last executing test programs: 3m42.620254449s ago: executing program 4 (id=1985): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0xd8, 0x29, 0x4, {0x4, 0x18, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x128}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000280)={0x200, 0x80000, r1}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) fanotify_mark(r3, 0x440, 0x8000022, r4, &(0x7f00000002c0)='./file0\x00') r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x10002, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x5, 0xa00}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m42.20666441s ago: executing program 4 (id=1987): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x1, 0x8000, 0x3db, 0x5}, 0x10) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 3m40.633819343s ago: executing program 4 (id=1995): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, r5, 0x2000) 3m38.218054899s ago: executing program 4 (id=2000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r4 = socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xffffffffffffff11) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r9, @ANYBLOB="c3040500000000000e00010400000000000065000c000280080006003f000801"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r2, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000081, 0x0, 0x400000000149}]}) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[], 0x78}}, 0x4040040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m37.840096409s ago: executing program 4 (id=2002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m37.557410456s ago: executing program 4 (id=2003): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000120001000000000000000000ac14140000000000000000000000000000000000000000000c00150000000000000000006aa437129c704d5d62107a8a7f14f3a738eb0e1c83b306e2a26007d249d3bb4c31"], 0x34}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000001c0), 0x1004) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x515000) ioctl$CEC_S_MODE(r3, 0x40046109, 0x0) close(r3) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000005200000225bd7000fdfbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000020000000001c070000000000000091404ee9310fe8e9998c951ec3e60e0bd55ae0cc3dfaca5465e1df31396f04abed880566629372e026979e8d6b7985376f339856ded657520c965c8aca02a806d60abc8c4850e3d8cbf46533d5c300e8108f0993a8c07b0212639459aff3ea19bdac3a883868209783d0697f8fed46b266cc371dbb3b69b75b79e19134206e8f9e241c92f9618f38f153162572f937397f0183b4e7331134dca815b994238ebb68d47308ecdbabc18e54e51af0f557e9d52e7a0530fffa9f93e3b4255f3499be3083c699cf3f3e1f6243a34ee24900"/239, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x200) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000300)="3267ca2162bc32e00947e016850be6fd5ecadcc203b8e0c1c05026a195ad724462b8d7c222458552e183d836cf3321ac30de0469b8ab965a7a6b57508532e5efed6e1590dbc9efbab89f8aee744a364de6ee52c558de5646b1769da95de6a2a93aaa7b809042539a5e4e166da49004f9b19cda9463f491ec7dc78d437abc4ec541fd66ba", 0x84}], 0x1) 3m36.897160296s ago: executing program 32 (id=2003): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000120001000000000000000000ac14140000000000000000000000000000000000000000000c00150000000000000000006aa437129c704d5d62107a8a7f14f3a738eb0e1c83b306e2a26007d249d3bb4c31"], 0x34}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000001c0), 0x1004) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x515000) ioctl$CEC_S_MODE(r3, 0x40046109, 0x0) close(r3) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000005200000225bd7000fdfbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000020000000001c070000000000000091404ee9310fe8e9998c951ec3e60e0bd55ae0cc3dfaca5465e1df31396f04abed880566629372e026979e8d6b7985376f339856ded657520c965c8aca02a806d60abc8c4850e3d8cbf46533d5c300e8108f0993a8c07b0212639459aff3ea19bdac3a883868209783d0697f8fed46b266cc371dbb3b69b75b79e19134206e8f9e241c92f9618f38f153162572f937397f0183b4e7331134dca815b994238ebb68d47308ecdbabc18e54e51af0f557e9d52e7a0530fffa9f93e3b4255f3499be3083c699cf3f3e1f6243a34ee24900"/239, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x200) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000300)="3267ca2162bc32e00947e016850be6fd5ecadcc203b8e0c1c05026a195ad724462b8d7c222458552e183d836cf3321ac30de0469b8ab965a7a6b57508532e5efed6e1590dbc9efbab89f8aee744a364de6ee52c558de5646b1769da95de6a2a93aaa7b809042539a5e4e166da49004f9b19cda9463f491ec7dc78d437abc4ec541fd66ba", 0x84}], 0x1) 11.152902601s ago: executing program 1 (id=2773): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) (async) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)="5c00000014006b03000000d86e6c1d00028490a6a2fb564500004e23e3f58e76110175ed00001b0075e3002500028d0000000000000b090800bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000000000f500000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e01000008240301"], 0x0) 10.763691209s ago: executing program 1 (id=2774): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56a1e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x9c, 0x3, "740da598e9bc5a6f505a2012a7a4382b8e2bccfe0e516ea572e3fc328c25a279c0c57bb5279c0ecf9d8dc7acc63ded404bb9196fac6907371894a189cbccf06b00d6d4e02c1de9f6f52c0c759247138fa45ea490cde4a19c6c63c48dcd74e22d71b62fded18d99b8b007a78372102033b1fda9b31f5dc9f076519d281fbc8aa2da379ef6a2070a0bbd6eb143df1515669bb8c7b8251ed54bfc643e4c230abf599113b9a2339f34d3134afc13e336b882aee9339f29f5cb8b1c7288e2ade4c43ed72b67c366d013d0bf2be57e94c5d9e8a5b8f6f7c67a7b03289ff4a3921a9b1ae46263750957b9949000fd753773ff7ab381c2a435257b2a0515b59fe95dcc22", 0xb, 0x8, 0x7, 0xe, 0x5, 0x59, 0x4}, r4}}, 0x120) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec1306000000000000010902240001000000000904000001030000000921000000012202000905810320"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000900)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="20014c0000004c6c8fe10cff583c8b1a9140bb787de39b7d11683168837fb60e27281d28bfa32ece458e1fbf84ac1dc5108e4364a20d14ab2673cbe3d12c99e3bc346d2d79d8377b00a527b4933d"], 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x9d, 0x7, "006df416", "e5f28ea0"}}, 0x0}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4b2, &(0x7f0000010400)={0x0, 0x86e1, 0x800, 0x400006}, &(0x7f0000010080), &(0x7f0000000000)) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000240)={0xa, 0x2, 0x2, {0x46, 0x13, 0xfffb, 0xf7168000}}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 9.47628996s ago: executing program 5 (id=2783): mmap(&(0x7f0000246000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x7ef34000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x6}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 8.774873318s ago: executing program 5 (id=2785): r0 = syz_clone(0x12000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0x665}}, 0x9e3, 0x40}, &(0x7f0000000480)=0x90) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a010300003ddb00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="53eee209f0d4506d0a79f87552", 0xd}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) ptrace(0x10, r0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x2800, 0xa0}}, &(0x7f0000000240)='GPL\x00', 0x4, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20}, 0x10}, 0x94) waitid(0x0, r0, &(0x7f0000000300), 0x4, &(0x7f0000000100)) 8.567686535s ago: executing program 5 (id=2786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"49841ada71cfe011e10532489ef0a3127f9f67568978975321ebdb7108d333a8df648f920da594ae3a327a3f1292465c016dbc5261414bd85acd87473d61390f4bbded57a902b5deb9c23c641914f6b147db6146e946ce31b52ff43219cbc1574ebc8f47d0d2a02b89dc02c49f25471af4f2435dd40d0481fe6f0124e4aa9849c9b8358074976ba0dd502c77e65623e41c8ce041fe7058274e54be3d84f5aa382e9032df7a279d491a51e7480061ebb983305b23e584f6b47af6d615b2f0a182d7c0095f222a4a176472ebbd1021d2eb285ff99ea7601c4e25ecd4c055c59c3964e30b2f8567d69324b6828cc0e9c3528f1f4e27527d98bca370c165bfd88348ca0eb405029367247b738c6cce89e3efd4479d8f2fc7dbd015046860acb8a71106b920b09e661065bf765a03317feb4f54d4382ac41850982313319363b14557a5b8a18d60e425b3db6bcd35b03c810c9d398c9d91902878258419a4b02fc4bdc3b69da6c5c27f5a507005a24a3fef74f0b287c3a4cd1517537dc8cf5cf0efd75c11e803e972ecc24c500cc49001f231f74f7120f55004d5621655ba535c8c8a91d2fec5656526974aef9f08d835f6c3c7c570d047312da759708349121ee9f7078926baa412b4ae8076f6b7f2bf46ffe08878e0281bb42ace8eca796933daf7f65530e30eb6b0695a450e50aea20fcabb5fca187f8ee62b93dee581774cefb953b396e5b8a1e3cc1062b001082aa5a434d9f03407c4239d0fcb779eba5a32f473d142ac92042c2b140f12a0181a4d98a0a5a1c80de2363a80dfc365d26e0332ee63e84500f086fffded2d72500cfb5b3b16aefef5d5808f29e1c572df8af9ca90b714fe6c71a1097e58ccb7945341445d2a0c271f5d15a1462be10d757de7cfd980459469387c5049cebcdb62a24cf04418634944354b4690d4974a26ca113eefe5a71b23aa2fbd989f7b6fcf490ed465f219e70b3397dbc63e21b9d3998c4580570c40a2e75cb6845b34236f5a38dde94ae6fac7a994b21e829bdb618b0910b71608ed7893bc927afa06b1d08d18f684d7972e5467ddfebe1982924658db3e5aee3e443f1cd7017d7a27e6e2620673e9afd67c69ae555ec3e67863f1a9ac7d653d38125f51db870ffa8887c08c455a536d70ea0cae525218e8d06865b553b17bacd52630e4765af1036c834e96c193523d8b3bc399ac296fbe53ed4bd454c669f01cb0915cf9fc03b54d93fbc37ace112d4643c64842b60ee6b979703b6448fe7ddaab8d2fc2d417a12f138d61cc3ca311aa09adbad1a0647a62208ca7f9f2a9e6a6c42e6ae926b15d094886a7d6ae787c8238ab4c235541b1432b9e9407d18a0399dfa98b8ee84ccbe16bf8c30e7cf7071ab10eb8ffb0334d2b91135e3294efd14dd06db46be1032a472cdd54bd015f2937fe3d7d691fa9d0b55a0d5d17a9"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1000000000007, 0x200000000006b, 0x9, 0x1001, 0xfffffffffffffffe, 0x1000, 0x0, 0x7fff, 0x1, 0xffff, 0xffffffffffffffe3, 0x2, 0x3ff, 0x8, 0xe89, 0x8000000000000000], 0x8000000, 0xa64caa9dc5e57732}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000008000000d5000000200004809500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 7.82358529s ago: executing program 5 (id=2788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbac1e000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff800000000040824c8c92c97ce3df000f"], 0x174}}, 0x0) 7.642782754s ago: executing program 5 (id=2790): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001a40)=[{&(0x7f00000013c0)=""/210, 0xd2}], 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0xcfe5, 0x4) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60fe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0xa4b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x4, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x0, 0x7f, 0x10, 0x8}, 0x56, &(0x7f00000001c0)={0x5, 0xf, 0x56, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8c, 0x10, 0x5, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "0a9c73833badf3578761985248813c7f"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x88, 0x7, 0x10}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "76c7e5263ba239e9a0a94b3237cca4f4"}, @ssp_cap={0x10, 0x10, 0xa, 0xf2, 0x1, 0x3, 0xf, 0xc1b, [0xc00f]}]}, 0x1, [{0x66, &(0x7f0000000240)=@string={0x66, 0x3, "6a1958cba33992c1104c222125c57cb3c2ab73c4bc61305b8ff13906d276914df3824c1b39450a116db8b01ed4997f136cb6baa50a380b3b13006e071c42beae4fc7f3fdf68b050143eb91381a233ff476e24facebfac20f689b3751c2e5a77d2b5052f0"}}]}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000001340)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x62, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xd36}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd4, 0x68, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0xf, 0x9}}]}}}]}}]}}, &(0x7f0000001800)={0x0, 0x0, 0x27, &(0x7f00000014c0)={0x5, 0xf, 0x27, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x7, 0x7ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x9, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0xd, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf, 0x3, 0x8}]}, 0x7, [{0x3e, &(0x7f0000001500)=@string={0x3e, 0x3, "4c1b0fd38068e645d9fa6b27cbceb5ca07ce52851c98295917d582363ab133d97c9696bb6885814eb1cd3d934322a7dddbceaea97fee24195cf7b2b6"}}, {0x6d, &(0x7f0000001540)=@string={0x6d, 0x3, "73fc65e50906b37f2cc0d2b3c976f45ed1c75bb9e0ec215db002ac3df3a8b58d025b572c7eab3aa022f4e3b2377fa296f4b950606436d6d90731d9c0ac9ab78857d7fd8700333a3d150e7499d5db6a1a28029bfd27feb4c5b86886a81356226b2c90cee072007a97f5da5d"}}, {0x38, &(0x7f0000001640)=@string={0x38, 0x3, "616cb6d939ff7dad3186b942ac353611d8108621cf3e53da6dc885b14fa570c6744a49a145ea4835c462957383acebce4f4955ed7e27"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x401}}, {0x40, &(0x7f00000016c0)=@string={0x40, 0x3, "e1dc8d314338e4903baecea92f67825caa8f6a1845c3b3d17643a02dc36df4b4dff71caf181b8e7a12bf8101a8b92a9fb17e3707f19f00bc15441b4f1a00"}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x2409}}, {0xb2, &(0x7f0000001740)=@string={0xb2, 0x3, "f66b1ca1f8490b7d8854b2e32b698cd9cf57b63a80b4daa77a9df207e13946615e574bdfab7cdeebafd2ee49268f9f7b1b873212dd97300f57d6f67236f027d870e06593e4aa4d5a4b7af67eb07291fcb72482572c94228ee73fdb61bff86fd6d5d53beb463db11b058bd8a875fe3a395f36265fbfc5dd906b0ea32959273c5ec989ca84fae52b65a127a3d75c10b3787fcce19c7acea080c02f6c7b878a7e4551c5843e7810b2839dc8e1663c18d156"}}]}) syz_usb_connect(0x4, 0x975, &(0x7f0000001a80)={{0x12, 0x1, 0x200, 0xa8, 0xb0, 0x61, 0x8, 0x1784, 0x8, 0x1ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x963, 0x3, 0x7, 0x8, 0x90, 0x3, [{{0x9, 0x4, 0xb5, 0xfb, 0x2, 0x5, 0x12, 0x79, 0x80, [], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0x9, 0xee, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf3, 0x3}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x4, 0xf9, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x867}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}]}}, {{0x9, 0x4, 0x2e, 0xf1, 0xc, 0xff, 0x0, 0x40, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d8733a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8000, 0x8, 0xa2}, {0x6, 0x24, 0x1a, 0x10, 0xc}, [@obex={0x5, 0x24, 0x15, 0x8000}, @mdlm_detail={0x71, 0x24, 0x13, 0x7a, "755f85c01462d59cb1e4d4160cdd9c24bb8876dc80c0a4ef938e9443151b65184d394a55ede63eb0e5459d64c009a39a76c566de2e156085711b8aa0f5b1f0205b67d0153c5a2f01d3c87d2ad6303598098e4535441f99ac720425d2aec4a8817daa9562ef8263b48c58a7370b"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x9}]}], [{{0x9, 0x5, 0x8, 0x0, 0x49970f6321f5581c, 0x0, 0x1f, 0x8, [@generic={0x4e, 0xf, "f65c9d4b71fbf1060c7b8006c575a613d6cebdf7a6e38d34c6f77d4ab0f840199ea5589b46eb01e1274e4f0e5464ec1a936ae8c3b24471e88cfd31ad67f1ab6501c453369bf2a4182f121d63"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0xe, 0x6, [@generic={0xcc, 0xd, "e085ae9980938f9946ebce9041e50c91316785de8dc421f37bb865bf5726fb2915067da3ba788aef9e476af1f2b7b106c075d42ce27128e59f42ca036be8f7652440a652807a4b1f986f6ebdcda56442fe615dc6198ecd2c766100d14aa02ed95db5498a0cb7925da6d71f44b1e0581b991075706a327ca3edf9f3e8bea0eb8369838cf7c92576a685d598645747a2a318d5e960fa53d3a58161087e8a8e1120a2642e818bac7b6e63015b483a5dfd0e1587e0e95ed7c2c95b7dc5c4e74f988e1b0fa78ab0fc2e5eaf53"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0x13, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x2, 0x81}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x10, 0x3, 0xee, [@generic={0x82, 0x21, "072c41bf9e00fc32fc9f758362c03415b897ddf69a6dc5a900bbb45517fc036d857a9a6aca20ca753edd87bd7d61bb0aa416edafb97b12a70b36714b6778a2433bdf4e547bcfe000efa485cbb7eebe779ae89aaec046eb3998c951f826496f03006e958de0ac325d0a2d7f94ff46aaa734b74332108eca37c71e04ef6107c70b"}, @generic={0xaa, 0xc, "863cb7f3898c939c6280b078e577367e34c0a3906c20df640a8423f8d17c9a43e1257e5640ad5faee4101e03a104d8e9d8e7aef6699f2e089d3b5d669d66df22b6cba20f3a07084b8006ab32e84e1b3a6f56f8626e26206618ccf3c4bb0ece0203373d854b6b4e1ff4f62911ea02fbd7174f1290884ecabe6a6f857242229eed493ec17b69cf8212994c1d2b47907db604eabd73d158b345580b713f197af37443814f44ef5de8d1"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x5f, 0xd3, [@generic={0x6a, 0xb, "2cd215aeb05730897b05d19114e587928c19439c17bfb9ddc0cd14facfdf0e8f2424bc4dc176a7aa787e57710b6d4414c2d4d5964c07dfe74fea484c9691844916f16f34967686868520209cfc4efac275fee51a36f2f577c962cbc69ce95183a4dc7851fcc20f67"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x1, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x9, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa8, 0xb6}, @generic={0x9d, 0x31, "416e5b991b2c3e585b38de1a9a544c6dabe139af7c814cc0652e10ec1e154f4a331f3c0eef4a1bc79d3ec31b779174ed9cbc272255ee216e1fcfe1e3e788938cc6f60c64a5f5f5e65eefab72ce475cb124717897a669431f70a1afbeee7b31256f53f5312cd7d9f1445291ce485973fcc3072bf26c32e64dbfe03bbbf782938369afbf47a08285948904b7e3daf45e68df7f2c19820165d8566a75"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x8, 0xb, 0x9, [@generic={0x31, 0x6, "8c50393dd77c957348b4999e3c09a73d54301528bd2ff0fe9be4d6f0da8239260e1ab194a12f1f148f0548337c31a1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x5, 0x8, 0x81, [@generic={0x5c, 0xf, "d03f6429314049da21953a4ff4f441b5c2affd25f4bee771b7f0ca50b0bcf1e9d0166e9c4a21cffeba066f013d7d4345acb4652e774f4be24a0f2a8341d8cd453e0e602bd0e6f9636b5a7b16f78a600cacdfa0efdb3d77fbb43e"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x6}]}}, {{0x9, 0x5, 0x5, 0x1f, 0x40, 0x2, 0x2, 0x48, [@generic={0xc5, 0x24, "fbc1a187b916a93f26f616229641050e5cf6fa03979643cc54127c2fde4807733b2e81802244468072a0f3446d032fadfd8796461c8a2d12800683818dad5dbca50e4e32775e6e775a2575cbcb500d57af119190e97b56f3d48ad525bda4eb9a2cf96c43762b21c397c9c2a95fe7bb80de7f202e06b4e72035e81c6fa101cd467ce8114d12c24a9708b822616c27e1ab1770f424b5a95be591d980338d086cfb096bd8f59b63ef701f59eb125151a2b477377cd4e3f935cf14e5b7f5374c19cdefd6ad"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0xe, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x4, 0x1}, @generic={0xcf, 0x21, "4d38766b9a067c12411fbf3962e96df2d477f17610976a7423518db89285821d084eed7897cee3c5295afe4a5b87c28993f37c3ff4918d28169a813ff71e7be49e713c70b7bd19adeab356f740565ae89c535864e80291362eeddffc57a4cb6f9387f460bcbcd596c9c8f9bd7fdd92b3870986c48937bed627546befd4275382e505cf25dea34f9ec132ac8b0add58bace464be4aad9851a35f53c0691efc75249ad8b2d4020db4bd4e367bf3ffe99067a8fe968360c9129fda2ebb247453e229082f0ab4c104b9b93e8073569"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x1, 0xe, 0x9, [@generic={0xad, 0x71, "1a291a85477ba3486e4bec61add864191edfda8193956a588d269dd55cc47c8021888e37fef572d569fc3ada7465951815708c660cfe178344a33e8b11d1c125238f0008b10214e4b72907543ab9bf039eb41a7b96aed43c432cb9655437505e7f339624b8fa7ec11576f4533785254c92d8cd74d25cb01904ccf8a6bb0773d8d0113799458fba3f64d4b12794e37686f94374478003191b691240033b1c6ee8a44a9d3eb835afaad8d9e1"}]}}]}}, {{0x9, 0x4, 0xa, 0xb, 0x8, 0xff, 0x6, 0x33, 0xa, [@hid_hid={0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x26b}}], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x2, 0x2, 0x5, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x40, 0x10, 0xf0, [@generic={0x8d, 0x7, "f4ff415cf64f5535ed445982b13c910378ab2c03a3f3dfb446d590a59402e028effb879319a90aa87b7d2f5b6c2f7709f82d8590644e7cf6c2b55afdbb50c5ca9d7080e07ced5f17a21bf0d51e5d0c24463ff844b25b364878f39b640238e14d9c15c9bbf061bd030392dd40a998c22b279676b55d55098039cc6b42359999916624650fae554fa43b5ed6"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x4b8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x5, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xd}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x7, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x50, 0xa3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x7, 0x8, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0xff, 0x7, 0x40, [@generic={0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x4}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x6, 0xbe, 0x80, [@generic={0xb7, 