 6-1: SerialNumber: syz [ 1135.520328][T16028] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1135.526792][T16028] r8152-cfgselector 6-1: config 0 descriptor?? [ 1135.648927][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 1135.656744][ T5821] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1135.665147][ T5821] usb 5-1: config 0 has no interface number 0 [ 1135.671471][ T5821] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1135.682466][ T5821] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1135.694167][ T5821] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1135.705798][ T5821] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1135.719034][ T5821] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1135.728288][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.738303][T19295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.748633][ T5821] usb 5-1: config 0 descriptor?? [ 1135.757735][T19295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.759645][T12536] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1135.784410][ T5821] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1135.918849][T12536] usb 3-1: Using ep0 maxpacket: 16 [ 1135.928007][T12536] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1135.937781][T12536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.945952][T12536] usb 3-1: Product: syz [ 1135.950325][T12536] usb 3-1: Manufacturer: syz [ 1135.954974][T12536] usb 3-1: SerialNumber: syz [ 1135.962324][T12536] usb 3-1: config 0 descriptor?? [ 1135.974403][T12536] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1135.981870][T19295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.995231][T19313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.005568][T19295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.014618][T19313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.207285][T16028] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1136.220110][T16028] r8152-cfgselector 6-1: bad CDC descriptors [ 1136.232615][T16028] r8152-cfgselector 6-1: USB disconnect, device number 84 [ 1136.375306][T12536] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1136.917874][T10123] usb 3-1: USB disconnect, device number 30 [ 1136.939883][T10123] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1136.949705][T10123] visor 3-1:0.0: device disconnected [ 1137.748859][T10123] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1137.827389][T19334] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3458'. [ 1137.899738][T10123] usb 2-1: Using ep0 maxpacket: 16 [ 1137.908186][T10123] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1138.084249][T10123] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.097205][T10123] usb 2-1: config 1 has no interface number 0 [ 1138.105118][T10123] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.118880][T10123] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1138.128575][T10123] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1138.138082][T10123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.147285][T12536] usb 5-1: USB disconnect, device number 10 [ 1138.196795][T12536] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1138.199220][T10123] usb 2-1: Product: syz [ 1138.216344][T10123] usb 2-1: Manufacturer: syz [ 1138.221672][T10123] usb 2-1: SerialNumber: syz [ 1138.458859][T10123] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 1138.492810][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 1138.682835][T15888] usb 2-1: USB disconnect, device number 116 [ 1138.929027][T12536] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1139.138854][T12536] usb 5-1: Using ep0 maxpacket: 32 [ 1139.155528][T12536] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1139.174388][T12536] usb 5-1: config 0 has no interface number 0 [ 1139.189260][T12536] usb 5-1: config 0 interface 88 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1139.269362][T12536] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1139.342019][T12536] usb 5-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=51.72 [ 1139.351287][T12536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.368988][T12536] usb 5-1: Product: syz [ 1139.373383][T12536] usb 5-1: Manufacturer: syz [ 1139.378075][T12536] usb 5-1: SerialNumber: syz [ 1139.421175][T12536] usb 5-1: config 0 descriptor?? [ 1139.443411][T19347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1139.464026][T19369] FAULT_INJECTION: forcing a failure. [ 1139.464026][T19369] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.490804][T12536] usb 5-1: Could not find all expected endpoints [ 1139.498876][T19369] CPU: 0 UID: 0 PID: 19369 Comm: syz.1.3468 Tainted: G L syzkaller #0 PREEMPT(full) [ 1139.498900][T19369] Tainted: [L]=SOFTLOCKUP [ 1139.498906][T19369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1139.498916][T19369] Call Trace: [ 1139.498923][T19369] [ 1139.498929][T19369] dump_stack_lvl+0xe8/0x150 [ 1139.498955][T19369] should_fail_ex+0x412/0x560 [ 1139.498976][T19369] should_failslab+0xa8/0x100 [ 1139.498993][T19369] __kmalloc_noprof+0xe8/0x760 [ 1139.499014][T19369] ? tomoyo_encode+0x28b/0x550 [ 1139.499036][T19369] tomoyo_encode+0x28b/0x550 [ 1139.499058][T19369] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1139.499083][T19369] ? tomoyo_path_number_perm+0x219/0x630 [ 1139.499098][T19369] tomoyo_path_number_perm+0x246/0x630 [ 1139.499115][T19369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1139.499129][T19369] ? __lock_acquire+0x6b5/0x2cf0 [ 1139.499157][T19369] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1139.499190][T19369] ? __fget_files+0x2a/0x420 [ 1139.499209][T19369] ? __fget_files+0x2a/0x420 [ 1139.499225][T19369] ? __fget_files+0x3a0/0x420 [ 1139.499240][T19369] ? __fget_files+0x2a/0x420 [ 1139.499260][T19369] security_file_ioctl+0xc3/0x2a0 [ 1139.499284][T19369] __se_sys_ioctl+0x47/0x170 [ 1139.499308][T19369] do_syscall_64+0x14d/0xf80 [ 1139.499325][T19369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.499340][T19369] ? trace_irq_disable+0x37/0x100 [ 1139.499358][T19369] ? clear_bhb_loop+0x40/0x90 [ 1139.499376][T19369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.499406][T19369] RIP: 0033:0x7f970439bf79 [ 1139.499420][T19369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.499433][T19369] RSP: 002b:00007f9705262028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.499449][T19369] RAX: ffffffffffffffda RBX: 00007f9704615fa0 RCX: 00007f970439bf79 [ 1139.499460][T19369] RDX: 0000200000000080 RSI: 0000000080585414 RDI: 0000000000000003 [ 1139.499470][T19369] RBP: 00007f9705262090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.499479][T19369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.499488][T19369] R13: 00007f9704616038 R14: 00007f9704615fa0 R15: 00007f970473fa48 [ 1139.499511][T19369] [ 1139.499526][T19369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1139.755069][T12536] usb 5-1: USB disconnect, device number 11 [ 1140.255511][T19375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3469'. [ 1140.265713][T19375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3469'. [ 1140.293965][T15888] IPVS: starting estimator thread 0... [ 1140.409671][T19376] IPVS: using max 28 ests per chain, 67200 per kthread [ 1140.443798][T19379] netlink: 'syz.5.3471': attribute type 13 has an invalid length. [ 1140.465733][T19379] netlink: 'syz.5.3471': attribute type 17 has an invalid length. [ 1141.065925][T19386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3472'. [ 1141.294668][ T5821] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1141.538999][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 1141.550854][ T5821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.562075][ T5821] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1141.579048][ T5821] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1141.579995][T15888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1141.595217][ T5821] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1141.612423][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.621928][ T5821] usb 3-1: Product: syz [ 1141.629015][ T5821] usb 3-1: Manufacturer: syz [ 1141.634823][ T5821] usb 3-1: SerialNumber: syz [ 1141.679535][T19388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1141.758827][T15888] usb 5-1: Using ep0 maxpacket: 16 [ 1141.779077][T15888] usb 5-1: config 0 has no interfaces? [ 1141.785102][ T42] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1141.819301][T15888] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1141.828455][T15888] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1141.922889][T15888] usb 5-1: Manufacturer: syz [ 1141.946519][T15888] usb 5-1: config 0 descriptor?? [ 1141.974409][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1141.988576][ T42] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1141.999120][ T42] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.034432][ T42] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1142.044149][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.058741][ T42] usb 6-1: Product: syz [ 1142.063110][ T42] usb 6-1: Manufacturer: syz [ 1142.067928][ T42] usb 6-1: SerialNumber: syz [ 1142.161690][ T42] hub 6-1:1.0: bad descriptor, ignoring hub [ 1142.167733][ T42] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1142.351525][T19395] netlink: 'syz.1.3476': attribute type 1 has an invalid length. [ 1142.394501][T19395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.405009][ T42] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1142.670328][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 1142.670343][ T29] audit: type=1326 audit(1770990474.928:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19390 comm="syz.5.3475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x0 [ 1142.848180][ T5821] cdc_ncm 3-1:1.0: bind() failure [ 1142.865911][ T5821] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1142.887276][ T5821] usb 3-1: USB disconnect, device number 31 [ 1142.895453][T16028] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1143.078874][T16028] usb 2-1: device descriptor read/64, error -71 [ 1143.319134][T16028] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1143.458163][T16028] usb 2-1: device descriptor read/64, error -71 [ 1143.578101][T16028] usb usb2-port1: attempt power cycle [ 1144.058916][T16028] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1144.097218][T16028] usb 2-1: device descriptor read/8, error -71 [ 1144.360853][T16028] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1144.399723][T16028] usb 2-1: device descriptor read/8, error -71 [ 1144.481538][ T5821] usb 5-1: USB disconnect, device number 12 [ 1144.511034][T16028] usb usb2-port1: unable to enumerate USB device [ 1144.747891][T19424] netlink: 'syz.4.3483': attribute type 32 has an invalid length. [ 1144.764621][T19424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3483'. [ 1144.774295][T19424] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1145.690872][T19433] binder: 19432:19433 ioctl c0306201 2000000001c0 returned -11 [ 1145.841687][T19436] fuse: Bad value for 'fd' [ 1146.647208][ T42] usb 6-1: USB disconnect, device number 85 [ 1146.701274][T19449] netlink: 'syz.1.3492': attribute type 10 has an invalid length. [ 1146.709337][T19449] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3492'. [ 1146.722946][ T42] usblp0: removed [ 1146.947751][T19454] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3494'. [ 1147.227853][T19462] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3497'. [ 1147.601177][T19466] xt_hashlimit: size too large, truncated to 1048576 [ 1147.660804][T19467] FAULT_INJECTION: forcing a failure. [ 1147.660804][T19467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1147.698180][T19467] CPU: 1 UID: 0 PID: 19467 Comm: syz.5.3498 Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.698215][T19467] Tainted: [L]=SOFTLOCKUP [ 1147.698220][T19467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1147.698229][T19467] Call Trace: [ 1147.698236][T19467] [ 1147.698242][T19467] dump_stack_lvl+0xe8/0x150 [ 1147.698288][T19467] should_fail_ex+0x412/0x560 [ 1147.698308][T19467] _copy_from_iter+0x1d3/0x1670 [ 1147.698328][T19467] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1147.698355][T19467] ? __pfx_policy_nodemask+0x10/0x10 [ 1147.698379][T19467] ? __pfx__copy_from_iter+0x10/0x10 [ 1147.698402][T19467] ? set_page_refcounted+0xa0/0x1e0 [ 1147.698417][T19467] ? page_copy_sane+0x4e/0x270 [ 1147.698436][T19467] copy_page_from_iter+0xdd/0x170 [ 1147.698457][T19467] tun_get_user+0x1d4b/0x3dd0 [ 1147.698475][T19467] ? tun_get_user+0x6ff/0x3dd0 [ 1147.698506][T19467] ? aa_file_perm+0x440/0x1630 [ 1147.698524][T19467] ? __pfx_tun_get_user+0x10/0x10 [ 1147.698544][T19467] ? __lock_acquire+0x6b5/0x2cf0 [ 1147.698571][T19467] ? ref_tracker_alloc+0x363/0x4d0 [ 1147.698591][T19467] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1147.698610][T19467] ? tun_get+0x1c/0x2f0 [ 1147.698627][T19467] ? tun_get+0x1c/0x2f0 [ 1147.698649][T19467] ? tun_get+0x1c/0x2f0 [ 1147.698695][T19467] ? tun_get+0x1c/0x2f0 [ 1147.698724][T19467] tun_chr_write_iter+0x113/0x200 [ 1147.698750][T19467] vfs_write+0x61d/0xb90 [ 1147.698793][T19467] ? __pfx_vfs_write+0x10/0x10 [ 1147.698835][T19467] ? __fget_files+0x2a/0x420 [ 1147.698859][T19467] ksys_write+0x150/0x270 [ 