0x7, "4b78b93fc56b3fa535143e80143e370a92cca82855f7b08f07f618ec59c0ff65129d1420caea2b2bd1588340622e7a2d9e92150b84c7006ba12702539c1b6e0df5772ad0967013d834b9c268576ad6a3e50b6497c4b7c858798714a9a657ae13937e0c296a557875f36e59bb0b7a489c56648367fe1d6864b567e49cf891435b2421b7210a7c8fadfeba5fde9a28d6a189adcb1335e01d3fd95b3b735ba705f9a122341d1df524f127e0c68af99a1f5c6edc5eb87d"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x3}]}}]}}]}}]}}, &(0x7f0000002940)={0xa, &(0x7f0000002800)={0xa, 0x6, 0x200, 0x8, 0x3, 0x9, 0x8, 0x5}, 0x2e, &(0x7f0000002840)={0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x6, 0x8, 0xffff, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2c, 0x10, 0x9, 0x101, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x9, 0x0, 0x8, [0xf0]}]}, 0x3, [{0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x40c}}, {0x3c, &(0x7f00000028c0)=@string={0x3c, 0x3, "529340e972c2eae9dbce16bcf5d398dcc7dda8189c4d0e19678e3b88d570321533ef73c81c41ec789a30466cde9f5d219a7ec0b831231f49776e"}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x44a}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) fchdir(r2) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) 7.423222224s ago: executing program 0 (id=2791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000000)={0x4, 0x2, 0x3ff}) (async) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000000)={0x4, 0x2, 0x3ff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES64=r5, @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES64=r5, @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x10) (async) sendmsg$nl_xfrm(r9, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$join(0x1, 0x0) (async) keyctl$join(0x1, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x10008801}, 0x0) 7.422166435s ago: executing program 2 (id=2792): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x24, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x2, 0x0, 0x1, [@generic]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x1, 0x8000, 0x3db, 0x5}, 0x10) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 6.640036611s ago: executing program 1 (id=2793): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000200)={0x0, 0x22, 0x92, {0x92, 0x8, "7718c3bd4b611bc02e07298bbd8c9979188b61dd0412588449e35216ddb6edcf3334bf04e8276ffdc5dc1b4c3fb36e50ef087d2e42c801164961af635a1c2c380d46b310f5eef9f8ca7c726d018fd85d709b1029edb65c26ca1334ceb1612f4d3a9d3c6066f023584194ced7a59d651c94270d8737c5cf9413e386b7aa55fa9143c736d289e061f7c198d682c6ae8084"}}, &(0x7f00000002c0)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000440)={0x0, 0x6, 0x2e, "131bad84b2d4432b5807a73131ebfe5c028c41dffc385febf0717b59d73f7f7cf85cac7add0d6a8992a7ff847816"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x10000}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "f8746030004681fe9021c7d3ff1efb7a8a713683796a608e65036cca7d929ed241ce06e008ff08f3cdfa98499551c8"}}) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xa, 0xd6, 0x8, 0x0, 0x1, 0x6, 0x6, 0x9, [{0x6, 0x53ea, 0x8, 0x10000}, {0x7686, 0x1000000, 0x126, 0x3}, {0x7, 0x8, 0x4b, 0x6}, {0xbdae, 0x7fffffff, 0xa55, 0xb}, {0x0, 0x0, 0xfffffffa, 0xd3}, {0x0, 0x3, 0x4, 0x100}, {0x3ff00000, 0x80000000, 0x100, 0x9}, {0xfffffff2, 0x3, 0xe, 0x3}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0xffffffffffffff93, &(0x7f0000000080)=ANY=[@ANYBLOB="52bb46f8acd1", @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x40080) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x80, 0xb}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x80, 0x6, 0x0, 0x8, 0xb}, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x5, 0xf9, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "790a1f7daef400048f51502eaf5b08f8"}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x807}}]}) 6.177691803s ago: executing program 0 (id=2794): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="1000508004000a000500020046000000"], 0x2c}}, 0x0) 5.871723755s ago: executing program 0 (id=2796): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setregid(0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000005, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x2, 0x5, 0x14, 0x3, 0x7, 0x0, 0x8, 0x9, 0x20}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xfc, 0x4}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0x6, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x3, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x0, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0x2, 0xeeee0000, 0x1e, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x9d, 0x0, 0x4}, {0x2, 0x50000, 0xa, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xeeef0000, 0x8cf}, {0xdddd1000}, 0x10, 0x0, 0x0, 0x110, 0xf, 0xf801, 0xeeee0000, [0x80000004, 0xfffffffffffffffd, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet6(r4, &(0x7f0000005ec0)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000290000003600000073000000000000001800000000000000290000003e00"], 0x30}}], 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x20000, 0x1, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x400) ioctl$sock_inet_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000080)={'veth0_macvtap\x00', {0x2, 0x0, @remote}}) r10 = syz_open_pts(r8, 0x141601) fcntl$setstatus(r10, 0x4, 0x102800) write(r10, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0xe) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="10c00000000000001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB="90f9401e7cbfbbe5bde7c9a6af223d4708000300", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.81155345s ago: executing program 2 (id=2797): r0 = syz_io_uring_setup(0x10c, &(0x7f0000000580)={0x0, 0x334d, 0x10, 0xffffffff, 0x2e3}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) (async) io_uring_enter(r0, 0x749f, 0x5, 0x0, 0x0, 0x0) (async) r3 = io_uring_setup(0x107090, &(0x7f0000000100)={0x0, 0x48cb, 0x40, 0x20001, 0x3c7, 0x0, r0}) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) io_uring_enter(r3, 0xfc1, 0xf850, 0x70, &(0x7f00000000c0)={[0x9]}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) 4.483853763s ago: executing program 0 (id=2800): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404355420000000000000109022400010000000009040000010300050009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x0, '^'}, @main=@item_012={0x2, 0x0, 0x9, "20cd"}, @global=@item_012={0x1, 0x1, 0x1, "b3"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404355420000000000000109022400010000000009040000010300050009210000000122070009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x0, '^'}, @main=@item_012={0x2, 0x0, 0x9, "20cd"}, @global=@item_012={0x1, 0x1, 0x1, "b3"}]}}, 0x0}, 0x0) (async) 4.27987677s ago: executing program 2 (id=2801): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ipvlan1\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000100)=""/240, &(0x7f0000000000)=0xf0) 3.984083307s ago: executing program 2 (id=2802): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x90, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'rose0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x90}}, 0x0) 3.820965661s ago: executing program 2 (id=2803): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0xa500) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0xdf, 0x8, 0x2, 0x2, "4e1b31a8597426d462e7339997900f37be342cb45247ef3e1cfac36958322132"}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000180)=0x6e, 0x180000) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffef) r7 = syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0285628, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc}) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x1, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xb0, 0x0, 0x3, [{{0x3, 0x1, 0x1, 0x8, 0x1, 0xb, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0xfffffffffffffff7, 0x7, 0x2, 0xffffffff, 0x0, 0x1000, 0x9, r5, r6, 0x101, 0x9c09}}, {0x2, 0x9, 0x4, 0x6, '\x00\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000340)=[{0x1, 0x0, {0x2, 0x0, 0x6}, {0x0, 0xf0}, 0xfd, 0x1}, {0x2, 0x1, {0x1}, {0x0, 0x1, 0x3}, 0xfd, 0x2}, {0x1, 0x1, {0x0, 0xff, 0x2}, {0x3, 0x1, 0x2}, 0xfe, 0x1}, {0x2, 0x4, {0x0, 0x0, 0x1}, {0x0, 0xf0, 0x3}, 0x0, 0xfd}, {0x1, 0x0, {0x1, 0xff, 0x2}, {0x0, 0xf0, 0x3}, 0xff, 0x1}], 0xa0) getdents64(r8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 3.311551528s ago: executing program 1 (id=2804): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000240), 0x4) recvmmsg(r2, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/130, 0x82}], 0x1, &(0x7f0000000280)=""/83, 0x53}, 0xfffffff2}], 0x1, 0x10000, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x4002}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="49de8fc82ce1af895b", 0x9}], 0x1}, 0x4800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x98, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) lseek(r3, 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="113838fd30", 0x5}], 0x1}, 0x4004000) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x141, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) 2.835536751s ago: executing program 5 (id=2805): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000380)=""/167, &(0x7f0000000140)=0xa7) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x58, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x5e, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRESHEX=r4], 0x68}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000400000000014000000e3de2a7b01baa1c5ee777de774fc7987cca41989e5a9dcf94d38f3ef20484d21216e5add720480a268efe4f9cd19bb8e4a6e49f8dd13072adee20e8ad7c44e4d647118230e184d558fe3c2690a95cef92fcf51dc5bf7c2367fd5ec462b57b6c3446294d19005b636c43882e7f54996ccb37e46a3d63322b226358fa986f2fc78"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r11, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x1, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x801) setfsuid(0xffffffffffffffff) 2.804917908s ago: executing program 2 (id=2806): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x56, r2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.23696755s ago: executing program 3 (id=2807): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffff9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = dup(r1) fallocate(r2, 0x10, 0x0, 0x72000) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r0, &(0x7f00000001c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', '].^:+%:[*/}-$', 0x20, 0x7}, 0x35, r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0x693b59fe494af659, &(0x7f0000000280)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) 1.72821383s ago: executing program 3 (id=2808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) getresgid(0x0, 0x0, 0x0) listen(r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000091, 0x0, 0xaa8a}]}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000600014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x3) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0xc0) fcntl$setlease(r8, 0x400, 0x1) 1.54768733s ago: executing program 3 (id=2809): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f00000003c0)={0x0, 0x2a37, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x781502, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000001280)={0x1, 0x0, [{0x40000082}]}) fchdir(r8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1.152886788s ago: executing program 0 (id=2810): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x20, 0x0, 0x1, '\f'}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 181.415268ms ago: executing program 3 (id=2811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x602000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0xffffffffffffff7e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x80000000004, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xf000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 40.339573ms ago: executing program 3 (id=2812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x14, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0xf5, 0x18}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a40000c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=2813): ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000140)=""/199) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003040)={0x2020}, 0x2020) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10) listen(r2, 0x0) shutdown(r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4, 0x0, {0x6, 0x2988, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000001580)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="300429bd7000ffdbdf2509000000040002801800078008000200050000000c0003000b060000000000002c0007800c000300b48a0000000000000c0004004a000000000000000800010075874b5708000200040000001c0007800c000300ff7f0000000000000c00040000010000000000002c00098008000200020000000800020008000000080002007f0000000800020003000000080002000900000070000180110001006574683a70696d36726567310000000008000300070000000d0001007564703a73797a3000000000380004001400010002004e21000000000000000000000000200002000a004e21000003fffe8000000000000000000000000000bb0000000008000300fffffffff410068008000600000000804b00040067636d2861657329000000000000000000000000000000000000000000000000230000006d74a57b345b002083b2931286ae179adafdd48c1cb0fab26f03113c6957a6c45372bd00080006000400000004100300af417bc71078c4db1acfffc1eb662d6a399f161928f7ed178868b57f4a47a824b0b7eea9ae36c510d3b0c44831097f9908647a36e2bdf6cb486e62eb1ebd4255499509f2d547284d7414a89f5fa046ebaed650613d5e7c7447b321cd0d768726ddb40bc67f3e59861fb926834cdf1f5412b0124cfa4e09ae69c5f2de84c92ec2b5550a9531016b940cb6e6f91f6ee8e038cea724a064ebb65aa35e2e9bb22c231eef9364704f244f4833ebe21ac0d60794760fb35dd288e66682d3ec2f82522d415cf51a428dc2a59c74b484ab5acead3f2442a9995dace6f3d667c57449b918d9625a0d5c41956650410584034a39537a8e9de58b084f911658fae10cf0f84bf92e28f37e79cdf07168a6e51fefd72822f9d662bf8cb34329333fe56263abca6364d2ebfafe5f2ccd87c58da02622bb932df06aefac04325f171e6c551a77af4ab65fca1fa70cf42531599d553b091a019d6aad7af199201402b76b1204284bc819af9fac5db028e319a5fb2e78b36d414659c96d11ae06124c97bf24ceebc745159e01fc28145d04ba4cd09bb6dc78881e1b5e2593da7d3c10f3db21246f66a42e950d4a024cb9904488fd8d9b6c7bca46baeced465ee6ce906c94fcc01c85b34e18ac7b651f9b97c2a0dd4bff4b1d6e5f6ddbdbe7f0da11b67d2c2b8cff1fca035785ac601cc39871ea15a09b04146125caa18c8ba98d4741f406e4a70c3ec5853f2c8f6008f09b7a2893f34eb756eb27be33ed1d2bb7286c559bc18076d0f5fcefe4bc5edcec5050f2cc673cd01f70df992dec1b8211c0df0d74a53b00208f1f4aa164a11b07439c8176121a6de96da06434d7c981a9eb39d1e96e3247b85c7c647a253fccb4f013c4a3d13f6f61ebdf33d7969a7439909899ef43d69d64242fef0700332282b7d695c9c8a367f32bbf4c81bef2f35ccb66a66a8ddd0b260e9110f1a64de04f91e4af527c68101d3cf490d26bc776946cb111957315c14a30d50d3a2b47cd7ea0f514b8741b152f36c59a12fa8514886189a124a779c2017278f59fdc477cfd90f8b09c9b136c38ee7128f7ea98167667f7a086c7cdbf2304f58a3bf1b0daf2c133240ec7bbafa1b5d5389cff17466f726f665716457cf8b2e14100c1afc3c72cdcf001f6902eb6f437a588426844cfc3b71566152054a981caedf66f8281d353c66411bede8f7bae2d05d6a9b433325f3d7d8d670b6566189694e2aea5b9f212921ef1d8465a69b233df2307d982f6e82ff926067c0ad2c6bdca2dd6f6c742c055263a16669230921599dfb30465829ad642ebe34053b2aa8a896b28cae6188e2504fca697f80cc3783e8be33f6ef551494fc257a4b4d936ec943d301cef59ae12ad400e27830290899f7b4bd94ddfca38b438875fe25a44d5c6973b0fe21843ae593cdb83f24a208ed71a32b7c4b90e84d3d2c10a7a1067847e73f93751a6bbeff42d2134498969bee278825097a8832dc720cfe34162efcd82b4021eb3de32134db1576263ea5720bd1ce8b189d57ea9091b8df5b0f8ba4cbd52e85e2cdc41adcdb6021a35b6cf4c6c7981180fc81448cc48b9cb1c5500ed599436b2a5cfac88d171dc1e61518dd6c98100d95ce25e672de0714f174f66a1189c82e3c5d346dafb6062d69c7ab260ebb74859088821cecacb7516862150dcb6fe80cf0ca81e1b4c5505512ac1520ebf6134a973d252600f732eed50548928f264cbaff45e0915ec2102c6069fb86ac42bd7a55680f24702f017ab8ba83180919fae6d5c05b65f017ddcef530e19905685892e6cae7fe918e719e7aa00dc31807d681306569dbed7503ad128b705f756ea3a6fcbbe58cd846843e37f795f77f80dbf4fce379d97e63c3ce413772889e07d3917a71567d338f42b1a64d6634dbf9a6365af1acd2f46a42ffa2d9e69e243a8eaffd593d4e1339483c13d3aab5a885e2a5c0bd0fb38569304686cd12a388a59ac7d21183e13dfe8b758161433cfd78a31c3a089bf4f6823709f050b870c2a5a04c6b3898b5c401181b7801e459f565a39ca2c5c4e85e088a90491354f55b260b3b4026ce59ba9b3606bb84257e6f16d06ee9b86647151e8b988570288684cf93e4da5dc8e023cf39e0c99cd5d83979a219ee716d619811856a9db1ebdcb5f45a313eff6dbf84be5bd30a1fd99a3fb7e4f7047fad483e6be7e12f36e791bbd63bdd70857a0ed802ef4efaa5fa3993487072ac979d0050d938fc6e60f03fef244e60d2f987052d06d9b1e3e574def211b8c1c2feac3c11013781e6484643a68f251281ebd9fa10108afa90b9422e8553ddf3ca69082c90f55c8cd4ba7f98dd30aaec1058efdc358267745cb5b9eaced8d77605b532b8bc4374a1a436e34f0ecc03cbb991e32c86af6182098c057445e13b831a3f4365813422bb76d506bb119d773489340a41bce9953c6599223a8eae9125883aff4b70d85d2c1bd46192067f24763d0faee9151c338d1d8bda4a004cedd0421ecb689629fc93b864b2d483ae0f32a2608e5a0e4f72fddcb2cfa74cae014afbb0e11284e5036e8f1f30c58053028c343995ae3f614acce667d976b808813b136116d8c0f82f4fb8e63c967c40b2c5daabcc1d3f5243e1b6e1890949ea1b24312e5f871cfac5cef2d58e7a374ab49f9cbaed4dca82afa221e41b6e5b7d106577fbc7b76f23cd9d760108c79d390adaafafe5e073152384746aa1ef19a925a7cf9a325e3ff940a8abdf4e57e2927a41e76c3276380f051aff0a6bbf48a4f26ebd6664e796d9af046bf01a29bed49128dc477d66aed970468f118abf31043347e198f78fbafd201bf9784caae0296673471c2c2d39fc4dee8d5f015f1ab98b6e8ec8f4957b5c2623edc5fc9cefa0995908dac49f79ae4564a59cceb83a273ab2086758ec5288efcc1131a82add47e94171ba1aabbdcafbcee2a49dafec60b1ec449a80bacccb09d03d1eee5e365bed6b98ec413a97fad8f8ec8ebe66102e6aa137480d542eb4cce1a392ce3efd942b4a139eede43568ddcfeecc6fce322c41b91f49f32ba9b273cee90985d734975a80eaf1faafca4e62b843604aac000daba7724cb036b9ac1191e574aa91136819f891569f5f5519bb349e20ae3069ab643d40939843776f80eb63355e124e7db7845a975084f811c43fbdbe1eaf8d9cc85b91e4640e5bfb5644f10eaa67efdbe053a0c1752d1212617cd1a3631b83b79f7c3879c4e870beadf22560ae101b2e7544f061f58b44dcde3fbfe34a428e1b23a3885c4055c3ac59bc39ac47d055b15bc3e602b905c5e7c55565336c36c97e6d718c61058b740ae707a34446a41f00d6fefbe383a5d6f048175c0758feab242c3f7a5454d764849e815daf5342141f611d01c5920b93a1a2a994634a0aecfeef170b04b172c948c75cef1f91e01134a875f2a4e8328cf47f5a36c2803ddfb5d27df201cacb97e99e1bae8ff6b6fcc2d376433e59ef990d9dd8736e8df47b2e8c4b26f0ddbc5a2ad8ae0a2caad57b1e3b00f83dd162d62711b2df7ea3b99f5ed33f70125ebfa8c5bf4a40c675bbd8886777fb77c4e7238f7fdabfa2fdc4110583affdd32fb52662cb1d4c1ffb55bdfe0986d87afffce775c99cfc812fe6b51d8d32ab65598c54f3e14a2fca0d09171f440ffaf5c2ef2f33e2e8ddc46b88e498f93d6ced9263f2f603becda1ee5c503ff1b48db88e4f87c1f97466a493515daa6f55c7f088fef1fd2425ed58a4489f347d350a3ef3ce85b9f9442e1c678d695ed169846aa1f494836db3db3c9e2752d64050d115a06f4db507ba017ccf7e50d320ed10736fb50d96d4bc792510b699cd116b5a333c62c660d28a9a6ce606e567640abe5082889455ef416b41ad7b989668afea14d5131527fac77a69eadcf1bcd74a4aeb598b2549e60abc5555d850e9efce217ab2190e1b7e02aa8b6275c9743fd9b4abbe7e833511655f6a44012c3b0e24f68d3284cee197693dfa4064f1122b5a1a70be776c78612cd25aa37e646c91d7c9fbea419e1923aef84e799a95ef6ad5e46f041eda7588e3f7882c4b64c4ec9a0ed21aa4866472d56230cd6213ffac3a3e42910efe25b41ee514b4be7fc2ef6fc7bd7bddcbd02cd409279b2253b2e805914a84b76aef6622f075fcbd3ec522c77c3d6077ec59d8d2e7476357a5c047dcb1e6a1147a34ccaafe4810de7f37c22cd0942936a545ae20c3c213cbeac5fc8bcfbf1aa0f764e23029fdaefa26467475c0505c262a470f73b4b54c9a7a77bd73a49b97ae5bec74d9e70c59fc11aa32c9ff332de68f94a42ccd3c93258e2367d1cfec3649f2ac372c82a1426f489cfa83181e9b478c210d94d3dd5ecf3fb8863515d4399cbf979fa185e8cfcb733c132397fbd3849e8e2b30ab760432cd379c11ea18bb93075d6374656dfa42230d57665da94627ae5a503896e54c4d40e864da7d3e8741075181cef56d867b502d7684a52e4f8874b7c2a0a0050b79cc0cf59ac51149c0c1bd1a5cae1630b24197c2d2fb5439b3fb5dc843e75bfed14638028fa50ea1636df018a684c593b3979774d585402628d673a9335f91997e88ee9d9a1d69831b23c97b9b89680aa2f0680b06cab37d905ae0a9105c817b184907bff8d07254f0a9980adab042dc9f60cad89e89450ad55363a67656a67abacf4297434d6ee83b7d54511d51edf32cf2af8eb2150c5f0cbad526c18968b827c6ac97b8d39a972fad7b6278d67158e765a8586059eae75eb4aa5f1a1b60b5c1884a866e0ee18708de8498e795f14e552cbcf5cd9cac21b9ae85500e0fd7e3c3c662e71c120c27d96cbfbfbfa2eaf678785f0d6b67bfc34622aecacfb935c2879d8b7790f563a5abf0e5e4950b53836fe66dd4cf86bf62e7e9f56c029b17b0c691ac7da7320f7314298441cfcc139753a632d20161bfb337c7d0c58ad74237a7a333c1a328264f145e9a928e4814501931784e554799375efb50ad84c3149a6e65e86d9c515f7ae87fc1139986594eb9dd6bcf2c3640ea314a827af222139a726fb8979a753a69850a201ea4ce7784f9e2916f77e776958d712b7514ef65a9ede2ff3b5e612fad5661ad1550cf2862de7e3b2268093fb0c176bcff172e130bd36f231bfd0be189434b39844616656cd77bbb1475913cd8069d72b156142926dc78849ec5b9d2f62465e5a1d2bf42373c50b0e5ff2aad53b3fa7a44839cf1aa2620fe84133fa14c72edc24040a8790145b3a0af0f9cd8f8343a1c26801b0f8640a7828fced842527a354d69c1709569d3d3f912cb507827216e89cce8a50860e84c0b0d4f4ff8f0ca99499fcae86dbd87c529c876d167aec3dc214b4293439e2c16370313769169f91c05ad4b9af3c6dc0628bb68f09b03664648050af5753a84e1dffb643ad7a448216338ffc7b5c72219d48e1ceaab534ff8a3637e4667e60dd8703b8cd16a81b956fcc6fe7cfa18aa45fdf5f601eec008470abd61d23a30bbe63e23f2da5e306a698187af5a0ab27c9e47c1a54216b6ecb6e1bfdaec91103c1a030e61d47968555aee8003441756197c0736b3c208dfa1098cb73b4b677a0dd8f869c989c1cd012f6ce32b04e5e90fde896ede0e26f0011d4cdc5bb16e4a89903a1ebdf113d1c6c8c2f3bc816964a30d9d402c7b0a0c010f855b69a964592036cb0524d7785193d12e496fc3ab80d9374976750f033f2369540948f0bae55b134cbabdda7713afb9b0b6469616a37499faf699c2e97953fe781848634bca687873dffd6873af3cfa8807c12e8cd8d0b7b3e15d23ee1f7c18f6ee0031ff64800040067636d286165732900000000000000000000000000000000000000000000000020000000fb1da8b31ab929671278616d5731618c97d19f4718a1307588e82b39a57557cd39000300b10e41e27a56a5a33b49f7aecd473a9b2f48d222525d236dfab9bb11cc5867e52618b02dd897ae5d87a06e980d0036f68fe054908b000000040005000800060002000000"], 