1147.698881][T19467] ? __pfx_ksys_write+0x10/0x10 [ 1147.698909][T19467] do_syscall_64+0x14d/0xf80 [ 1147.698927][T19467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.698942][T19467] ? trace_irq_disable+0x37/0x100 [ 1147.698960][T19467] ? clear_bhb_loop+0x40/0x90 [ 1147.698978][T19467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.698992][T19467] RIP: 0033:0x7f69bdf5c84e [ 1147.699007][T19467] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1147.699020][T19467] RSP: 002b:00007f69bedb1fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1147.699036][T19467] RAX: ffffffffffffffda RBX: 00007f69bedb26c0 RCX: 00007f69bdf5c84e [ 1147.699047][T19467] RDX: 00000000000000ea RSI: 0000200000000700 RDI: 00000000000000c8 [ 1147.699056][T19467] RBP: 00007f69bedb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.699065][T19467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.699074][T19467] R13: 00007f69be216128 R14: 00007f69be216090 R15: 00007f69be33fa48 [ 1147.699097][T19467] [ 1150.118817][ T5821] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1150.322806][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 1150.336480][ T5821] usb 2-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1150.363587][ T5821] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1150.393548][ T5821] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.40 [ 1150.408176][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.425134][ T5821] usb 2-1: Product: syz [ 1150.440079][ T5821] usb 2-1: Manufacturer: 㲱㜜嫉㘦싑뻎ᙶ믮磏桥穐裩㱢尠跴跤︭牌꾳髎ꭨ솽x⸂䅌桇熰騒쾃레ꆨ덜딓ꒂ졢ꪭ鯄秘爜糱죺藪 [ 1150.807817][T19489] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.3500'. [ 1150.905772][ T5821] usb 2-1: SerialNumber: syz [ 1151.761970][T19493] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 1152.107664][T19497] netlink: 'syz.0.3505': attribute type 10 has an invalid length. [ 1152.118409][T19497] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1152.367134][T19503] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1152.378857][T16028] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1152.539828][ T9] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1152.559506][T16028] usb 3-1: Using ep0 maxpacket: 8 [ 1152.580747][T16028] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1152.590581][T16028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.599154][T16028] usb 3-1: Product: syz [ 1152.663128][ T5821] usbhid 2-1:1.0: can't add hid device: -71 [ 1152.676018][T16028] usb 3-1: Manufacturer: syz [ 1152.700411][ T5821] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1152.715172][T16028] usb 3-1: SerialNumber: syz [ 1152.726044][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1152.759363][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1152.775213][T16028] usb 3-1: config 0 descriptor?? [ 1152.792255][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1152.808976][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.817023][ T9] usb 6-1: Product: syz [ 1152.836533][ T5821] usb 2-1: USB disconnect, device number 121 [ 1152.847664][T16028] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1152.876960][ T9] usb 6-1: Manufacturer: syz [ 1152.906401][T16028] pctv452e: pctv452e_power_ctrl: 1 [ 1152.906401][T16028] [ 1152.918312][ T9] usb 6-1: SerialNumber: syz [ 1152.930068][T16028] usb 3-1: selecting invalid altsetting 3 [ 1152.949112][ T9] usb 6-1: config 0 descriptor?? [ 1152.956313][T16028] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1152.956313][T16028] [ 1152.985622][T16028] dvb-usb: bulk message failed: -22 (5/0) [ 1153.020144][T16028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1153.063068][T16028] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1153.083382][T16028] usb 3-1: media controller created [ 1153.097749][T16028] dvb-usb: bulk message failed: -22 (8/0) [ 1153.113787][T16028] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1153.173445][T16028] dvb-usb: MAC address reading failed. [ 1153.203438][T16028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1153.451972][ T9] gs_usb 6-1:0.0: Configuring for 256 interfaces [ 1153.507925][ T9] gs_usb 6-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 1153.527966][T19514] mmap: syz.0.3511 (19514): VmData 30289920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1153.551205][ T9] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 1153.565945][T16028] DVB: Unable to find symbol stb0899_attach() [ 1153.581394][T16028] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1153.661992][ T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1153.915730][ T13] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1153.945210][ T13] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1153.968417][ T13] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1153.982661][T10123] usb 6-1: USB disconnect, device number 86 [ 1154.058887][T16028] rc_core: IR keymap rc-tt-1500 not found [ 1154.064667][T16028] Registered IR keymap rc-empty [ 1154.129443][T16028] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1154.226555][T16028] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input62 [ 1154.297841][T16028] dvb-usb: schedule remote query interval to 100 msecs. [ 1154.321507][T16028] pctv452e: pctv452e_power_ctrl: 0 [ 1154.321507][T16028] [ 1154.338083][T16028] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1154.431904][T16028] dvb-usb: bulk message failed: -22 (4/0) [ 1154.447332][T16028] dvb-usb: error -22 while querying for an remote control event. [ 1154.629513][T16028] dvb-usb: bulk message failed: -22 (4/0) [ 1154.655587][T16028] dvb-usb: error -22 while querying for an remote control event. [ 1154.735366][T10123] usb 3-1: USB disconnect, device number 32 [ 1154.878097][T10123] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1155.331793][T19548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3518'. [ 1155.342604][T19548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3518'. [ 1156.172318][T16028] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1156.378767][T16028] usb 2-1: Using ep0 maxpacket: 8 [ 1156.416273][T16028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1156.470030][T16028] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1156.506383][T16028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.546489][T16028] usb 2-1: config 0 descriptor?? [ 1156.800941][T19554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.814425][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1156.831559][T19554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.894513][T16028] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1156.973259][T19563] xt_hashlimit: size too large, truncated to 1048576 [ 1157.018491][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.060570][ T42] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1157.085006][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.097343][T10123] usb 2-1: USB disconnect, device number 122 [ 1157.103453][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1157.134400][ T42] usb 5-1: Product: syz [ 1157.154370][ T42] usb 5-1: Manufacturer: syz [ 1157.175319][ T42] usb 5-1: SerialNumber: syz [ 1157.195360][ T42] usb 5-1: config 0 descriptor?? [ 1157.206377][ T42] ljca 5-1:0.0: bulk endpoints not found [ 1157.225513][T19567] xt_hashlimit: size too large, truncated to 1048576 [ 1157.577349][T19572] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1157.788859][T16028] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1157.945663][ T29] audit: type=1326 audit(1770990490.198:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19578 comm="syz.1.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1157.968997][T16028] usb 3-1: Using ep0 maxpacket: 32 [ 1157.987797][T16028] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1157.996290][T16028] usb 3-1: config 0 has no interface number 0 [ 1158.136281][T16028] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1158.166595][ T29] audit: type=1326 audit(1770990490.198:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19578 comm="syz.1.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1158.199759][T16028] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1158.242765][T16028] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1158.255724][ T29] audit: type=1326 audit(1770990490.198:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19578 comm="syz.1.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1158.288917][T16028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.306296][T16028] usb 3-1: Product: syz [ 1158.315838][T16028] usb 3-1: Manufacturer: syz [ 1158.326491][T16028] usb 3-1: SerialNumber: syz [ 1158.335990][ T29] audit: type=1326 audit(1770990490.198:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19578 comm="syz.1.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1158.387925][T16028] usb 3-1: config 0 descriptor?? [ 1158.408960][ T29] audit: type=1326 audit(1770990490.228:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19578 comm="syz.1.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1158.469837][ T29] audit: type=1326 audit(1770990490.228:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19578 comm="syz.1.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1158.575243][ T29] audit: type=1326 audit(1770990490.228:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19578 comm="syz.1.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1158.834286][ T29] audit: type=1326 audit(1770990490.228:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19578 comm="syz.1.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1158.876108][ T9] usb 5-1: USB disconnect, device number 13 [ 1158.995252][ T29] audit: type=1326 audit(1770990490.228:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19578 comm="syz.1.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f970439bf79 code=0x7ffc0000 [ 1159.068554][T19571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.084115][T19571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.378875][T16028] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 1159.389016][T16028] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1159.417863][T19604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1159.427439][T19604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1159.619194][T16028] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1160.031695][ T42] usb 3-1: USB disconnect, device number 33 [ 1160.133093][T19616] vivid-000: disconnect [ 1160.177045][T19616] program syz.5.3537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1160.843327][T19613] vivid-000: reconnect [ 1161.059107][ T5821] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1161.087245][ T29] audit: type=1326 audit(1770990493.338:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19636 comm="syz.5.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1161.230252][ T5821] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1161.287713][ T5821] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.311851][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1161.318493][ T5821] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1161.370828][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.429563][ T5821] usb 3-1: config 0 descriptor?? [ 1161.464275][T19652] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1161.893092][ T5821] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 1161.911548][ T5821] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 1161.941251][ T5821] hid-steam 0003:28DE:1102.0022: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1162.063179][T19667] bridge_slave_0: left allmulticast mode [ 1162.100953][T19667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.111017][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3551'. [ 1162.606997][ T5821] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' connected [ 1162.641884][T19667] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1162.683395][ T5821] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0022/input/input63 [ 1162.798715][ T5821] hid-steam 0003:28DE:1102.0023: unknown main item tag 0x0 [ 1162.838757][ T5821] hid-steam 0003:28DE:1102.0023: unknown main item tag 0x0 [ 1162.979084][ T5821] hid-steam 0003:28DE:1102.0023: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1163.067609][ T5821] usb 3-1: USB disconnect, device number 34 [ 1163.211424][ T5821] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' disconnected [ 1163.405685][T19675] fido_id[19675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1164.105282][T19694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.131934][T19694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.303393][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1164.303412][ T29] audit: type=1326 audit(1770990496.558:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1164.338810][T10123] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1164.399646][ T29] audit: type=1326 audit(1770990496.558:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1164.435666][ T29] audit: type=1326 audit(1770990496.558:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1164.464310][ T29] audit: type=1326 audit(1770990496.568:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1164.479094][T10123] usb 5-1: device descriptor read/64, error -71 [ 1164.725024][ T29] audit: type=1326 audit(1770990496.618:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1164.830267][ T29] audit: type=1326 audit(1770990496.618:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1164.971751][T10123] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1165.015173][ T29] audit: type=1326 audit(1770990496.618:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1165.078632][ T29] audit: type=1326 audit(1770990496.618:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1165.082543][T19709] xt_hashlimit: size too large, truncated to 1048576 [ 1165.123669][ T29] audit: type=1326 audit(1770990496.618:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1165.139042][T10123] usb 5-1: device descriptor read/64, error -71 [ 1165.236177][ T29] audit: type=1326 audit(1770990496.618:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19699 comm="syz.5.