0x1208}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008801) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x8}}, 0x20000080) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES64, @ANYRESHEX, @ANYRES8=r2], 0x80}}, 0xc851) socket$key(0xf, 0x3, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4000099}]}, 0x2c}}, 0x0) socket$kcm(0x10, 0x2, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): writing: No such file or directory [ 697.270935][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 697.375914][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.627460][ T8036] usb 6-1: USB disconnect, device number 10 [ 697.796548][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 698.073355][ T8024] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 698.155476][T14677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.777643][ T8024] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 698.788123][ T8024] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 698.791055][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.800779][ T8024] usb 3-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 698.818629][ T8024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.827064][ T8024] usb 3-1: Product: syz [ 698.831284][ T8024] usb 3-1: Manufacturer: syz [ 698.836046][ T8024] usb 3-1: SerialNumber: syz [ 698.851001][ T8024] usb 3-1: config 0 descriptor?? [ 698.861382][T14679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 698.879971][T14679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 698.900353][ T8024] option 3-1:0.0: GSM modem (1-port) converter detected [ 699.043561][ T8036] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 699.069585][ T8024] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 699.811869][ T8039] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 700.079824][ T8032] usb 36-1: device descriptor read/8, error -110 [ 700.138197][ T8034] usb 3-1: USB disconnect, device number 106 [ 700.155680][ T8034] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 700.176376][ T8036] usb 4-1: Using ep0 maxpacket: 8 [ 700.187484][ T8034] option 3-1:0.0: device disconnected [ 700.195230][ T8036] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 700.220048][ T8036] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.233344][ T8039] usb 2-1: Using ep0 maxpacket: 16 [ 700.261977][ T8036] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 700.272805][ T8036] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 700.286100][ T8036] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.360756][ T8039] usb 2-1: config 0 has no interfaces? [ 700.369967][ T8036] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 700.415491][ T8039] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 700.474545][ T8039] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 700.501831][ T8036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.512361][ T8032] usb usb36-port1: attempt power cycle [ 700.558812][ T8039] usb 2-1: Manufacturer: syz [ 700.597295][ T8039] usb 2-1: config 0 descriptor?? [ 700.858252][ T8036] usb 4-1: GET_CAPABILITIES returned 0 [ 700.864921][ T8036] usbtmc 4-1:16.0: can't read capabilities [ 700.946925][ T8039] usb 2-1: can't set config #0, error -71 [ 700.972287][ T8039] usb 2-1: USB disconnect, device number 31 [ 701.074734][ T8032] usb usb36-port1: unable to enumerate USB device [ 701.124599][ T1212] usb 4-1: USB disconnect, device number 14 [ 701.306333][T14721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 701.314036][T14721] IPv6: NLM_F_CREATE should be set when creating new route [ 701.321313][T14721] IPv6: NLM_F_CREATE should be set when creating new route [ 701.514383][T14727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.526146][T14727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.703634][ T8039] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 701.743413][ T8032] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 701.767627][T14729] syzkaller0: entered promiscuous mode [ 701.786858][T14729] syzkaller0: entered allmulticast mode [ 701.843468][ T8039] usb 6-1: device descriptor read/64, error -71 [ 701.883399][ T8032] usb 2-1: device descriptor read/64, error -71 [ 702.093507][ T8039] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 702.163451][ T8032] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 702.233669][ T8039] usb 6-1: device descriptor read/64, error -71 [ 702.323956][ T8032] usb 2-1: device descriptor read/64, error -71 [ 702.345262][T14735] FAULT_INJECTION: forcing a failure. [ 702.345262][T14735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.358754][T14735] CPU: 0 UID: 0 PID: 14735 Comm: syz.2.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.358783][T14735] Tainted: [L]=SOFTLOCKUP [ 702.358788][T14735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 702.358796][T14735] Call Trace: [ 702.358801][T14735] [ 702.358807][T14735] dump_stack_lvl+0xe8/0x150 [ 702.358829][T14735] should_fail_ex+0x412/0x560 [ 702.358849][T14735] _copy_to_user+0x31/0xb0 [ 702.358863][T14735] simple_read_from_buffer+0xe1/0x170 [ 702.358884][T14735] proc_fail_nth_read+0x1bb/0x230 [ 702.358901][T14735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.358918][T14735] ? rw_verify_area+0x2a6/0x4d0 [ 702.358931][T14735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.358947][T14735] vfs_read+0x20c/0xa70 [ 702.358960][T14735] ? fcntl_dirnotify+0x1a3/0x6a0 [ 702.358978][T14735] ? __pfx_vfs_read+0x10/0x10 [ 702.358990][T14735] ? do_fcntl+0x77e/0x1a20 [ 702.359005][T14735] ? kmem_cache_free+0x195/0x610 [ 702.359024][T14735] ? __pfx_do_fcntl+0x10/0x10 [ 702.359044][T14735] ksys_read+0x150/0x270 [ 702.359059][T14735] ? __pfx_ksys_read+0x10/0x10 [ 702.359078][T14735] do_syscall_64+0x14d/0xf80 [ 702.359096][T14735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.359108][T14735] ? trace_irq_disable+0x37/0x100 [ 702.359121][T14735] ? clear_bhb_loop+0x40/0x90 [ 702.359135][T14735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.359147][T14735] RIP: 0033:0x7f681b35c84e [ 702.359159][T14735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 702.359170][T14735] RSP: 002b:00007f681c1d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 702.359185][T14735] RAX: ffffffffffffffda RBX: 00007f681c1d26c0 RCX: 00007f681b35c84e [ 702.359194][T14735] RDX: 000000000000000f RSI: 00007f681c1d20a0 RDI: 0000000000000004 [ 702.359202][T14735] RBP: 00007f681c1d2090 R08: 0000000000000000 R09: 0000000000000000 [ 702.359210][T14735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.359218][T14735] R13: 00007f681b616038 R14: 00007f681b615fa0 R15: 00007f681b73fa48 [ 702.359236][T14735] [ 702.373674][ T8039] usb usb6-port1: attempt power cycle [ 702.563497][ T1212] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 702.571048][ T8032] usb usb2-port1: attempt power cycle [ 702.755412][ T1212] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 702.766269][ T1212] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 702.776891][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.795255][ T1212] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 702.913429][ T8024] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 702.933444][ T8032] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 702.941400][ T8039] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 702.953869][ T8032] usb 2-1: device descriptor read/8, error -71 [ 702.963898][ T8039] usb 6-1: device descriptor read/8, error -71 [ 703.077256][ T8024] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 703.104591][ T8024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.115465][ T8024] usb 3-1: config 0 descriptor?? [ 703.131152][ T8024] pwc: Creative Labs Webcam Pro Ex detected. [ 703.134039][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.213856][ T8032] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 703.222577][ T8039] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 703.255151][ T8032] usb 2-1: device descriptor read/8, error -71 [ 703.262223][ T8039] usb 6-1: device descriptor read/8, error -71 [ 703.325005][ T8024] pwc: Failed to set LED on/off time (-71) [ 703.336594][ T8024] pwc: send_video_command error -71 [ 703.344501][ T8024] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 703.353690][ T8024] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 703.370605][ T8024] usb 3-1: USB disconnect, device number 107 [ 703.374427][ T8032] usb usb2-port1: unable to enumerate USB device [ 703.388360][ T8039] usb usb6-port1: unable to enumerate USB device [ 703.447512][T14750] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 703.854242][ T1212] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 703.865903][ T1212] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 703.873669][ T1212] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 703.882278][ T1212] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 703.993922][ T29] audit: type=1326 audit(1770847172.101:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.115145][ T29] audit: type=1326 audit(1770847172.161:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.153967][ T29] audit: type=1326 audit(1770847172.161:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.168577][ T1212] usb 4-1: USB disconnect, device number 15 [ 704.195035][ T29] audit: type=1326 audit(1770847172.161:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.247035][ T29] audit: type=1326 audit(1770847172.161:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.252508][T14765] kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 704.372052][ T29] audit: type=1326 audit(1770847172.161:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.417043][ T29] audit: type=1326 audit(1770847172.161:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.423702][ T7659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.440107][ T29] audit: type=1326 audit(1770847172.161:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.586765][T14768] syz_tun: entered allmulticast mode [ 704.606266][T14767] syz_tun: left allmulticast mode [ 704.722025][ T29] audit: type=1326 audit(1770847172.161:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.783136][ T29] audit: type=1326 audit(1770847172.161:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 704.973627][ T8032] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 705.075361][T14788] xt_policy: output policy not valid in PREROUTING and INPUT [ 705.146449][ T8032] usb 4-1: Using ep0 maxpacket: 32 [ 705.156317][ T8032] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 705.175535][ T8032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.280448][ T8032] usb 4-1: Product: syz [ 705.338798][ T8032] usb 4-1: Manufacturer: syz [ 705.351050][ T8032] usb 4-1: SerialNumber: syz [ 705.379410][ T8032] usb 4-1: config 0 descriptor?? [ 705.687411][T14792] trusted_key: encrypted_key: insufficient parameters specified [ 705.977941][ T8032] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 016 [ 706.334175][ T1212] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 706.583516][ T1212] usb 6-1: device descriptor read/64, error -71 [ 706.838448][ T1212] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 706.904985][T14805] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 706.983638][ T1212] usb 6-1: device descriptor read/64, error -71 [ 707.095316][ T1212] usb usb6-port1: attempt power cycle [ 707.413408][T14814] binder: BINDER_SET_CONTEXT_MGR already set [ 707.422989][T14814] binder: 14812:14814 ioctl 4018620d 200000000700 returned -16 [ 707.463594][ T1212] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 707.495107][ T1212] usb 6-1: device descriptor read/8, error -71 [ 707.733410][ T1212] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 707.764017][ T1212] usb 6-1: device descriptor read/8, error -71 [ 707.867745][ T8024] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 708.489321][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.503653][T14772] i2c i2c-1: failure writing data [ 708.510650][ T1212] usb usb6-port1: unable to enumerate USB device [ 708.641898][ T8036] usb 4-1: USB disconnect, device number 16 [ 708.824348][T14825] syz_tun: entered allmulticast mode [ 708.853653][ T8024] usb 2-1: Using ep0 maxpacket: 16 [ 708.865366][T14824] syz_tun: left allmulticast mode [ 708.892374][ T8024] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.933577][ T8024] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 708.957124][ T8024] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 708.993185][ T8024] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 709.029791][ T8024] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 709.033085][T14828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2357'. [ 709.060610][ T8024] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.070414][ T8024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 709.079193][ T8024] usb 2-1: SerialNumber: syz [ 709.089444][T14819] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 709.100958][ T8024] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 709.126610][ T8024] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 709.177567][T14828] fuse: Unknown parameter 'ä-CV5dëøgÉq¿Þ‹hâ»ÁšÍM¹ÿ38‘Š–j²®#Ø¢ÕØ2žºÔ–ÛQ·²E·‡omöÆÐs'óÀ9(Såçƒà]±[(3ü3Óµ0ò^{2×ÔrN‹aÏ‚\lïG+X¹JÙð´tnG¨j§þG*3Ý]‡WŒ¼ƒ5n‡í—†¾Oä»ÔœKêTñ ‘ìÁ¹EؽÅøùüËc}vgœi…ùÍ«+G ‹äò‘Á*©^ÅØA7ï„ö¼7Ø)b' [ 709.300963][ T1212] usb 2-1: USB disconnect, device number 36 [ 709.381799][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2358'. [ 709.453543][ T8032] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 709.461822][T14840] bridge_slave_1: left allmulticast mode [ 709.467867][T14840] bridge_slave_1: left promiscuous mode [ 709.473951][T14840] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.592040][T14840] bridge_slave_0: left allmulticast mode [ 709.607504][T14843] xt_policy: neither incoming nor outgoing policy selected [ 709.616560][T14840] bridge_slave_0: left promiscuous mode [ 709.625257][T14840] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.692277][ T8032] usb 4-1: Using ep0 maxpacket: 32 [ 709.701265][ T8032] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 709.723235][ T8032] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 709.737310][ T8032] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 709.748320][ T8032] usb 4-1: config 1 interface 1 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 709.765707][ T8032] usb 4-1: config 1 interface 1 has no altsetting 0 [ 709.776060][ T8032] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.787005][ T8032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.821857][ T8032] usb 4-1: Product: syz [ 709.828141][ T8032] usb 4-1: Manufacturer: syz [ 709.832912][ T8032] usb 4-1: SerialNumber: syz [ 710.173955][ T7659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.363809][ T8036] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 710.527198][ T8036] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 710.753463][ T8036] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 710.870566][T14852] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2364'. [ 710.899083][ T8036] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 710.942082][ T8032] usb 4-1: 0:2 : does not exist [ 710.974783][ T8036] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.028631][ T8036] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 711.064295][ T8032] hub 4-1:1.1: Invalid hub with more than one config or interface [ 711.072172][ T8032] hub 4-1:1.1: probe with driver hub failed with error -22 [ 711.081441][ T8036] usb 2-1: config 0 has no interface number 0 [ 711.109567][ T8036] usb 2-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.147987][ T8032] usb 4-1: USB disconnect, device number 17 [ 711.176842][ T8036] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.201317][ T8036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.236908][ T8036] usb 2-1: Product: syz [ 711.273926][ T8036] usb 2-1: Manufacturer: syz [ 711.304142][ T8036] usb 2-1: SerialNumber: syz [ 711.311948][ T8036] usb 2-1: config 0 descriptor?? [ 711.360201][T14854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 711.993665][ T8036] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 712.030002][ T8036] usb 2-1: MIDIStreaming interface descriptor not found [ 712.149763][ T8036] usb 2-1: USB disconnect, device number 37 [ 712.273161][T14866] syz_tun: entered allmulticast mode [ 712.299041][T14865] syz_tun: left allmulticast mode [ 712.720317][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 712.720333][ T29] audit: type=1326 audit(1770847180.831:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 712.802447][ T29] audit: type=1326 audit(1770847180.831:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 712.853795][ T29] audit: type=1326 audit(1770847180.831:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 712.929749][T14878] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2373'. [ 712.998707][ T29] audit: type=1326 audit(1770847180.831:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 713.093503][ T29] audit: type=1326 audit(1770847180.831:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 713.183405][ T29] audit: type=1326 audit(1770847180.871:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 713.355038][ T29] audit: type=1326 audit(1770847180.871:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 713.453658][ T8024] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 713.473897][ T1212] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 713.485717][T14892] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 713.532730][ T29] audit: type=1326 audit(1770847180.871:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 713.581837][ T29] audit: type=1326 audit(1770847180.881:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 713.633555][ T8024] usb 2-1: Invalid ep0 maxpacket: 64 [ 713.686185][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 713.703454][ T1212] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 713.713739][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.740607][ T29] audit: type=1326 audit(1770847180.881:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14871 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 713.774817][ T8024] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 713.792704][ T1212] usb 3-1: config 0 has no interface number 0 [ 713.822391][ T1212] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 713.861666][ T1212] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 23074, setting to 1024 [ 713.892187][ T1212] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 713.949473][ T1212] usb 3-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.990056][T14902] syz_tun: entered allmulticast mode [ 714.007855][T14898] syz_tun: left allmulticast mode [ 714.014512][ T1155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.023469][ T8024] usb 2-1: Invalid ep0 maxpacket: 64 [ 714.140208][ T1212] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 714.184375][ T8024] usb usb2-port1: attempt power cycle [ 714.189902][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.253982][T14909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2380'. [ 714.273784][T14909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2380'. [ 714.401733][ T1212] usb 3-1: Product: syz [ 714.681832][ T1212] usb 3-1: Manufacturer: syz [ 714.687919][ T1212] usb 3-1: SerialNumber: syz [ 714.719801][ T1212] usb 3-1: config 0 descriptor?? [ 714.734412][ T8024] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 714.746673][T14882] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 714.755384][T14882] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 714.803433][ T5922] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 715.033339][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 715.040783][ T1212] usb 3-1: probing VID:PID(0424:012C) [ 715.113741][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.127054][ T1212] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 715.137240][ T1212] usb 3-1: vub300 testing BULK OUT EndPoint(1) 0F [ 715.145162][ T5922] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 715.159780][ T1212] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 715.170672][ T8024] usb 2-1: Invalid ep0 maxpacket: 64 [ 715.213860][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.218846][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.257738][ T1212] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 715.327240][ T8024] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 715.338680][ T1212] usb 3-1: USB disconnect, device number 108 [ 715.368961][ T5922] usb 6-1: config 0 descriptor?? [ 715.639988][ T8024] usb 2-1: Invalid ep0 maxpacket: 64 [ 715.650925][ T8024] usb usb2-port1: unable to enumerate USB device [ 715.889381][ T5922] aquacomputer_d5next 0003:0C70:F010.0020: unknown main item tag 0x0 [ 715.915054][ T5922] aquacomputer_d5next 0003:0C70:F010.0020: unknown main item tag 0x0 [ 715.956402][ T5922] aquacomputer_d5next 0003:0C70:F010.0020: unknown main item tag 0x0 [ 715.986538][ T5922] aquacomputer_d5next 0003:0C70:F010.0020: unknown main item tag 0x0 [ 716.023673][ T5922] aquacomputer_d5next 0003:0C70:F010.0020: unknown main item tag 0x0 [ 716.056220][ T5922] aquacomputer_d5next 0003:0C70:F010.0020: hidraw0: USB HID v0.05 Device [HID 0c70:f010] on usb-dummy_hcd.5-1/input0 [ 716.133819][ T8034] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 716.177048][ T5922] usb 6-1: USB disconnect, device number 19 [ 716.296367][ T8034] usb 3-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 716.313433][ T8034] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.335320][ T8034] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.344922][ T8034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.359542][ T8034] usb 3-1: Product: syz [ 716.369609][ T8034] usb 3-1: Manufacturer: syz [ 716.376269][ T8034] usb 3-1: SerialNumber: syz [ 716.620001][ T8034] usb 3-1: 0:2 : does not exist [ 716.634824][T14930] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2386'. [ 716.669894][ T8034] usb 3-1: USB disconnect, device number 109 [ 716.728089][ T8685] udevd[8685]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.073717][ T5922] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 717.260877][ T5922] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 717.290127][ T5922] usb 6-1: config 0 has no interface number 0 [ 717.301831][T14941] loop5: detected capacity change from 0 to 7 [ 717.321045][T14941] loop5: p1 < > p4 [ 717.323799][ T5922] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 717.365142][T14941] loop5: partition table partially beyond EOD, truncated [ 717.415000][ T5922] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 717.429928][ T5922] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 717.442165][T14942] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 717.489286][T14938] bond6: Removing last ns target with arp_interval on [ 717.511199][ T5922] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 717.565137][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 717.593495][ T5922] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 717.603650][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 717.616517][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.679156][ T5922] usb 6-1: Product: syz [ 717.764790][ T5922] usb 6-1: Manufacturer: syz [ 717.769511][ T5922] usb 6-1: SerialNumber: syz [ 717.789987][ T5922] usb 6-1: config 0 descriptor?? [ 717.801782][ T5922] xpad 6-1:0.237: probe with driver xpad failed with error -5 [ 718.209377][T14951] binder: 14931:14951 ioctl 4018620d 0 returned -22 [ 718.218815][T14951] binder: 14931:14951 ioctl c018620c 200000000380 returned -1 [ 718.683473][ T8034] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 718.860798][ T8034] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 718.882782][ T8034] usb 3-1: config 0 has no interface number 0 [ 718.901860][ T8034] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.955974][ T8034] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.062201][ T8034] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 719.077404][T14959] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 719.149374][ T8034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.182363][ T8034] usb 3-1: config 0 descriptor?? [ 719.401447][T14967] openvswitch: netlink: IP tunnel dst address not specified [ 719.436165][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'. [ 719.702471][T14971] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2398'. [ 719.734174][ T8034] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0021/input/input53 [ 719.776862][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.851028][ T1212] usb 6-1: USB disconnect, device number 20 [ 720.033004][ T8034] holtek_kbd 0003:04D9:A055.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 720.308825][ T8034] usb 3-1: USB disconnect, device number 110 [ 720.340419][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 720.354160][ T8036] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 720.497196][T14985] fido_id[14985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 720.582956][ T8036] usb 4-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 720.602643][ T8036] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 720.615475][ T8036] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 720.629133][ T8036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.672503][ T8036] usb 4-1: Product: syz [ 720.682659][ T8036] usb 4-1: Manufacturer: syz [ 720.712624][ T8036] usb 4-1: SerialNumber: syz [ 721.053577][ T8036] usb 4-1: 0:2 : does not exist [ 721.056692][ T1212] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 721.114515][ T8036] usb 4-1: USB disconnect, device number 18 [ 721.181320][ T8685] udevd[8685]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.198628][ T1212] usb 3-1: device descriptor read/64, error -71 [ 721.473508][ T1212] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 721.617748][ T1212] usb 3-1: device descriptor read/64, error -71 [ 721.754163][ T1212] usb usb3-port1: attempt power cycle [ 722.103425][ T1212] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 722.147296][ T1212] usb 3-1: device descriptor read/8, error -71 [ 722.243173][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2408'. [ 722.433379][ T1212] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 722.594981][ T1212] usb 3-1: device descriptor read/8, error -71 [ 722.705380][ T1212] usb usb3-port1: unable to enumerate USB device [ 722.775265][T15017] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2409'. [ 723.014023][T15027] binder: 15020:15027 ioctl 4018620d 0 returned -22 [ 723.222849][T15032] loop2: detected capacity change from 0 to 7 [ 723.236524][ T8685] loop2: [ 723.239744][ T8685] loop2: partition table partially beyond EOD, truncated [ 723.260114][T15032] loop2: [ 723.263431][T15032] loop2: partition table partially beyond EOD, truncated [ 723.555927][T15027] binder: 15020:15027 ioctl d000941e 0 returned -22 [ 724.178995][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 724.179017][ T29] audit: type=1326 audit(1770847192.291:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6b9bf79 code=0x7ffc0000 [ 724.258286][T15038] tipc: Enabling of bearer rejected, failed to enable media [ 724.342781][T15038] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 724.351322][ T29] audit: type=1326 audit(1770847192.291:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2b6b9bf79 code=0x7ffc0000 [ 724.409795][T15038] team0: Port device dummy0 added [ 724.433600][ T29] audit: type=1326 audit(1770847192.291:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6b9bf79 code=0x7ffc0000 [ 724.461826][ T29] audit: type=1326 audit(1770847192.291:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2b6b9bf79 code=0x7ffc0000 [ 724.652460][ T29] audit: type=1326 audit(1770847192.291:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b6b9bf79 code=0x7ffc0000 [ 724.673570][ T8036] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 724.693538][ T29] audit: type=1326 audit(1770847192.291:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2b6b9d807 code=0x7ffc0000 [ 724.752033][ T29] audit: type=1326 audit(1770847192.291:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc2b6b5c84e code=0x7ffc0000 [ 724.779098][ T29] audit: type=1326 audit(1770847192.291:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc2b6b5c84e code=0x7ffc0000 [ 724.808019][ T29] audit: type=1326 audit(1770847192.291:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc2b6b5c84e code=0x7ffc0000 [ 724.894311][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.944582][ T8036] usb 4-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 724.980212][ T29] audit: type=1326 audit(1770847192.291:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc2b6b5c84e code=0x7ffc0000 [ 725.010762][ T8036] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.052682][ T8036] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 725.075094][ T8036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.107421][ T8036] usb 4-1: Product: syz [ 725.153516][ T8036] usb 4-1: Manufacturer: syz [ 725.169532][ T8036] usb 4-1: SerialNumber: syz [ 725.434664][ T8036] usb 4-1: 0:2 : does not exist [ 725.496251][ T8036] usb 4-1: USB disconnect, device number 19 [ 725.595187][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.705646][ T8685] udevd[8685]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.419803][T15065] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2422'. [ 726.653632][ T5922] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 727.275376][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 727.414160][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 727.427196][ T5922] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 727.436482][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.567431][ T5922] usb 2-1: Product: syz [ 727.579545][ T5922] usb 2-1: Manufacturer: syz [ 727.685301][ T5922] usb 2-1: SerialNumber: syz [ 727.707097][ T5922] usb 2-1: config 0 descriptor?? [ 727.744826][ T5922] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 727.942337][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.951481][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.973373][ T8036] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 728.126007][ T8036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.126035][ T8036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.126070][ T8036] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 728.126099][ T8036] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 728.126114][ T8036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.128308][ T8036] usb 4-1: config 0 descriptor?? [ 728.457365][T15094] bond9: option mode: invalid value (255) [ 728.468432][T15094] bond9 (unregistering): Released all slaves [ 728.588289][ T8036] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 728.599570][ T8036] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 728.629212][ T8036] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 728.641163][ T8036] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 728.650978][ T8036] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 728.688226][ T8036] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 728.828588][ T13] usb 2-1: Failed to submit usb control message: -110 [ 728.844428][ T13] usb 2-1: unable to send the bmi data to the device: -110 [ 728.852045][ T13] usb 2-1: unable to get target info from device [ 728.860812][ T13] usb 2-1: could not get target info (-110) [ 728.867671][ T13] usb 2-1: could not probe fw (-110) [ 728.949680][T15111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.960209][T15111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.987222][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'. [ 729.131684][T15112] bond6: (slave bridge0): Releasing backup interface [ 729.138779][T15112] bridge0 (unregistering): left promiscuous mode [ 729.455953][ T8034] usb 2-1: USB disconnect, device number 42 [ 729.913445][ T8036] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 730.014539][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.033765][ T8034] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 730.063782][ T8036] usb 6-1: device descriptor read/64, error -71 [ 730.173470][ T8034] usb 2-1: device descriptor read/64, error -71 [ 730.303384][ T8036] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 730.433449][ T8034] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 730.453381][ T8036] usb 6-1: device descriptor read/64, error -71 [ 730.563644][ T8036] usb usb6-port1: attempt power cycle [ 730.575038][ T8034] usb 2-1: device descriptor read/64, error -71 [ 730.674516][ T8039] usb 4-1: USB disconnect, device number 20 [ 730.694250][ T8034] usb usb2-port1: attempt power cycle [ 730.906162][ T8036] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 730.935693][ T8036] usb 6-1: device descriptor read/8, error -71 [ 731.007480][T15125] netlink: 'syz.3.2436': attribute type 10 has an invalid length. [ 731.043432][ T8034] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 731.077618][T15125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.137298][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 731.137319][ T29] audit: type=1804 audit(1770847199.211:827): pid=15125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2436" name="bus" dev="ramfs" ino=60301 res=1 errno=0 [ 731.193403][ T8036] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 731.202529][ T8034] usb 2-1: device descriptor read/8, error -71 [ 731.214027][ T8036] usb 6-1: device descriptor read/8, error -71 [ 731.294505][ T7653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.323633][ T8036] usb usb6-port1: unable to enumerate USB device [ 731.443350][ T8034] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 731.465624][ T8034] usb 2-1: device descriptor read/8, error -71 [ 731.575167][ T8034] usb usb2-port1: unable to enumerate USB device [ 731.808329][T15129] syzkaller0: entered promiscuous mode [ 731.815932][T15129] syzkaller0: entered allmulticast mode [ 732.852351][T15142] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 733.002823][T15150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2444'. [ 734.043939][T13318] Bluetooth: hci4: command 0x0406 tx timeout [ 734.080900][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 735.795165][ T7653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.874089][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2452'. [ 736.965397][T15205] syz_tun: entered allmulticast mode [ 736.995446][T15204] syz_tun: left allmulticast mode [ 737.118496][ T7653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 738.229484][T15215] tap0: tun_chr_ioctl cmd 1074025680 [ 738.253551][ T8034] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 738.413748][ T8034] usb 4-1: Using ep0 maxpacket: 8 [ 738.438609][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2469'. [ 738.464699][ T8034] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 738.481525][ T8034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.494047][ T1212] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 738.503334][ T8034] usb 4-1: Product: syz [ 738.507536][ T8034] usb 4-1: Manufacturer: syz [ 738.512236][ T8034] usb 4-1: SerialNumber: syz [ 738.527737][ T8034] usb 4-1: config 0 descriptor?? [ 738.590784][T15240] openvswitch: netlink: IP tunnel dst address not specified [ 738.674560][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 738.704934][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.767325][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.783987][ T8034] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 738.808246][ T1212] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 738.841108][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.875895][ T1212] usb 2-1: config 0 descriptor?? [ 738.886042][ T1212] hub 2-1:0.0: USB hub found [ 739.015503][ T8034] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 739.088956][T15256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2474'. [ 739.115626][ T1212] hub 2-1:0.0: 1 port detected [ 739.409748][ T1212] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 739.421957][ T1212] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 739.439783][ T1212] usbhid 2-1:0.0: can't add hid device: -71 [ 739.446692][ T1212] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 739.474911][ T1212] usb 2-1: USB disconnect, device number 47 [ 740.179866][ T1212] usb 4-1: USB disconnect, device number 21 [ 740.895492][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 741.189630][T15285] tap0: tun_chr_ioctl cmd 1074025677 [ 741.216255][T15285] tap0: linktype set to 0 [ 741.952712][T15312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 742.942949][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.350598][T15330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2493'. [ 744.885910][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 