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f69bdf9bf79 code=0x7ffc0000 [ 1165.279214][T10123] usb usb5-port1: attempt power cycle [ 1165.571787][T19725] netlink: 'syz.2.3566': attribute type 3 has an invalid length. [ 1165.584996][T19725] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1165.654594][T10123] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1165.770845][T10123] usb 5-1: device descriptor read/8, error -71 [ 1165.788036][T19730] vivid-000: disconnect [ 1166.020031][T10123] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1166.099335][T10123] usb 5-1: device descriptor read/8, error -71 [ 1166.249751][T10123] usb usb5-port1: unable to enumerate USB device [ 1167.203035][T19693] vivid-000: reconnect [ 1167.455080][T19747] xt_hashlimit: size too large, truncated to 1048576 [ 1168.326536][T19771] xt_hashlimit: size too large, truncated to 1048576 [ 1168.675749][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 1168.679348][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 1168.995745][T19778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.999370][T19778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.218788][ T5821] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1169.329603][T15888] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1169.388809][ T5821] usb 5-1: Using ep0 maxpacket: 16 [ 1169.409107][ T5821] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1169.417479][ T5821] usb 5-1: config 0 has no interface number 0 [ 1169.445202][ T5821] usb 5-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1169.482210][ T5821] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 1169.501237][T15888] usb 2-1: Using ep0 maxpacket: 8 [ 1169.520662][ T5821] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fd.f5 [ 1169.523811][T15888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.542979][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1169.568187][ T5821] usb 5-1: Product: syz [ 1169.576047][ T5821] usb 5-1: SerialNumber: syz [ 1169.597690][T15888] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1169.617721][T15888] usb 2-1: config 1 has no interface number 1 [ 1169.633291][T15888] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1169.641466][ T5821] usb 5-1: config 0 descriptor?? [ 1169.663990][T15888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1169.683671][T15888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.702709][T15888] usb 2-1: Product: syz [ 1169.707014][T15888] usb 2-1: Manufacturer: syz [ 1169.717170][T15888] usb 2-1: SerialNumber: syz [ 1170.117356][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1170.117377][ T29] audit: type=1326 audit(1770990502.368:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b7f9bf79 code=0x7ffc0000 [ 1170.163156][ T5821] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1170.217910][ T5821] usb 5-1: USB disconnect, device number 18 [ 1170.243178][ T29] audit: type=1326 audit(1770990502.408:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b7f9bf79 code=0x7ffc0000 [ 1170.311603][ T29] audit: type=1326 audit(1770990502.408:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f64b7f9bf79 code=0x7ffc0000 [ 1170.349550][T19814] xt_hashlimit: size too large, truncated to 1048576 [ 1170.368047][ T29] audit: type=1326 audit(1770990502.408:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b7f9bf79 code=0x7ffc0000 [ 1170.427664][ T29] audit: type=1326 audit(1770990502.408:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b7f9bf79 code=0x7ffc0000 [ 1170.484386][ T29] audit: type=1326 audit(1770990502.408:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f64b7f9bf79 code=0x7ffc0000 [ 1170.540764][ T29] audit: type=1326 audit(1770990502.408:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f64b7f9bf79 code=0x7ffc0000 [ 1170.625710][ T29] audit: type=1326 audit(1770990502.408:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b7f9bf79 code=0x7ffc0000 [ 1170.713623][T19820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3591'. [ 1170.723322][T19820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3591'. [ 1171.333303][T19825] program syz.4.3592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1171.700502][ T29] audit: type=1326 audit(1770990503.948:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19826 comm="syz.4.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1171.778825][ T29] audit: type=1326 audit(1770990503.978:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19826 comm="syz.4.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7ff07f19bf79 code=0x7ffc0000 [ 1172.115534][T15888] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1172.157372][T15888] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1172.169682][ T5821] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1172.202224][T15888] usb 2-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 1172.222224][T15888] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1172.349235][ T5821] usb 5-1: device descriptor read/64, error -71 [ 1172.649391][T15888] usb 2-1: USB disconnect, device number 123 [ 1172.708941][ T5821] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1172.769933][ T7863] udevd[7863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1172.859133][ T5821] usb 5-1: device descriptor read/64, error -71 [ 1172.983580][ T5821] usb usb5-port1: attempt power cycle [ 1173.278788][T16028] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1173.359030][ T5821] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1173.410929][ T5821] usb 5-1: device descriptor read/8, error -71 [ 1173.459110][T16028] usb 6-1: Using ep0 maxpacket: 16 [ 1173.478089][T16028] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1173.498798][T16028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1173.540283][T16028] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1173.558905][T16028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.578378][T16028] usb 6-1: Product: syz [ 1173.599836][T16028] usb 6-1: Manufacturer: syz [ 1173.606648][T16028] usb 6-1: SerialNumber: syz [ 1173.623809][T16028] usb 6-1: config 0 descriptor?? [ 1173.640504][T16028] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1173.650108][T16028] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1173.661077][ T5821] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1173.699879][ T5821] usb 5-1: device descriptor read/8, error -71 [ 1173.819946][ T5821] usb usb5-port1: unable to enumerate USB device [ 1173.852728][T19861] ptrace attach of "./syz-executor exec"[17610] was attempted by "./syz-executor exec"[19861] [ 1173.889541][T16028] em28xx 6-1:0.0: chip ID is em28178 [ 1174.097561][T19850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.107954][T19850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.059246][T19882] netlink: 'syz.4.3610': attribute type 10 has an invalid length. [ 1175.077579][T19882] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1175.474835][T19897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3616'. [ 1175.710195][T19903] geneve2: entered promiscuous mode [ 1175.715533][T19903] geneve2: entered allmulticast mode [ 1176.010047][T15888] usb 6-1: USB disconnect, device number 87 [ 1176.017521][T15888] em28xx 6-1:0.0: Disconnecting em28xx [ 1176.029052][ T5821] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1176.041917][T15888] em28xx 6-1:0.0: Freeing device [ 1176.238837][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 1176.287398][ T5821] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.313109][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1176.323405][ T5821] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1176.332797][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.382013][ T5821] usb 2-1: config 0 descriptor?? [ 1176.610082][T19923] netlink: 'syz.2.3624': attribute type 10 has an invalid length. [ 1176.646790][T19923] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3624'. [ 1177.083887][T19935] binder: 19904:19935 ioctl 4018620d 0 returned -22 [ 1177.951095][T19942] loop4: detected capacity change from 0 to 1 [ 1177.964961][T19942] Dev loop4: unable to read RDB block 1 [ 1178.122486][T19942] loop4: unable to read partition table [ 1178.165790][T19942] loop4: partition table beyond EOD, truncated [ 1178.179880][T19942] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1178.425220][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.453467][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1178.723594][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.788735][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1179.130651][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.150435][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1179.337443][ T5189] Dev loop4: unable to read RDB block 1 [ 1179.353836][ T5189] loop4: unable to read partition table [ 1179.375963][ T5189] loop4: partition table beyond EOD, truncated [ 1179.410909][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.421417][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1179.449095][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 1179.607461][ T5821] usbhid 2-1:0.0: can't add hid device: -71 [ 1179.625399][ T5821] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1179.753429][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1179.753483][ T29] audit: type=1804 audit(1770990511.918:1432): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3632" name="bus" dev="ramfs" ino=83443 res=1 errno=0 [ 1179.791568][ T5821] usb 2-1: USB disconnect, device number 124 [ 1179.866754][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1179.878403][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1179.887598][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1179.899833][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1179.909030][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1180.113702][T11673] [ 1180.116097][T11673] ============================================ [ 1180.122275][T11673] WARNING: possible recursive locking detected [ 1180.128458][T11673] syzkaller #0 Tainted: G L [ 1180.134442][T11673] -------------------------------------------- [ 1180.140599][T11673] kworker/u8:12/11673 is trying to acquire lock: [ 1180.146943][T11673] ffff888041acaa20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 1180.156269][T11673] [ 1180.156269][T11673] but task is already holding lock: [ 1180.163637][T11673] ffff888041acaa20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1180.173221][T11673] [ 1180.173221][T11673] other info that might help us debug this: [ 1180.181283][T11673] Possible unsafe locking scenario: [ 1180.181283][T11673] [ 1180.188744][T11673] CPU0 [ 1180.192044][T11673] ---- [ 1180.195342][T11673] lock(k-sk_lock-AF_INET6); [ 1180.200041][T11673] lock(k-sk_lock-AF_INET6); [ 1180.204735][T11673] [ 1180.204735][T11673] *** DEADLOCK *** [ 1180.204735][T11673] [ 1180.212904][T11673] May be due to missing lock nesting notation [ 1180.212904][T11673] [ 1180.221247][T11673] 4 locks held by kworker/u8:12/11673: [ 1180.226723][T11673] #0: ffff888058f6f948 ((wq_completion)krds_cp_wq#5/0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1180.238597][T11673] #1: ffffc90003a8fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1180.251430][T11673] #2: ffff888041acaa20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1180.261578][T11673] #3: ffff888041acabc8 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x950 [ 1180.271648][T11673] [ 1180.271648][T11673] stack backtrace: [ 1180.277569][T11673] CPU: 0 UID: 0 PID: 11673 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.277597][T11673] Tainted: [L]=SOFTLOCKUP [ 1180.277605][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1180.277619][T11673] Workqueue: krds_cp_wq#5/0 rds_send_worker [ 1180.277646][T11673] Call Trace: [ 1180.277654][T11673] [ 1180.277661][T11673] dump_stack_lvl+0xe8/0x150 [ 1180.277702][T11673] print_deadlock_bug+0x279/0x290 [ 1180.277726][T11673] __lock_acquire+0x253f/0x2cf0 [ 1180.277745][T11673] ? unwind_next_frame+0xa5/0x23c0 [ 1180.277767][T11673] ? lock_acquire+0x106/0x330 [ 1180.277786][T11673] ? unwind_next_frame+0xa5/0x23c0 [ 1180.277806][T11673] ? lock_acquire+0x106/0x330 [ 1180.277823][T11673] ? unwind_next_frame+0xa5/0x23c0 [ 1180.277845][T11673] ? inet6_getname+0x15d/0x650 [ 1180.277868][T11673] lock_acquire+0x106/0x330 [ 1180.277884][T11673] ? inet6_getname+0x15d/0x650 [ 1180.277907][T11673] ? unwind_next_frame+0xa5/0x23c0 [ 