746.014547][ T1212] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 746.273004][T15366] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2503'. [ 746.557397][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.593653][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.607584][ T1212] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 746.622950][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.671883][ T1212] usb 3-1: config 0 descriptor?? [ 747.131528][T15359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.138447][T15376] loop2: detected capacity change from 0 to 7 [ 747.149264][T15376] loop2: [ 747.152886][T15376] loop2: partition table partially beyond EOD, truncated [ 747.200016][T15359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.299577][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.309542][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.348002][T15359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.480325][T15383] : entered promiscuous mode [ 747.494389][T15359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.538065][ T1212] aquacomputer_d5next 0003:0C70:F00D.0023: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.2-1/input0 [ 747.867224][ T8034] usb 3-1: USB disconnect, device number 115 [ 747.972437][T15386] fido_id[15386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 748.573794][ T1155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.956519][T15398] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 749.246683][T15406] syz_tun: entered allmulticast mode [ 749.256487][T15405] syz_tun: left allmulticast mode [ 750.150025][T15415] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 750.163945][T15415] syzkaller1: linktype set to 823 [ 750.335423][T15421] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 750.372310][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2519'. [ 750.433703][ T8036] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 750.513527][ T1212] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 750.593375][ T8036] usb 2-1: Using ep0 maxpacket: 8 [ 750.634802][ T8036] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 750.651057][ T8036] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 750.687318][ T8036] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 750.703599][ T1212] usb 6-1: Using ep0 maxpacket: 32 [ 750.712222][ T8036] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.745597][ T8036] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 750.764878][ T1212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.778287][ T8036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.799745][ T1212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.814040][ T1212] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 750.831859][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.967512][ T1212] usb 6-1: config 0 descriptor?? [ 751.001783][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 751.024904][ T8036] usb 2-1: GET_CAPABILITIES returned 0 [ 751.030800][ T8036] usbtmc 2-1:16.0: can't read capabilities [ 751.275192][T15432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 751.397421][ T1212] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 751.410163][ T1212] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 751.610267][ T1212] ft260 0003:0403:6030.0024: failed to retrieve chip version [ 751.618632][ T1212] ft260 0003:0403:6030.0024: probe with driver ft260 failed with error -5 [ 752.131852][ T8034] usb 2-1: USB disconnect, device number 48 [ 752.280513][ T8036] usb 6-1: USB disconnect, device number 25 [ 752.744446][ T1212] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 752.811355][T15457] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 752.933386][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 752.940670][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.951941][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.962536][ T1212] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 752.971729][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.991395][ T1212] usb 3-1: config 0 descriptor?? [ 753.632353][ T1212] usbhid 3-1:0.0: can't add hid device: -71 [ 753.760997][ T1212] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 753.993200][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.174370][ T1212] usb 3-1: USB disconnect, device number 116 [ 754.783368][ T8034] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 754.978679][ T8034] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 755.012178][ T8034] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 755.031415][ T8034] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 755.051923][ T8034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.078444][T15468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 755.110760][ T8034] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 755.180483][T15474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2531'. [ 755.300083][ T8034] usb 3-1: USB disconnect, device number 117 [ 755.343381][ T1212] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 755.505155][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.516479][ T1212] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 755.534973][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.541171][T15468] bridge_slave_1: default FDB implementation only supports local addresses [ 755.552897][T15468] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 755.602432][ T1212] usb 4-1: config 0 descriptor?? [ 755.909035][ T1212] usbhid 4-1:0.0: can't add hid device: -71 [ 755.915552][ T1212] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 755.940645][ T1212] usb 4-1: USB disconnect, device number 22 [ 756.843398][ T8036] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 756.998458][ T8036] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 757.010229][ T8036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.022562][ T8036] usb 3-1: Product: syz [ 757.028546][ T8036] usb 3-1: Manufacturer: syz [ 757.036533][ T8036] usb 3-1: SerialNumber: syz [ 757.051090][ T8036] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 757.069346][ T8034] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 757.495957][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'. [ 757.557883][T15497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2536'. [ 757.603210][T15497] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 757.629213][ T8036] usb 3-1: USB disconnect, device number 118 [ 757.822534][T15505] loop5: detected capacity change from 0 to 7 [ 757.835519][T15505] loop5: p1 < > p4 [ 757.839733][T15505] loop5: partition table partially beyond EOD, truncated [ 758.385729][ T8034] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 758.600022][ T8034] ath9k_htc: Failed to initialize the device [ 758.631740][ T8036] usb 3-1: ath9k_htc: USB layer deinitialized [ 758.836803][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 758.846661][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 759.513838][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 759.529685][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2542'. [ 760.094303][ T7653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.205117][T15530] bond9: (slave bridge0): Releasing backup interface [ 760.243347][ T8024] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 760.397532][ T8024] usb 2-1: Using ep0 maxpacket: 32 [ 760.411984][ T8024] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 760.424700][ T8024] usb 2-1: config 0 has no interface number 0 [ 760.458939][ T8024] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 760.509375][ T8024] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 760.531920][ T8024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.551780][ T8024] usb 2-1: Product: syz [ 760.563017][ T8024] usb 2-1: Manufacturer: syz [ 760.580567][ T8024] usb 2-1: SerialNumber: syz [ 760.670775][ T8024] usb 2-1: config 0 descriptor?? [ 760.708245][T15534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 760.925392][T15534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 761.398194][ T8024] asix 2-1:0.191 (unnamed net_device) (uninitialized): invalid PHY address: 218 [ 761.516273][T15553] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2550'. [ 761.566566][T15553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2550'. [ 761.573602][ T1212] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 761.733326][ T1212] usb 6-1: Using ep0 maxpacket: 16 [ 761.749583][ T1212] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 761.771167][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.792454][ T1212] usb 6-1: Product: syz [ 761.801682][ T1212] usb 6-1: Manufacturer: syz [ 761.811559][ T1212] usb 6-1: SerialNumber: syz [ 762.048904][ T1212] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 762.078612][ T1212] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 762.092689][ T1212] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 762.111757][ T1212] usb 6-1: media controller created [ 762.135133][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 762.249458][ T29] audit: type=1326 audit(1770847230.361:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.282806][ T29] audit: type=1326 audit(1770847230.361:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.325618][ T29] audit: type=1326 audit(1770847230.361:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.375142][ T1212] zl10353_read_register: readreg error (reg=127, ret==-110) [ 762.397706][ T29] audit: type=1326 audit(1770847230.361:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.430882][ T29] audit: type=1326 audit(1770847230.391:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.467636][T15566] loop5: detected capacity change from 0 to 7 [ 762.482140][ T29] audit: type=1326 audit(1770847230.391:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.517993][T15566] loop5: p1 < > p4 [ 762.521838][T15566] loop5: partition table partially beyond EOD, truncated [ 762.533897][ T29] audit: type=1326 audit(1770847230.391:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.557495][ T29] audit: type=1326 audit(1770847230.391:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.580895][ T1212] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 762.594151][ T1212] usb 6-1: USB disconnect, device number 26 [ 762.620626][ T29] audit: type=1326 audit(1770847230.391:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.649855][ T29] audit: type=1326 audit(1770847230.391:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 762.729259][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 762.755288][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 763.057195][ T8024] usb 2-1: USB disconnect, device number 49 [ 763.875190][T15594] fuse: Bad value for 'fd' [ 764.402465][T15606] loop5: detected capacity change from 0 to 7 [ 764.441031][T15606] loop5: p1 < > p4 [ 764.454726][T15606] loop5: partition table partially beyond EOD, truncated [ 764.563332][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 764.581331][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 764.633381][ T8036] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 764.796739][ T8036] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 764.829373][ T8036] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 764.873300][ T8036] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 764.997844][ T8036] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.214185][ T8036] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 765.223591][ T8036] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.231613][ T8036] usb 4-1: Product: syz [ 765.235977][ T8036] usb 4-1: Manufacturer: syz [ 765.236762][ T7659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.317324][T15622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.329744][T15622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.345298][ T8036] cdc_wdm 4-1:1.0: skipping garbage [ 765.353090][ T8036] cdc_wdm 4-1:1.0: skipping garbage [ 765.364772][ T8036] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 765.572995][T15602] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 765.854998][ T7659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.288175][T15625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2567'. [ 766.836045][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 766.982282][ T8024] usb 4-1: USB disconnect, device number 23 [ 767.493606][ T8024] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 767.885571][ T8024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 767.897189][ T8024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.907330][ T8024] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 767.916945][ T8024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.937817][ T8024] usb 4-1: config 0 descriptor?? [ 768.280726][T15649] loop5: detected capacity change from 0 to 7 [ 768.291949][T15649] loop5: p1 < > p4 [ 768.297870][T15649] loop5: partition table partially beyond EOD, truncated [ 768.509880][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 768.525301][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 768.583002][ T8024] usbhid 4-1:0.0: can't add hid device: -71 [ 768.610271][ T8024] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 768.653763][ T8024] usb 4-1: USB disconnect, device number 24 [ 768.716092][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 768.716112][ T29] audit: type=1326 audit(1770847236.831:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 768.864638][ T29] audit: type=1326 audit(1770847236.861:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 768.888089][ T29] audit: type=1326 audit(1770847236.861:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 768.915408][ T29] audit: type=1326 audit(1770847236.861:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 768.939272][ T29] audit: type=1326 audit(1770847236.861:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 768.976474][ T29] audit: type=1326 audit(1770847236.891:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 768.999848][ T29] audit: type=1326 audit(1770847237.081:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 769.035391][T15670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2579'. [ 769.078459][ T29] audit: type=1326 audit(1770847237.081:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 769.101677][ T8036] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 769.193454][ T8024] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 769.253861][ T8036] usb 3-1: Using ep0 maxpacket: 32 [ 769.269289][ T8036] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 769.418788][T15677] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 769.665526][ T8036] usb 3-1: config 0 has no interface number 0 [ 769.671882][ T8036] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 770.045007][ T8036] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 770.054659][ T8036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.061759][ T8024] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 770.068756][ T8036] usb 3-1: Product: syz [ 770.091363][ T8036] usb 3-1: Manufacturer: syz [ 770.176213][ T8036] usb 3-1: SerialNumber: syz [ 770.245396][ T8036] usb 3-1: config 0 descriptor?? [ 770.251614][T15667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 770.253363][ T8024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 770.283534][ T8024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 770.515797][ T8024] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 770.551926][ T8024] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.564010][ T8024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.573031][ T29] audit: type=1326 audit(1770847238.681:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f681b39bc0b code=0x7ffc0000 [ 770.574917][T15664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 770.809515][ T8024] usb 4-1: config 0 descriptor?? [ 770.923492][ T29] audit: type=1326 audit(1770847238.681:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f681b39bc0b code=0x7ffc0000 [ 770.946847][T15667] syz_tun: entered allmulticast mode [ 771.022454][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.615005][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.619244][ T8024] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 771.647983][ T8024] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 771.673208][ T8024] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 771.686856][ T8024] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 771.687591][ T8036] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 771.711306][T15662] syz_tun: left allmulticast mode [ 771.737597][ T8024] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 771.744569][ T8036] asix 3-1:0.188: probe with driver asix failed with error -71 [ 771.784855][ T8024] usb 4-1: USB disconnect, device number 25 [ 771.798921][ T8036] usb 3-1: USB disconnect, device number 119 [ 771.853443][ T1212] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 771.906072][T15689] fido_id[15689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 772.014487][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 772.021966][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.047027][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.062249][ T1212] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 772.075991][ T1212] usb 2-1: New USB device found, idVendor=222a, idProduct=0001, bcdDevice= 0.00 [ 772.085372][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.096282][ T1212] usb 2-1: config 0 descriptor?? [ 772.125575][T15692] netlink: 'syz.5.2585': attribute type 2 has an invalid length. [ 772.251094][T15695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.287919][T15695] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 772.294883][T15695] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 772.320964][T15686] xt_connbytes: Forcing CT accounting to be enabled [ 772.338059][T15695] vhci_hcd vhci_hcd.0: Device attached [ 772.344311][T15686] xt_NFQUEUE: number of total queues is 0 [ 772.366066][T15701] netlink: zone id is out of range [ 772.371450][T15701] netlink: zone id is out of range [ 772.378247][T15701] netlink: zone id is out of range [ 772.385249][T15701] netlink: zone id is out of range [ 772.390514][T15701] netlink: zone id is out of range [ 772.408258][T15701] netlink: zone id is out of range [ 772.434956][T15701] netlink: zone id is out of range [ 772.440338][T15701] netlink: zone id is out of range [ 772.446823][T15701] netlink: zone id is out of range [ 772.452149][T15701] netlink: zone id is out of range [ 772.513715][ T8036] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 772.572793][ T1212] hid-generic 0003:222A:0001.0026: hidraw0: USB HID v0.07 Device [HID 222a:0001] on usb-dummy_hcd.1-1/input0 [ 772.583404][ T8036] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 772.833117][ T1212] usb 2-1: USB disconnect, device number 50 [ 773.047611][T15709] fido_id[15709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 773.073419][T15697] vhci_hcd: connection reset by peer [ 773.133726][ T7659] vhci_hcd vhci_hcd.0: stop threads [ 773.139123][ T7659] vhci_hcd vhci_hcd.0: release socket [ 773.153715][ T7659] vhci_hcd vhci_hcd.0: disconnect device [ 773.402305][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2592'. [ 773.554795][T15733] netlink: 'syz.5.2594': attribute type 1 has an invalid length. [ 773.761067][T15733] bond2: entered promiscuous mode [ 773.809839][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2595'. [ 