1180.277927][T11673] ? unwind_next_frame+0x1aaf/0x23c0 [ 1180.277951][T11673] lock_sock_nested+0x48/0x100 [ 1180.277975][T11673] ? inet6_getname+0x15d/0x650 [ 1180.277997][T11673] inet6_getname+0x15d/0x650 [ 1180.278023][T11673] rds_tcp_conn_slots_available+0x288/0x470 [ 1180.278049][T11673] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1180.278078][T11673] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1180.278095][T11673] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1180.278120][T11673] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1180.278135][T11673] ? rds_send_worker+0x7d/0x2e0 [ 1180.278152][T11673] ? process_scheduled_works+0xaec/0x17a0 [ 1180.278169][T11673] ? worker_thread+0xa50/0xfc0 [ 1180.278197][T11673] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1180.278217][T11673] rds_recv_incoming+0x9f6/0x12d0 [ 1180.278236][T11673] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1180.278251][T11673] ? skb_copy_bits+0x7e5/0x8f0 [ 1180.278272][T11673] rds_tcp_data_recv+0x7f1/0xa40 [ 1180.278303][T11673] __tcp_read_sock+0x196/0x970 [ 1180.278326][T11673] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1180.278351][T11673] rds_tcp_data_ready+0x369/0x950 [ 1180.278375][T11673] ? __pfx_sock_def_readable+0x10/0x10 [ 1180.278398][T11673] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1180.278422][T11673] ? tcp_grow_window+0x4fc/0xc50 [ 1180.278450][T11673] tcp_data_queue+0x1e2e/0x5e50 [ 1180.278478][T11673] ? tcp_urg+0x106/0x410 [ 1180.278497][T11673] ? __pfx_tcp_data_queue+0x10/0x10 [ 1180.278517][T11673] ? __pfx_tcp_urg+0x10/0x10 [ 1180.278535][T11673] ? ktime_get+0x45/0x200 [ 1180.278557][T11673] ? seqcount_lockdep_reader_access+0xd0/0x100 [ 1180.278581][T11673] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1180.278604][T11673] tcp_rcv_established+0x1270/0x2670 [ 1180.278629][T11673] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1180.278650][T11673] ? ip6_dst_check+0x90/0x7e0 [ 1180.278668][T11673] ? ip6_dst_check+0xe2/0x7e0 [ 1180.278685][T11673] ? ip6_dst_check+0x5e3/0x7e0 [ 1180.278702][T11673] ? __pfx_ip6_dst_check+0x10/0x10 [ 1180.278720][T11673] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1180.278746][T11673] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1180.278767][T11673] __release_sock+0x1b8/0x3a0 [ 1180.278790][T11673] release_sock+0x5f/0x1f0 [ 1180.278803][T11673] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1180.278828][T11673] rds_send_xmit+0x207e/0x28d0 [ 1180.278858][T11673] ? __pfx_rds_send_xmit+0x10/0x10 [ 1180.278873][T11673] ? process_scheduled_works+0xa0f/0x17a0 [ 1180.278892][T11673] ? preempt_schedule_thunk+0x16/0x30 [ 1180.278910][T11673] rds_send_worker+0x7d/0x2e0 [ 1180.278927][T11673] ? process_scheduled_works+0xa0f/0x17a0 [ 1180.278945][T11673] process_scheduled_works+0xaec/0x17a0 [ 1180.278973][T11673] ? __pfx_process_scheduled_works+0x10/0x10 [ 1180.278993][T11673] ? assign_work+0x3d5/0x5e0 [ 1180.279011][T11673] worker_thread+0xa50/0xfc0 [ 1180.279039][T11673] kthread+0x388/0x470 [ 1180.279062][T11673] ? __pfx_worker_thread+0x10/0x10 [ 1180.279079][T11673] ? __pfx_kthread+0x10/0x10 [ 1180.279102][T11673] ret_from_fork+0x51e/0xb90 [ 1180.279122][T11673] ? __pfx_ret_from_fork+0x10/0x10 [ 1180.279139][T11673] ? __switch_to+0xc7d/0x1400 [ 1180.279155][T11673] ? __pfx_kthread+0x10/0x10 [ 1180.279177][T11673] ret_from_fork_asm+0x1a/0x30 [ 1180.279212][T11673] [ 1180.679307][T11673] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 1180.688087][T11673] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11673, name: kworker/u8:12 [ 1180.697479][T11673] preempt_count: 201, expected: 0 [ 1180.702517][T11673] RCU nest depth: 0, expected: 0 [ 1180.707449][T11673] INFO: lockdep is turned off. [ 1180.712220][T11673] Preemption disabled at: [ 1180.712229][T11673] [<0000000000000000>] 0x0 [ 1180.720977][T11673] CPU: 0 UID: 0 PID: 11673 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.720998][T11673] Tainted: [L]=SOFTLOCKUP [ 1180.721003][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1180.721013][T11673] Workqueue: krds_cp_wq#5/0 rds_send_worker [ 1180.721033][T11673] Call Trace: [ 1180.721040][T11673] [ 1180.721047][T11673] dump_stack_lvl+0xe8/0x150 [ 1180.721067][T11673] __might_resched+0x378/0x4d0 [ 1180.721087][T11673] lock_sock_nested+0x5d/0x100 [ 1180.721108][T11673] inet6_getname+0x15d/0x650 [ 1180.721131][T11673] rds_tcp_conn_slots_available+0x288/0x470 [ 1180.721152][T11673] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1180.721221][T11673] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1180.721237][T11673] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1180.721258][T11673] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1180.721271][T11673] ? rds_send_worker+0x7d/0x2e0 [ 1180.721286][T11673] ? process_scheduled_works+0xaec/0x17a0 [ 1180.721302][T11673] ? worker_thread+0xa50/0xfc0 [ 1180.721320][T11673] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1180.721338][T11673] rds_recv_incoming+0x9f6/0x12d0 [ 1180.721354][T11673] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1180.721367][T11673] ? skb_copy_bits+0x7e5/0x8f0 [ 1180.721385][T11673] rds_tcp_data_recv+0x7f1/0xa40 [ 1180.721411][T11673] __tcp_read_sock+0x196/0x970 [ 1180.721431][T11673] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1180.721453][T11673] rds_tcp_data_ready+0x369/0x950 [ 1180.721473][T11673] ? __pfx_sock_def_readable+0x10/0x10 [ 1180.721493][T11673] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1180.721514][T11673] ? tcp_grow_window+0x4fc/0xc50 [ 1180.721537][T11673] tcp_data_queue+0x1e2e/0x5e50 [ 1180.721560][T11673] ? tcp_urg+0x106/0x410 [ 1180.721576][T11673] ? __pfx_tcp_data_queue+0x10/0x10 [ 1180.721593][T11673] ? __pfx_tcp_urg+0x10/0x10 [ 1180.721609][T11673] ? ktime_get+0x45/0x200 [ 1180.721627][T11673] ? seqcount_lockdep_reader_access+0xd0/0x100 [ 1180.721648][T11673] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1180.721667][T11673] tcp_rcv_established+0x1270/0x2670 [ 1180.721689][T11673] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1180.721705][T11673] ? ip6_dst_check+0x90/0x7e0 [ 1180.721719][T11673] ? ip6_dst_check+0xe2/0x7e0 [ 1180.721730][T11673] ? ip6_dst_check+0x5e3/0x7e0 [ 1180.721742][T11673] ? __pfx_ip6_dst_check+0x10/0x10 [ 1180.721755][T11673] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1180.721777][T11673] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1180.721794][T11673] __release_sock+0x1b8/0x3a0 [ 1180.721813][T11673] release_sock+0x5f/0x1f0 [ 1180.721825][T11673] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1180.721846][T11673] rds_send_xmit+0x207e/0x28d0 [ 1180.721892][T11673] ? __pfx_rds_send_xmit+0x10/0x10 [ 