773.917797][T15733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.037528][T15733] bond2: (slave bridge0): making interface the new active one [ 774.056113][T15733] bridge0: entered promiscuous mode [ 774.077919][T15733] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 774.890986][T15772] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2599'. [ 774.980783][T15774] netlink: 'syz.1.2600': attribute type 2 has an invalid length. [ 775.155192][T15776] program syz.3.2601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.503415][ T8039] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 775.735528][ T8039] usb 4-1: not running at top speed; connect to a high speed hub [ 775.747638][ T8039] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 775.785057][ T8039] usb 4-1: config 1 has no interface number 1 [ 775.792564][ T8039] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 775.839732][ T8039] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 775.868508][ T8039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.895925][ T8039] usb 4-1: Product: syz [ 775.902673][ T8039] usb 4-1: Manufacturer: syz [ 775.911308][ T8039] usb 4-1: SerialNumber: syz [ 776.094296][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 777.013362][T15801] netlink: 'syz.0.2609': attribute type 1 has an invalid length. [ 777.076131][T15801] bond6: entered promiscuous mode [ 777.094827][T15801] 8021q: adding VLAN 0 to HW filter on device bond6 [ 777.142288][T15801] bond6: (slave bridge0): making interface the new active one [ 777.150482][T15801] bridge0: entered promiscuous mode [ 777.157756][T15801] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 777.182571][ T8032] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 777.359939][ T8032] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 777.374564][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 777.383286][ T8032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.403274][ T8032] usb 2-1: Product: syz [ 777.407649][ T8032] usb 2-1: Manufacturer: syz [ 777.412347][ T8032] usb 2-1: SerialNumber: syz [ 777.435983][ T8032] usb 2-1: config 0 descriptor?? [ 777.683641][ T8036] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 778.048820][ T8032] usb 2-1: Firmware version (0.0) predates our first public release. [ 778.075459][ T8032] usb 2-1: Please update to version 0.2 or newer [ 778.165374][ T8032] usb 2-1: USB disconnect, device number 51 [ 778.183671][ T8039] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 778.225158][ T8039] usb 4-1: failed to enable PITCH for EP 0x82 [ 778.333622][ T8039] usb 4-1: USB disconnect, device number 26 [ 778.452930][ T6845] udevd[6845]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.820764][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 779.820786][ T29] audit: type=1326 audit(1770847247.931:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 780.095751][ T29] audit: type=1326 audit(1770847247.931:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 780.120919][ T29] audit: type=1326 audit(1770847247.931:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 780.151676][ T29] audit: type=1326 audit(1770847247.931:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 780.183517][ T29] audit: type=1326 audit(1770847247.931:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 780.289354][ T29] audit: type=1326 audit(1770847247.931:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 780.383591][ T29] audit: type=1326 audit(1770847247.931:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 780.453370][ T29] audit: type=1326 audit(1770847247.931:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 781.240783][ T29] audit: type=1326 audit(1770847247.931:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 781.333467][ T29] audit: type=1326 audit(1770847247.931:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a92f9bf79 code=0x7ffc0000 [ 781.338941][T15853] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2621'. [ 781.539639][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 781.864474][ T7659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 781.903337][ T1212] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 781.983112][T15881] gre1: entered promiscuous mode [ 781.991131][T15881] gre1: entered allmulticast mode [ 782.136142][ T1212] usb 6-1: config 0 has an invalid interface number: 142 but max is 0 [ 782.144916][ T1212] usb 6-1: config 0 has no interface number 0 [ 782.154216][ T1212] usb 6-1: config 0 interface 142 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.188866][T15883] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2631'. [ 782.201265][T15883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2631'. [ 782.218409][ T1212] usb 6-1: config 0 interface 142 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.252695][ T1212] usb 6-1: config 0 interface 142 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.301252][ T1212] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 782.329869][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.377388][ T1212] usb 6-1: config 0 descriptor?? [ 782.794688][T15888] netlink: 'syz.0.2633': attribute type 1 has an invalid length. [ 782.847773][ T1212] hid-udraw 0003:20D6:CB17.0027: unknown main item tag 0x3 [ 782.889894][T15888] bond7: entered promiscuous mode [ 782.904047][ T1212] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.142/0003:20D6:CB17.0027/input/input54 [ 782.933709][T15888] 8021q: adding VLAN 0 to HW filter on device bond7 [ 783.017835][ T1212] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.142/0003:20D6:CB17.0027/input/input55 [ 783.082695][T15861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.100488][ T1212] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.142/0003:20D6:CB17.0027/input/input56 [ 783.130912][T15861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.139324][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 783.156003][T15888] bond7: (slave bridge1): making interface the new active one [ 783.182805][T15888] bridge1: entered promiscuous mode [ 783.192922][T15888] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 783.247737][ T1212] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.142/0003:20D6:CB17.0027/input/input57 [ 783.270673][T15861] vlan2: entered promiscuous mode [ 783.324482][T15861] batadv0: entered promiscuous mode [ 783.370089][T15892] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2634'. [ 783.389920][ T1212] hid-udraw 0003:20D6:CB17.0027: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.5-1/input142 [ 783.811267][ T1212] usb 6-1: USB disconnect, device number 27 [ 783.870192][T15909] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2639'. [ 783.897613][T15909] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2639'. [ 783.907874][T15909] netlink: 'syz.0.2639': attribute type 5 has an invalid length. [ 783.918507][T15909] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2639'. [ 784.093997][ T5922] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 784.103727][ T8024] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 784.167303][T15913] netlink: 'syz.0.2639': attribute type 4 has an invalid length. [ 784.393570][ T8024] usb 2-1: Using ep0 maxpacket: 8 [ 784.403626][ T5922] usb 4-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 784.417748][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.446422][ T8024] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 784.460376][ T8024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.472063][ T5922] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.482288][ T8024] usb 2-1: Product: syz [ 784.486738][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.496223][ T8024] usb 2-1: Manufacturer: syz [ 784.500966][ T8024] usb 2-1: SerialNumber: syz [ 784.506795][ T5922] usb 4-1: Product: syz [ 784.516055][T15915] syzkaller0: entered promiscuous mode [ 784.521580][T15915] syzkaller0: entered allmulticast mode [ 784.541654][ T8024] usb 2-1: config 0 descriptor?? [ 784.548998][ T5922] usb 4-1: Manufacturer: syz [ 784.549069][T15825] syzkaller0: tun_net_xmit 48 [ 784.559160][ T5922] usb 4-1: SerialNumber: syz [ 784.565359][T15916] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 784.571734][ T8024] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 784.930034][ T8024] gspca_sonixj: reg_r err -32 [ 784.976358][ T8024] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 785.004041][ T5922] usb 4-1: 0:2 : does not exist [ 785.057083][ T5922] usb 4-1: USB disconnect, device number 27 [ 785.093722][ T8024] usb 2-1: USB disconnect, device number 52 [ 785.216923][ T8685] udevd[8685]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.227165][T15925] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2647'. [ 785.246099][T15926] xt_hashlimit: size too large, truncated to 1048576 [ 785.285939][T15928] netlink: 'syz.0.2646': attribute type 1 has an invalid length. [ 787.618430][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 788.744367][T15928] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 788.922478][ T7661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 789.178349][T15950] hma(sha224): entered promiscuous mode [ 789.339501][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 789.339519][ T29] audit: type=1326 audit(1770847257.451:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 789.649484][T14643] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 789.706190][T15972] loop2: detected capacity change from 0 to 7 [ 789.712523][ T29] audit: type=1326 audit(1770847257.451:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 789.797240][ T29] audit: type=1326 audit(1770847257.491:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 789.820271][T15972] loop2: [ 789.823835][T15972] loop2: partition table partially beyond EOD, truncated [ 790.003825][ T29] audit: type=1326 audit(1770847257.491:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 790.034168][ T29] audit: type=1326 audit(1770847257.491:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 790.057129][ T29] audit: type=1326 audit(1770847257.491:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 790.060249][T14643] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 790.080152][ T29] audit: type=1326 audit(1770847257.491:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 790.114362][ T29] audit: type=1326 audit(1770847257.491:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 790.240581][T14643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.278307][ T29] audit: type=1326 audit(1770847257.491:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 790.292004][T14643] usb 2-1: config 0 descriptor?? [ 790.436094][T15978] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2658'. [ 790.450964][ T29] audit: type=1326 audit(1770847257.491:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.2.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f681b39bf79 code=0x7ffc0000 [ 790.823354][ T8024] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 791.153493][ T8024] usb 6-1: device descriptor read/64, error -71 [ 791.393350][ T8024] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 791.487214][T14643] usb 2-1: Cannot set autoneg [ 791.492506][T14643] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 791.526351][ T8024] usb 6-1: device descriptor read/64, error -71 [ 791.974678][ T8024] usb usb6-port1: attempt power cycle [ 792.093057][T15999] syzkaller0: entered promiscuous mode [ 792.323359][ T8024] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 792.345119][ T8024] usb 6-1: device descriptor read/8, error -71 [ 792.383689][T16004] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 792.416182][T16004] bond10: entered promiscuous mode [ 792.424401][T16004] 8021q: adding VLAN 0 to HW filter on device bond10 [ 792.479217][T16004] bond10: (slave bridge0): making interface the new active one [ 792.487988][T16004] bridge0: entered promiscuous mode [ 792.501442][T16004] bond10: (slave bridge0): Enslaving as an active interface with an up link [ 792.593840][ T8024] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 792.614546][ T8024] usb 6-1: device descriptor read/8, error -71 [ 792.698772][ T5922] usb 2-1: USB disconnect, device number 53 [ 792.724052][ T8024] usb usb6-port1: unable to enumerate USB device [ 792.966497][T16011] loop2: detected capacity change from 0 to 7 [ 792.976610][T16011] loop2: [ 792.980873][T16011] loop2: partition table partially beyond EOD, truncated [ 793.376505][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 793.443412][T14643] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 793.494679][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 793.505091][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 793.616244][T14643] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.629933][T14643] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 793.657704][T14643] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 793.677229][T14643] usb 6-1: Product: syz [ 793.693377][T14643] usb 6-1: SerialNumber: syz [ 793.711355][T14643] usb 6-1: config 0 descriptor?? [ 793.728627][T14643] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 793.762709][T14643] usb 6-1: Detected SIO [ 793.801817][T14643] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 794.000532][T14643] usb 6-1: USB disconnect, device number 32 [ 794.030313][T14643] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 794.074421][T14643] ftdi_sio 6-1:0.0: device disconnected [ 794.227237][T16041] netlink: 'syz.1.2677': attribute type 1 has an invalid length. [ 794.290305][T16041] bond7: entered promiscuous mode [ 794.297027][T16041] 8021q: adding VLAN 0 to HW filter on device bond7 [ 794.335538][T16041] bond7: (slave bridge0): making interface the new active one [ 794.343801][T16041] bridge0: entered promiscuous mode [ 794.350802][T16041] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 794.545225][T16055] net_ratelimit: 299 callbacks suppressed [ 794.545242][T16055] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 794.665154][ T7666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 794.687975][T16062] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2682'. [ 795.137036][ T8024] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 795.313171][ T8024] usb 6-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 795.390377][ T8024] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 795.402616][ T8024] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 795.438339][ T8024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.461616][T16070] syz_tun: entered allmulticast mode [ 795.487477][ T8024] usb 6-1: Product: syz [ 795.499879][ T8024] usb 6-1: Manufacturer: syz [ 795.518814][ T8024] usb 6-1: SerialNumber: syz [ 795.533171][T16069] syz_tun: left allmulticast mode [ 795.908959][ T8024] usb 6-1: 0:2 : does not exist [ 795.944581][ T8024] usb 6-1: USB disconnect, device number 33 [ 796.349387][ T8685] udevd[8685]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 796.929697][ T8024] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 797.203341][ T8024] usb 4-1: Using ep0 maxpacket: 16 [ 797.229272][ T8024] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 797.283056][ T8024] usb 4-1: config 5 has no interface number 0 [ 797.333362][ T8024] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 797.369880][ T8024] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 797.833616][ T8024] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 797.990006][ T8024] usb 4-1: config 5 interface 168 has no altsetting 0 [ 798.023560][ T8024] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 798.038600][ T8024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.305064][ T8024] usb 4-1: Product: syz [ 798.333927][ T8024] usb 4-1: Manufacturer: syz [ 798.338770][ T8024] usb 4-1: SerialNumber: syz [ 798.383960][T16091] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 798.438843][T16091] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 798.493779][T15825] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 798.701268][ C0] usb 4-1: NFC: Urb failure (status -71) [ 798.864171][ C0] usb 4-1: NFC: Urb failure (status -71) [ 798.900362][ T8024] usb 4-1: NFC: Unable to get FW version [ 799.466470][T16116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 799.513179][ T8024] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -71 [ 799.617798][ T8024] usb 4-1: USB disconnect, device number 28 [ 799.753813][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 801.568732][T16145] netlink: 'syz.1.2704': attribute type 10 has an invalid length. [ 801.683853][T16145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2704'. [ 801.706688][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 801.735958][T16145] bridge0: Device is already in use. [ 802.029134][T16161] ipt_rpfilter: unknown options [ 803.228620][T16175] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2714'. [ 803.271811][T16175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2714'. [ 803.353335][ T8034] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 803.523704][ T8034] usb 3-1: device descriptor read/64, error -71 [ 803.560191][T16181] loop5: detected capacity change from 0 to 7 [ 803.592212][ T8685] loop5: p1 < > p4 [ 803.603591][ T8685] loop5: partition table partially beyond EOD, truncated [ 803.617793][T15825] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.659243][T16181] loop5: p1 < > p4 [ 803.679822][T16181] loop5: partition table partially beyond EOD, truncated [ 803.903520][ T8034] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 803.937037][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 803.971974][T16185] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2717'. [ 804.032149][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 804.047182][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 804.070052][ T8034] usb 3-1: device descriptor read/64, error -71 [ 804.282455][ T8034] usb usb3-port1: attempt power cycle [ 804.403327][T14643] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 804.553371][T14643] usb 4-1: Using ep0 maxpacket: 32 [ 804.561450][T14643] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 804.571438][T14643] usb 4-1: config 0 has no interface number 0 [ 804.584337][T14643] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0xA has invalid maxpacket 770, setting to 64 [ 804.605990][T14643] usb 4-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 804.618589][T14643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.627877][T14643] usb 4-1: Product: syz [ 804.636308][ T8034] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 804.649066][T14643] usb 4-1: Manufacturer: syz [ 804.654715][T14643] usb 4-1: SerialNumber: syz [ 804.726622][ T8034] usb 3-1: device descriptor read/8, error -71 [ 804.753386][T14643] usb 4-1: config 0 descriptor?? [ 804.777944][T14643] vmk80xx 4-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 804.907476][T15830] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 804.970107][ T8024] usb 4-1: USB disconnect, device number 29 [ 804.983887][ T8034] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 805.014284][ T8034] usb 3-1: device descriptor read/8, error -71 [ 805.124691][ T8034] usb usb3-port1: unable to enumerate USB device [ 805.793542][ T8024] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 805.863721][ T5922] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 805.944446][ T8024] usb 4-1: Using ep0 maxpacket: 16 [ 805.957112][ T8024] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 805.971512][ T8024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.980483][ T8024] usb 4-1: Product: syz [ 805.988384][ T8024] usb 4-1: Manufacturer: syz [ 805.996791][ T8024] usb 4-1: SerialNumber: syz [ 806.008519][ T8024] r8152-cfgselector 4-1: Unknown version 0x0000 [ 806.017516][ T8024] r8152-cfgselector 4-1: config 0 descriptor?? [ 806.031596][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 806.043113][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.051671][ T5922] usb 2-1: Product: syz [ 806.056313][ T5922] usb 2-1: Manufacturer: syz [ 806.060988][ T5922] usb 2-1: SerialNumber: syz [ 806.088276][ T5922] usb 2-1: config 0 descriptor?? [ 806.116558][T16214] netlink: 'syz.2.2729': attribute type 3 has an invalid length. [ 806.312588][ T5922] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 806.347868][T16219] loop5: detected capacity change from 0 to 7 [ 806.371827][T16219] loop5: p1 < > p4 [ 806.381121][T16219] loop5: partition table partially beyond EOD, truncated [ 806.437810][ T5192] loop5: p1 < > p4 [ 806.441732][ T5192] loop5: partition table partially beyond EOD, truncated [ 806.459192][T16221] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2731'. [ 806.534428][T16224] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2732'. [ 806.588040][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 806.601102][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 806.613008][T16222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.636154][T16222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.711388][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 806.739951][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 806.903823][ T8034] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 807.077866][ T8034] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.125305][ T8034] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.158093][ T8034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.186844][ T8034] usb 3-1: Product: syz [ 807.202663][ T8034] usb 3-1: Manufacturer: syz [ 807.218569][ T8034] usb 3-1: SerialNumber: syz [ 807.539753][ T8024] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 807.753811][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 807.782997][ T8024] usb 6-1: Using ep0 maxpacket: 16 [ 807.791123][ T8024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.807483][ T8024] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 807.830879][ T8024] usb 6-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 807.843588][T16246] bond6: (slave bridge0): Releasing backup interface [ 807.850381][T16246] bridge0 (unregistering): left promiscuous mode [ 807.874100][ T8024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.892911][ T8024] usb 6-1: config 0 descriptor?? [ 808.074122][ T8034] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 808.080975][ T8034] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 808.089092][ T8034] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 808.113927][T16236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.123174][T16236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.180078][ T5922] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 808.274960][ T8034] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 808.306239][ T8034] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 808.555347][ T5922] r8152-cfgselector 4-1: USB disconnect, device number 30 [ 808.687918][ T8034] usb 2-1: USB disconnect, device number 54 [ 808.741088][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.747942][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.891860][ T8024] usb 6-1: string descriptor 0 read error: -71 [ 808.921636][ T8024] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 808.951655][ T8024] usb 6-1: USB disconnect, device number 34 [ 809.746533][ T8034] usb 3-1: USB disconnect, device number 124 [ 809.754957][ T8034] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 810.648284][T16284] loop5: detected capacity change from 0 to 7 [ 810.673075][ T7666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 810.719187][T16284] loop5: p1 < > p4 [ 810.738337][T16284] loop5: partition table partially beyond EOD, truncated [ 811.000798][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 811.013752][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 812.574072][ T8024] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 812.787729][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.847585][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.873332][ T8024] usb 6-1: unable to get BOS descriptor or descriptor too short [ 812.890422][ T8024] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 812.925739][ T8024] usb 6-1: can't read configurations, error -71 [ 812.974191][T16343] loop5: detected capacity change from 0 to 7 [ 813.001518][T16343] loop5: p1 < > p4 [ 813.028318][T16343] loop5: partition table partially beyond EOD, truncated [ 813.118007][ T8685] udevd[8685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 813.138511][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 813.221303][T15827] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 813.306290][T16349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2759'. [ 813.380274][T16348] netlink: 'syz.2.2760': attribute type 3 has an invalid length. [ 813.393286][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'. [ 814.139132][T16355] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2763'. [ 814.294263][ T8024] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 814.463981][ T8024] usb 6-1: Using ep0 maxpacket: 16 [ 814.484695][ T8024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 814.512074][ T8024] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 814.532120][ T8024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.552457][ T8024] usb 6-1: Product: syz [ 814.557590][ T8024] usb 6-1: Manufacturer: syz [ 814.562259][ T8024] usb 6-1: SerialNumber: syz [ 814.570661][ T8024] usb 6-1: config 0 descriptor?? [ 814.585481][ T8024] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 814.596508][ T8024] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 814.633553][ T5922] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 814.787110][ T5922] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 814.798625][ T5922] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 814.809955][ T5922] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 814.821729][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.834137][T16363] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 814.847602][ T5922] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 815.050901][ T5922] usb 4-1: USB disconnect, device number 31 [ 815.145534][T16373] syz_tun: entered promiscuous mode [ 815.151564][T16373] macsec0: entered allmulticast mode [ 815.157007][T16373] syz_tun: entered allmulticast mode [ 815.174007][T16373] syz_tun: left allmulticast mode [ 815.180544][T16373] syz_tun: left promiscuous mode [ 815.199280][ T8024] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 815.603398][ T5922] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 815.642583][ T8024] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 815.658771][ T8024] em28xx 6-1:0.0: board has no eeprom [ 815.765432][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 815.814529][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short [ 815.824908][ T5922] usb 4-1: config 8 has an invalid interface number: 142 but max is 0 [ 815.833154][ T5922] usb 4-1: config 8 has an invalid interface number: 1 but max is 0 [ 815.882572][ T5922] usb 4-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 815.892293][ T5922] usb 4-1: config 8 has no interface number 0 [ 816.010920][ T8024] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 816.062034][ T8024] em28xx 6-1:0.0: dvb set to bulk mode. [ 816.074858][ T1212] em28xx 6-1:0.0: Binding DVB extension [ 816.156707][ T5922] usb 4-1: config 8 interface 142 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 816.223509][ T5922] usb 4-1: too many endpoints for config 8 interface 1 altsetting 7: 214, using maximum allowed: 30 [ 816.251182][ T5922] usb 4-1: config 8 interface 1 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 214 [ 816.311813][ T5922] usb 4-1: config 8 interface 142 has no altsetting 0 [ 816.347819][ T5922] usb 4-1: config 8 interface 1 has no altsetting 0 [ 816.376718][ T5922] usb 4-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=5f.8c [ 816.403259][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.414469][ T7666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 816.448539][ T5922] usb 4-1: Product: syz [ 816.473321][ T5922] usb 4-1: Manufacturer: syz [ 816.478196][ T5922] usb 4-1: SerialNumber: syz [ 816.781036][T16392] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2774'. [ 816.844846][T16397] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2775'. [ 817.070521][ T5922] hub 4-1:8.1: Invalid hub with more than one config or interface [ 817.079490][ T5922] hub 4-1:8.1: probe with driver hub failed with error -22 [ 817.103822][ T5922] usb 4-1: USB disconnect, device number 32 [ 817.143813][T16352] em28xx 6-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 817.217471][ T8024] usb 6-1: USB disconnect, device number 37 [ 817.252402][T16410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 817.278729][ T1212] em28xx 6-1:0.0: Registering input extension [ 817.287083][ T8024] em28xx 6-1:0.0: Disconnecting em28xx [ 817.311687][ T8024] em28xx 6-1:0.0: Closing input extension [ 817.355755][ T8024] em28xx 6-1:0.0: Freeing device [ 818.013341][ T8034] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 818.193295][ T8034] usb 2-1: Using ep0 maxpacket: 32 [ 818.202175][ T8034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.213743][ T8034] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 818.222909][ T8034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.276593][ T8034] usb 2-1: config 0 descriptor?? [ 818.759094][ T8034] zydacron 0003:13EC:0006.0028: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 818.953392][T14643] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 818.976777][ T7666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 819.170715][T14643] usb 4-1: Using ep0 maxpacket: 32 [ 819.187973][T14643] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 819.196441][T14643] usb 4-1: config 0 has no interface number 0 [ 819.202558][T14643] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 160, changing to 11 [ 819.222060][T14643] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid maxpacket 34212, setting to 1024 [ 819.283294][T14643] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 819.299076][T14643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.329114][T14643] usb 4-1: Product: syz [ 819.352312][T14643] usb 4-1: Manufacturer: syz [ 819.362400][T14643] usb 4-1: SerialNumber: syz [ 819.393549][T14643] usb 4-1: config 0 descriptor?? [ 819.403109][T16433] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 819.465173][T14643] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 819.645569][T16444] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2788'. [ 820.112581][ T8024] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 820.142535][T16452] netlink: 'syz.2.2792': attribute type 2 has an invalid length. [ 820.293995][ T8024] usb 6-1: Using ep0 maxpacket: 16 [ 820.312855][T14643] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59 [ 820.324527][ T8024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 820.347606][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.348109][ T8024] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 820.354744][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.354943][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.378149][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.385218][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.392358][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.400072][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.402403][ T8024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.407501][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.422679][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.429711][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.436920][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.444054][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.451209][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.458294][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.465419][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.472498][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.479582][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.486740][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.493919][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.501570][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.508626][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.515830][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.522912][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.530094][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.537294][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.544423][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.551516][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.553539][ T1212] usb 2-1: USB disconnect, device number 55 [ 820.558636][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.571763][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.578949][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.586098][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.593260][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.600283][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.608701][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.616509][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.623562][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.630619][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.637648][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.644774][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.651814][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.659125][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.666227][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.673324][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.680398][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.687652][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.694811][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.702137][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.710093][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.717751][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.726669][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.734740][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.741924][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.749035][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.756136][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.763296][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.770460][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.777549][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.784689][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.791724][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.798868][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.805942][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.814640][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.821943][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.829330][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.836470][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.843662][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.850926][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.857998][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.865181][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.872280][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.879353][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.886541][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.893657][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.900752][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.907853][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.916737][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.923820][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.930883][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.934106][ T8024] usb 6-1: Product: syz [ 820.938024][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.949627][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.956850][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.963933][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.969517][ T8024] usb 6-1: Manufacturer: syz [ 820.971098][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.982809][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.989940][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.997065][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 820.999443][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.004265][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.004462][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.028018][ T8024] usb 6-1: SerialNumber: syz [ 821.028205][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.040245][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.047523][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.054649][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.061725][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.065664][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.068834][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.083428][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.090627][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.097726][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.099256][ T8024] usb 6-1: config 0 descriptor?? [ 821.104956][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.117827][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.125038][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.132203][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.139727][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.146887][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.153963][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.161021][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.168096][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.175336][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.182399][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.190305][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.193789][ T8024] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 821.197688][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.214140][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.222178][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.229714][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.236824][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.243959][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.251269][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.263311][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.270816][ C1] gspca_pac7302 4-1:0.172: URB error -71, resubmitting [ 821.272477][ T5922] usb 4-1: USB disconnect, device number 33 [ 821.277695][ C1] gspca_main: Resubmit URB failed with error -19 [ 821.300917][ T8024] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 821.394738][ T1212] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 821.573647][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 821.591544][ T1212] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 821.625051][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.668226][ T1212] usb 2-1: config 0 descriptor?? [ 821.688787][ T1212] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 821.771336][T16473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 821.785125][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2798'. [ 821.834607][ T8024] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 821.883521][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 821.944904][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 822.095295][T16486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2799'. [ 822.174056][ T7666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 822.363543][ T8024] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 822.379351][ T8024] em28xx 6-1:0.0: board has no eeprom [ 822.549376][T16477] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 822.560606][T16477] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 822.974013][ T8024] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 822.982043][ T8024] em28xx 6-1:0.0: dvb set to bulk mode. [ 823.027213][ T5922] em28xx 6-1:0.0: Binding DVB extension [ 823.745627][T16503] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2803'. [ 823.853348][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 823.996424][T14643] usb 2-1: USB disconnect, device number 56 [ 824.184686][T16448] em28xx 6-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 824.419962][T14643] usb 6-1: USB disconnect, device number 38 [ 824.509100][T14643] em28xx 6-1:0.0: Disconnecting em28xx [ 824.612378][ T5922] em28xx 6-1:0.0: Registering input extension [ 824.644948][T14643] em28xx 6-1:0.0: Closing input extension [ 824.745673][T14643] em28xx 6-1:0.0: Freeing device [ 824.746402][T15825] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.805023][T16518] netlink: 'syz.2.2806': attribute type 1 has an invalid length. [ 824.873283][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 824.873314][ T29] audit: type=1326 audit(1770847292.971:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.072985][ T29] audit: type=1326 audit(1770847292.971:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.143566][ T29] audit: type=1326 audit(1770847292.971:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.439588][ T29] audit: type=1326 audit(1770847293.021:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.504470][ T29] audit: type=1326 audit(1770847293.021:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.608133][ T29] audit: type=1326 audit(1770847293.021:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.683007][ T29] audit: type=1326 audit(1770847293.021:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.778703][ T29] audit: type=1326 audit(1770847293.021:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.834152][ T29] audit: type=1326 audit(1770847293.021:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.868423][ T29] audit: type=1326 audit(1770847293.021:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16515 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa772b9bf79 code=0x7ffc0000 [ 825.945345][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 827.359202][T16508] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 827.452306][T16508] ------------[ cut here ]------------ [ 827.458506][T16508] sdata->crypto_tx_tailroom_needed_cnt != master->crypto_tx_tailroom_needed_cnt [ 827.458529][T16508] WARNING: net/mac80211/key.c:1169 at ieee80211_free_keys+0x7b8/0x8e0, CPU#0: syz.1.2804/16508 [ 827.478505][T16508] Modules linked in: [ 827.482882][T16508] CPU: 0 UID: 0 PID: 16508 Comm: syz.1.2804 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.494280][T16508] Tainted: [L]=SOFTLOCKUP [ 827.498730][T16508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 827.508957][T16508] RIP: 0010:ieee80211_free_keys+0x7b8/0x8e0 [ 827.515032][T16508] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a7 46 ab f6 90 0f 0b 90 e9 04 fa ff ff e8 99 46 ab f6 90 <0f> 0b 90 e9 32 fe ff ff e8 8b 46 ab f6 e9 d4 fd ff ff 48 c7 c1 b0 [ 827.535188][T16508] RSP: 0018:ffffc9001041e3a0 EFLAGS: 00010246 [ 827.541313][T16508] RAX: ffffffff8b193157 RBX: 0000000000000001 RCX: 0000000000080000 [ 827.549379][T16508] RDX: ffffc9000f985000 RSI: 000000000007ffff RDI: 0000000000080000 [ 827.557570][T16508] RBP: ffffc9001041e470 R08: ffffc9001041e187 R09: 1ffff92002083c30 [ 827.565840][T16508] R10: dffffc0000000000 R11: fffff52002083c31 R12: 0000000000000001 [ 827.574124][T16508] R13: ffff888053bccd80 R14: ffff8880538b1730 R15: 0000000000000002 [ 827.582204][T16508] FS: 00007f0a911d56c0(0000) GS:ffff8881256c8000(0000) knlGS:0000000000000000 [ 827.591295][T16508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.598084][T16508] CR2: 00007f43ab54da08 CR3: 0000000053c6c000 CR4: 00000000003526f0 [ 827.606195][T16508] Call Trace: [ 827.609591][T16508] [ 827.612524][T16508] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 827.618303][T16508] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 827.624295][T16508] ieee80211_do_stop+0xf4c/0x2010 [ 827.629429][T16508] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 827.635297][T16508] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 827.641131][T16508] ieee80211_stop+0x1b1/0x240 [ 827.645860][T16508] ? __pfx_ieee80211_stop+0x10/0x10 [ 827.651093][T16508] __dev_close_many+0x368/0x6d0 [ 827.656146][T16508] ? __pfx___dev_close_many+0x10/0x10 [ 827.661530][T16508] netif_close_many+0x225/0x420 [ 827.666416][T16508] ? __pfx_netif_close_many+0x10/0x10 [ 827.671894][T16508] ? do_raw_spin_lock+0x12b/0x2f0 [ 827.677093][T16508] netif_close+0x160/0x220 [ 827.681712][T16508] ? __pfx_netif_close+0x10/0x10 [ 827.686835][T16508] ? __local_bh_enable_ip+0xd0/0x130 [ 827.692255][T16508] ? lockdep_hardirqs_on+0x7a/0x110 [ 827.697582][T16508] ? dev_deactivate_many+0xb62/0xd40 [ 827.703073][T16508] dev_close+0x10a/0x220 [ 827.707362][T16508] ieee80211_stop+0xcc/0x240 [ 827.712051][T16508] ? __pfx_ieee80211_stop+0x10/0x10 [ 827.717539][T16508] __dev_close_many+0x368/0x6d0 [ 827.722400][T16508] ? __pfx___dev_close_many+0x10/0x10 [ 827.727852][T16508] ? __local_bh_enable_ip+0xd0/0x130 [ 827.733170][T16508] __dev_change_flags+0x2cb/0x690 [ 827.738273][T16508] ? __pfx___dev_change_flags+0x10/0x10 [ 827.744008][T16508] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 827.750031][T16508] ? __pfx_netif_state_change+0x10/0x10 [ 827.755740][T16508] netif_change_flags+0x88/0x1a0 [ 827.760719][T16508] do_setlink+0xf82/0x4590 [ 827.765219][T16508] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 827.771591][T16508] ? __pfx_do_setlink+0x10/0x10 [ 827.776686][T16508] ? __pfx_stack_trace_save+0x10/0x10 [ 827.782156][T16508] ? unwind_next_frame+0xa5/0x23c0 [ 827.787427][T16508] ? lock_acquire+0x41/0x330 [ 827.792043][T16508] ? __mutex_trylock_common+0x158/0x260 [ 827.797647][T16508] ? __pfx___mutex_trylock_common+0x10/0x10 [ 827.803733][T16508] ? rcu_is_watching+0x15/0xb0 [ 827.808507][T16508] ? trace_contention_end+0x39/0x100 [ 827.813876][T16508] ? __mutex_lock+0x319/0x1300 [ 827.818669][T16508] ? __pfx___nla_validate_parse+0x10/0x10 [ 827.824480][T16508] ? rtnl_newlink+0x8a1/0x1be0 [ 827.829260][T16508] ? __pfx___mutex_lock+0x10/0x10 [ 827.835341][T16508] ? ns_capable+0x89/0xe0 [ 827.839718][T16508] rtnl_newlink+0x147a/0x1be0 [ 827.844542][T16508] ? __pfx_rtnl_newlink+0x10/0x10 [ 827.849582][T16508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.855728][T16508] ? kasan_quarantine_put+0xbb/0x1f0 [ 827.861026][T16508] ? lockdep_hardirqs_on+0x7a/0x110 [ 827.866526][T16508] ? kmem_cache_free+0x195/0x610 [ 827.871479][T16508] ? nlmon_xmit+0xb0/0x100 [ 827.876128][T16508] ? __lock_acquire+0x6b5/0x2cf0 [ 827.881076][T16508] ? __local_bh_enable_ip+0xd0/0x130 [ 827.886394][T16508] ? lockdep_hardirqs_on+0x7a/0x110 [ 827.891598][T16508] ? __dev_queue_xmit+0x274/0x3850 [ 827.896908][T16508] ? __local_bh_enable_ip+0xd0/0x130 [ 827.902194][T16508] ? __dev_queue_xmit+0x274/0x3850 [ 827.907361][T16508] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 827.912485][T16508] ? __pfx_rtnl_newlink+0x10/0x10 [ 827.917558][T16508] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 827.922501][T16508] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 827.927803][T16508] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 827.933341][T16508] ? ref_tracker_free+0x693/0x840 [ 827.938373][T16508] ? __copy_skb_header+0xa3/0x4a0 [ 827.944090][T16508] ? __pfx_ref_tracker_free+0x10/0x10 [ 827.950068][T16508] ? __skb_clone+0x63/0x7a0 [ 827.955065][T16508] netlink_rcv_skb+0x232/0x4b0 [ 827.959888][T16508] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 827.965440][T16508] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 827.970753][T16508] ? netlink_deliver_tap+0x2e/0x1b0 [ 827.976199][T16508] netlink_unicast+0x80f/0x9b0 [ 827.981035][T16508] ? __pfx_netlink_unicast+0x10/0x10 [ 827.986569][T16508] ? __alloc_skb+0x193/0x390 [ 827.991357][T16508] ? netlink_sendmsg+0x650/0xb40 [ 827.996343][T16508] ? skb_put+0x11b/0x210 [ 828.000684][T16508] netlink_sendmsg+0x813/0xb40 [ 828.005506][T16508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.010809][T16508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 828.016105][T16508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 828.021403][T16508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.026725][T16508] ____sys_sendmsg+0xa68/0xad0 [ 828.031492][T16508] ? __might_fault+0xaf/0x130 [ 828.036211][T16508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.041523][T16508] ? import_iovec+0x73/0xa0 [ 828.046253][T16508] ___sys_sendmsg+0x2a5/0x360 [ 828.050934][T16508] ? __lock_acquire+0x6b5/0x2cf0 [ 828.056033][T16508] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.061283][T16508] ? futex_wait+0x29a/0x380 [ 828.065846][T16508] ? __fget_files+0x2a/0x420 [ 828.070536][T16508] ? __fget_files+0x3a0/0x420 [ 828.075652][T16508] __x64_sys_sendmsg+0x1bd/0x2a0 [ 828.080618][T16508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.086322][T16508] ? rcu_is_watching+0x15/0xb0 [ 828.091117][T16508] do_syscall_64+0x14d/0xf80 [ 828.096461][T16508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.102561][T16508] ? trace_irq_disable+0x37/0x100 [ 828.107789][T16508] ? clear_bhb_loop+0x40/0x90 [ 828.112478][T16508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.118437][T16508] RIP: 0033:0x7f0a92f9bf79 [ 828.122855][T16508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.142655][T16508] RSP: 002b:00007f0a911d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.151145][T16508] RAX: ffffffffffffffda RBX: 00007f0a93216180 RCX: 00007f0a92f9bf79 [ 828.159177][T16508] RDX: 0000000000004004 RSI: 0000200000000200 RDI: 0000000000000009 [ 828.167648][T16508] RBP: 00007f0a930327e0 R08: 0000000000000000 R09: 0000000000000000 [ 828.175967][T16508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.184263][T16508] R13: 00007f0a93216218 R14: 00007f0a93216180 R15: 00007f0a9333fa48 [ 828.192446][T16508] [ 828.195664][T16508] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 828.203051][T16508] CPU: 0 UID: 0 PID: 16508 Comm: syz.1.2804 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.214055][T16508] Tainted: [L]=SOFTLOCKUP [ 828.218467][T16508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 828.228518][T16508] Call Trace: [ 828.231798][T16508] [ 828.234745][T16508] vpanic+0x1e0/0x670 [ 828.238741][T16508] panic+0xc5/0xd0 [ 828.242549][T16508] ? __pfx_panic+0x10/0x10 [ 828.246995][T16508] __warn+0x315/0x4a0 [ 828.251021][T16508] ? ieee80211_free_keys+0x7b8/0x8e0 [ 828.256308][T16508] ? ieee80211_free_keys+0x7b8/0x8e0 [ 828.261595][T16508] __report_bug+0x29a/0x540 [ 828.266097][T16508] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 828.272096][T16508] ? ieee80211_free_keys+0x7b8/0x8e0 [ 828.277397][T16508] ? __pfx___report_bug+0x10/0x10 [ 828.282463][T16508] ? schedule+0x16e/0x360 [ 828.286828][T16508] ? synchronize_rcu_expedited+0x663/0x770 [ 828.292824][T16508] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 828.298998][T16508] ? ieee80211_free_keys+0x7b8/0x8e0 [ 828.304579][T16508] report_bug+0x16a/0x220 [ 828.308947][T16508] ? ieee80211_free_keys+0x7b8/0x8e0 [ 828.314257][T16508] ? ieee80211_free_keys+0x7ba/0x8e0 [ 828.319543][T16508] handle_bug+0x98/0x200 [ 828.323889][T16508] exc_invalid_op+0x1a/0x50 [ 828.328504][T16508] asm_exc_invalid_op+0x1a/0x20 [ 828.333460][T16508] RIP: 0010:ieee80211_free_keys+0x7b8/0x8e0 [ 828.339383][T16508] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a7 46 ab f6 90 0f 0b 90 e9 04 fa ff ff e8 99 46 ab f6 90 <0f> 0b 90 e9 32 fe ff ff e8 8b 46 ab f6 e9 d4 fd ff ff 48 c7 c1 b0 [ 828.358987][T16508] RSP: 0018:ffffc9001041e3a0 EFLAGS: 00010246 [ 828.365057][T16508] RAX: ffffffff8b193157 RBX: 0000000000000001 RCX: 0000000000080000 [ 828.373025][T16508] RDX: ffffc9000f985000 RSI: 000000000007ffff RDI: 0000000000080000 [ 828.380995][T16508] RBP: ffffc9001041e470 R08: ffffc9001041e187 R09: 1ffff92002083c30 [ 828.389081][T16508] R10: dffffc0000000000 R11: fffff52002083c31 R12: 0000000000000001 [ 828.397160][T16508] R13: ffff888053bccd80 R14: ffff8880538b1730 R15: 0000000000000002 [ 828.405139][T16508] ? ieee80211_free_keys+0x7b7/0x8e0 [ 828.410450][T16508] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 828.416170][T16508] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 828.422154][T16508] ieee80211_do_stop+0xf4c/0x2010 [ 828.427199][T16508] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 828.432753][T16508] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 828.438565][T16508] ieee80211_stop+0x1b1/0x240 [ 828.443424][T16508] ? __pfx_ieee80211_stop+0x10/0x10 [ 828.448642][T16508] __dev_close_many+0x368/0x6d0 [ 828.453552][T16508] ? __pfx___dev_close_many+0x10/0x10 [ 828.458983][T16508] netif_close_many+0x225/0x420 [ 828.463860][T16508] ? __pfx_netif_close_many+0x10/0x10 [ 828.469326][T16508] ? do_raw_spin_lock+0x12b/0x2f0 [ 828.474354][T16508] netif_close+0x160/0x220 [ 828.478863][T16508] ? __pfx_netif_close+0x10/0x10 [ 828.483964][T16508] ? __local_bh_enable_ip+0xd0/0x130 [ 828.489259][T16508] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.494466][T16508] ? dev_deactivate_many+0xb62/0xd40 [ 828.499842][T16508] dev_close+0x10a/0x220 [ 828.504095][T16508] ieee80211_stop+0xcc/0x240 [ 828.508705][T16508] ? __pfx_ieee80211_stop+0x10/0x10 [ 828.514028][T16508] __dev_close_many+0x368/0x6d0 [ 828.518890][T16508] ? __pfx___dev_close_many+0x10/0x10 [ 828.524282][T16508] ? __local_bh_enable_ip+0xd0/0x130 [ 828.529582][T16508] __dev_change_flags+0x2cb/0x690 [ 828.534640][T16508] ? __pfx___dev_change_flags+0x10/0x10 [ 828.540395][T16508] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 828.546392][T16508] ? __pfx_netif_state_change+0x10/0x10 [ 828.552045][T16508] netif_change_flags+0x88/0x1a0 [ 828.557085][T16508] do_setlink+0xf82/0x4590 [ 828.561509][T16508] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 828.567686][T16508] ? __pfx_do_setlink+0x10/0x10 [ 828.572544][T16508] ? __pfx_stack_trace_save+0x10/0x10 [ 828.578127][T16508] ? unwind_next_frame+0xa5/0x23c0 [ 828.583267][T16508] ? lock_acquire+0x41/0x330 [ 828.587975][T16508] ? __mutex_trylock_common+0x158/0x260 [ 828.593564][T16508] ? __pfx___mutex_trylock_common+0x10/0x10 [ 828.599576][T16508] ? rcu_is_watching+0x15/0xb0 [ 828.604608][T16508] ? trace_contention_end+0x39/0x100 [ 828.609992][T16508] ? __mutex_lock+0x319/0x1300 [ 828.614891][T16508] ? __pfx___nla_validate_parse+0x10/0x10 [ 828.620628][T16508] ? rtnl_newlink+0x8a1/0x1be0 [ 828.625498][T16508] ? __pfx___mutex_lock+0x10/0x10 [ 828.630546][T16508] ? ns_capable+0x89/0xe0 [ 828.634986][T16508] rtnl_newlink+0x147a/0x1be0 [ 828.639776][T16508] ? __pfx_rtnl_newlink+0x10/0x10 [ 828.644809][T16508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.650999][T16508] ? kasan_quarantine_put+0xbb/0x1f0 [ 828.656475][T16508] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.661773][T16508] ? kmem_cache_free+0x195/0x610 [ 828.666805][T16508] ? nlmon_xmit+0xb0/0x100 [ 828.671246][T16508] ? __lock_acquire+0x6b5/0x2cf0 [ 828.676195][T16508] ? __local_bh_enable_ip+0xd0/0x130 [ 828.681492][T16508] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.686700][T16508] ? __dev_queue_xmit+0x274/0x3850 [ 828.691936][T16508] ? __local_bh_enable_ip+0xd0/0x130 [ 828.697243][T16508] ? __dev_queue_xmit+0x274/0x3850 [ 828.702495][T16508] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 828.707658][T16508] ? __pfx_rtnl_newlink+0x10/0x10 [ 828.712716][T16508] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 828.717691][T16508] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 828.722850][T16508] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 828.728323][T16508] ? ref_tracker_free+0x693/0x840 [ 828.733363][T16508] ? __copy_skb_header+0xa3/0x4a0 [ 828.738399][T16508] ? __pfx_ref_tracker_free+0x10/0x10 [ 828.743879][T16508] ? __skb_clone+0x63/0x7a0 [ 828.748397][T16508] netlink_rcv_skb+0x232/0x4b0 [ 828.753173][T16508] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 828.758652][T16508] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 828.763959][T16508] ? netlink_deliver_tap+0x2e/0x1b0 [ 828.769186][T16508] netlink_unicast+0x80f/0x9b0 [ 828.773971][T16508] ? __pfx_netlink_unicast+0x10/0x10 [ 828.779278][T16508] ? __alloc_skb+0x193/0x390 [ 828.783876][T16508] ? netlink_sendmsg+0x650/0xb40 [ 828.788824][T16508] ? skb_put+0x11b/0x210 [ 828.793077][T16508] netlink_sendmsg+0x813/0xb40 [ 828.797861][T16508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.803188][T16508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 828.808184][T16508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 828.813482][T16508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.818952][T16508] ____sys_sendmsg+0xa68/0xad0 [ 828.823743][T16508] ? __might_fault+0xaf/0x130 [ 828.828459][T16508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.833785][T16508] ? import_iovec+0x73/0xa0 [ 828.838477][T16508] ___sys_sendmsg+0x2a5/0x360 [ 828.843168][T16508] ? __lock_acquire+0x6b5/0x2cf0 [ 828.848128][T16508] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.853344][T16508] ? futex_wait+0x29a/0x380 [ 828.857894][T16508] ? __fget_files+0x2a/0x420 [ 828.862586][T16508] ? __fget_files+0x3a0/0x420 [ 828.867273][T16508] __x64_sys_sendmsg+0x1bd/0x2a0 [ 828.872220][T16508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.877785][T16508] ? rcu_is_watching+0x15/0xb0 [ 828.882666][T16508] do_syscall_64+0x14d/0xf80 [ 828.887270][T16508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.893339][T16508] ? trace_irq_disable+0x37/0x100 [ 828.898371][T16508] ? clear_bhb_loop+0x40/0x90 [ 828.903056][T16508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.908953][T16508] RIP: 0033:0x7f0a92f9bf79 [ 828.913375][T16508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.933072][T16508] RSP: 002b:00007f0a911d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.941506][T16508] RAX: ffffffffffffffda RBX: 00007f0a93216180 RCX: 00007f0a92f9bf79 [ 828.949743][T16508] RDX: 0000000000004004 RSI: 0000200000000200 RDI: 0000000000000009 [ 828.957810][T16508] RBP: 00007f0a930327e0 R08: 0000000000000000 R09: 0000000000000000 [ 828.965795][T16508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.973856][T16508] R13: 00007f0a93216218 R14: 00007f0a93216180 R15: 00007f0a9333fa48 [ 828.981855][T16508] [ 828.985025][T16508] Kernel Offset: disabled [ 828.989522][T16508] Rebooting in 86400 seconds..