1180.721906][T11673] ? process_scheduled_works+0xa0f/0x17a0 [ 1180.721923][T11673] ? preempt_schedule_thunk+0x16/0x30 [ 1180.721939][T11673] rds_send_worker+0x7d/0x2e0 [ 1180.721955][T11673] ? process_scheduled_works+0xa0f/0x17a0 [ 1180.721971][T11673] process_scheduled_works+0xaec/0x17a0 [ 1180.721997][T11673] ? __pfx_process_scheduled_works+0x10/0x10 [ 1180.722015][T11673] ? assign_work+0x3d5/0x5e0 [ 1180.722032][T11673] worker_thread+0xa50/0xfc0 [ 1180.722057][T11673] kthread+0x388/0x470 [ 1180.722077][T11673] ? __pfx_worker_thread+0x10/0x10 [ 1180.722093][T11673] ? __pfx_kthread+0x10/0x10 [ 1180.722112][T11673] ret_from_fork+0x51e/0xb90 [ 1180.722129][T11673] ? __pfx_ret_from_fork+0x10/0x10 [ 1180.722145][T11673] ? __switch_to+0xc7d/0x1400 [ 1180.722159][T11673] ? __pfx_kthread+0x10/0x10 [ 1180.722184][T11673] ret_from_fork_asm+0x1a/0x30 [ 1180.722210][T11673] [ 1180.722219][T11673] BUG: scheduling while atomic: kworker/u8:12/11673/0x00000202 [ 1181.071290][T11673] INFO: lockdep is turned off. [ 1181.076058][T11673] Modules linked in: [ 1181.079975][T11673] Preemption disabled at: [ 1181.079983][T11673] [<0000000000000000>] 0x0 [ 1181.088771][T11673] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 1181.097556][T11673] CPU: 0 UID: 0 PID: 11673 Comm: kworker/u8:12 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1181.108769][T11673] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1181.114029][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1181.124092][T11673] Workqueue: krds_cp_wq#5/0 rds_send_worker [ 1181.130005][T11673] Call Trace: [ 1181.133315][T11673] [ 1181.136265][T11673] vpanic+0x56c/0xa60 [ 1181.140286][T11673] ? __pfx_vpanic+0x10/0x10 [ 1181.144827][T11673] ? rcu_is_watching+0x15/0xb0 [ 1181.149602][T11673] panic+0xc5/0xd0 [ 1181.153339][T11673] ? __pfx_panic+0x10/0x10 [ 1181.157764][T11673] ? __pfx__printk+0x10/0x10 [ 1181.162364][T11673] ? vprintk_emit+0x4eb/0x560 [ 1181.167059][T11673] ? __pfx_vprintk_emit+0x10/0x10 [ 1181.172097][T11673] check_panic_on_warn+0x89/0xb0 [ 1181.177221][T11673] __schedule_bug+0xf6/0x150 [ 1181.181898][T11673] __schedule+0x16a0/0x52b0 [ 1181.186413][T11673] ? __wake_up_klogd+0xe6/0x120 [ 1181.191291][T11673] ? vprintk_emit+0x4eb/0x560 [ 1181.195984][T11673] ? rcu_is_watching+0x15/0xb0 [ 1181.200771][T11673] ? __pfx_vprintk_emit+0x10/0x10 [ 1181.205806][T11673] ? unwind_next_frame+0xa5/0x23c0 [ 1181.210932][T11673] ? do_raw_spin_lock+0x12b/0x2f0 [ 1181.215972][T11673] ? prepare_to_wait_exclusive+0x45/0x240 [ 1181.221708][T11673] ? __pfx___schedule+0x10/0x10 [ 1181.226579][T11673] ? schedule+0x90/0x360 [ 1181.230859][T11673] ? rcu_is_watching+0x15/0xb0 [ 1181.235636][T11673] ? rcu_is_watching+0x15/0xb0 [ 1181.240412][T11673] ? lock_release+0x4b/0x3a0 [ 1181.245045][T11673] ? schedule+0x90/0x360 [ 1181.249299][T11673] ? wq_worker_sleeping+0x63/0x250 [ 1181.254435][T11673] schedule+0x164/0x360 [ 1181.258604][T11673] __lock_sock+0x161/0x2c0 [ 1181.263077][T11673] ? __pfx___lock_sock+0x10/0x10 [ 1181.268205][T11673] ? do_raw_spin_lock+0x12b/0x2f0 [ 1181.273254][T11673] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1181.279338][T11673] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1181.284724][T11673] ? dump_stack_lvl+0x135/0x150 [ 1181.289587][T11673] ? lock_sock_nested+0x6a/0x100 [ 1181.294541][T11673] lock_sock_nested+0x9f/0x100 [ 1181.299585][T11673] inet6_getname+0x15d/0x650 [ 1181.304196][T11673] rds_tcp_conn_slots_available+0x288/0x470 [ 1181.310197][T11673] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1181.316630][T11673] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1181.322444][T11673] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1181.328872][T11673] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1181.333985][T11673] ? rds_send_worker+0x7d/0x2e0 [ 1181.338838][T11673] ? process_scheduled_works+0xaec/0x17a0 [ 1181.344560][T11673] ? worker_thread+0xa50/0xfc0 [ 1181.349330][T11673] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1181.354965][T11673] rds_recv_incoming+0x9f6/0x12d0 [ 1181.359994][T11673] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1181.365458][T11673] ? skb_copy_bits+0x7e5/0x8f0 [ 1181.370240][T11673] rds_tcp_data_recv+0x7f1/0xa40 [ 1181.375219][T11673] __tcp_read_sock+0x196/0x970 [ 1181.379995][T11673] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1181.385465][T11673] rds_tcp_data_ready+0x369/0x950 [ 1181.390498][T11673] ? __pfx_sock_def_readable+0x10/0x10 [ 1181.395970][T11673] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1181.401525][T11673] ? tcp_grow_window+0x4fc/0xc50 [ 1181.406487][T11673] tcp_data_queue+0x1e2e/0x5e50 [ 1181.411365][T11673] ? tcp_urg+0x106/0x410 [ 1181.415614][T11673] ? __pfx_tcp_data_queue+0x10/0x10 [ 1181.420812][T11673] ? __pfx_tcp_urg+0x10/0x10 [ 1181.425404][T11673] ? ktime_get+0x45/0x200 [ 1181.429735][T11673] ? seqcount_lockdep_reader_access+0xd0/0x100 [ 1181.435920][T11673] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1181.441731][T11673] tcp_rcv_established+0x1270/0x2670 [ 1181.447024][T11673] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1181.452659][T11673] ? ip6_dst_check+0x90/0x7e0 [ 1181.457337][T11673] ? ip6_dst_check+0xe2/0x7e0 [ 1181.462112][T11673] ? ip6_dst_check+0x5e3/0x7e0 [ 1181.466988][T11673] ? __pfx_ip6_dst_check+0x10/0x10 [ 1181.472097][T11673] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1181.476783][T11673] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1181.481896][T11673] __release_sock+0x1b8/0x3a0 [ 1181.486579][T11673] release_sock+0x5f/0x1f0 [ 1181.490995][T11673] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1181.497246][T11673] rds_send_xmit+0x207e/0x28d0 [ 1181.502028][T11673] ? __pfx_rds_send_xmit+0x10/0x10 [ 1181.507149][T11673] ? process_scheduled_works+0xa0f/0x17a0 [ 1181.512873][T11673] ? preempt_schedule_thunk+0x16/0x30 [ 1181.518252][T11673] rds_send_worker+0x7d/0x2e0 [ 1181.522936][T11673] ? process_scheduled_works+0xa0f/0x17a0 [ 1181.528668][T11673] process_scheduled_works+0xaec/0x17a0 [ 1181.534245][T11673] ? __pfx_process_scheduled_works+0x10/0x10 [ 1181.540275][T11673] ? assign_work+0x3d5/0x5e0 [ 1181.544883][T11673] worker_thread+0xa50/0xfc0 [ 1181.549491][T11673] kthread+0x388/0x470 [ 1181.553571][T11673] ? __pfx_worker_thread+0x10/0x10 [ 1181.558708][T11673] ? __pfx_kthread+0x10/0x10 [ 1181.563347][T11673] ret_from_fork+0x51e/0xb90 [ 1181.567943][T11673] ? __pfx_ret_from_fork+0x10/0x10 [ 1181.573053][T11673] ? __switch_to+0xc7d/0x1400 [ 1181.577738][T11673] ? __pfx_kthread+0x10/0x10 [ 1181.582333][T11673] ret_from_fork_asm+0x1a/0x30 [ 1181.587115][T11673] [ 1181.590346][T11673] Kernel Offset: disabled [ 1181.594673][T11673] Rebooting in 86400 seconds..