last executing test programs: 13.328042452s ago: executing program 1 (id=2058): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fsopen(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x18, r1}, 0x18) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_clone3(0x0, 0x0) timer_create(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x1257ff0b, 0x40400) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000540)={'\x00', 0x1000, 0x6, 0xe227, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') 10.921826827s ago: executing program 3 (id=2067): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24f7, &(0x7f00000002c0)={0x0, 0xcb3d, 0x8000, 0x100000, 0x3}, &(0x7f0000000240), &(0x7f0000019080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000340)={'virt_wifi0\x00', 0x400}) close(0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 9.819920099s ago: executing program 1 (id=2075): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_open_pts(0xffffffffffffffff, 0x240) ioctl$TCFLSH(r10, 0x540b, 0x1) mremap(&(0x7f0000c84000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000c6f000/0x4000)=nil) migrate_pages(0x0, 0x4e, 0x0, &(0x7f0000000300)=0xa) 9.702250619s ago: executing program 3 (id=2077): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000180)={@my=0x1}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="2fb59ffb44602ae36bd341bece505b6fd49c14a96a0fd598971c54ce159707157696533fcdef0281ad064d431c09f162f8bf2bae4ebe2e6f5e7d20a2883ed44c8111957fe17a882e6a4b37aa5440cc7370dd9e67d73cad19a8aac251dc65d8c9ad4cb2ea69eb0c602f51375f12fd8cba4557d35c000000000000", @ANYBLOB="040000000000000000000000fdffffffffffffff000000d200"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) (async) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x1000, 0x2, 0xda}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) 9.493819557s ago: executing program 1 (id=2079): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000c0000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) 8.268444921s ago: executing program 3 (id=2087): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, 0x0) 7.355898579s ago: executing program 1 (id=2091): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c50f000000b8108ede010203010902240001000010000904000202000602000202000a0905820200020021100000000000"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001540)={@cgroup, 0xffffffffffffffff, 0x27}, 0x20) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1000, 0x79, 0x10, 0x8c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)={0x40, 0x13, 0x28, "162039a1db8728ccc32171e8cb00603fb7181b0369a729822bcf599dea680baff2ae1a551f6f7000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x1bf, 0x3, 0x8, 0x2d, 0xffff7f02, 0xfffffffc, 0x3, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x0, 0x13, 0xc, "f42732933b1890fe16787e72"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 6.534073656s ago: executing program 4 (id=2095): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x10, 0x7fff0003}]}) times(0x0) syz_io_uring_complete(0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x5, &(0x7f0000000040)=0x640, 0x4) sendmmsg$inet(r5, &(0x7f00000002c0)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @broadcast}}}], 0x20}}], 0x1, 0x14) r8 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000180)={0x20000008}) 6.380788821s ago: executing program 2 (id=2097): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0xfffe, 0x0, 'dh\x00', 0x10, 0x9f0, 0x2d}, 0x2c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffd0c, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a6000fe02040b067c55a1bc001400030006990600000015000500fe80000000000000ff00014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd7}], 0x1, 0x0, 0x0, 0x2663}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x411101, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x880) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYBLOB="375ee0e45b7b1a08a26eb353138f1323aadc1d3b7ffb3b4fc81998a263e2febfa4d4ec1842e0644ed23add3691ade073695125745ac378c48eb90e242194022c002c681023a41d6e97d64f16f6b3d681c1681c2a236c95bf91e5a0ed7a6a9c40904af57816a763e10a78cd939b0f7f379641bd2cf103907a3ddcc566370fa147889a0ab323179f201e2d3fa3505a2ba27e19aaacc33475f519ed0f02121935306880f6d9abaacb4e827c2059e718087e3da1e980d39bb04856ddca7234bf26a09aa918c7a8d0ed4a70b150f89a7498b7b48a496191b1ac6a69"], 0x24}}, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/105, 0x69}], 0x1}, 0x2192}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000005c0)=""/84, 0x54}], 0x1, &(0x7f0000000680)=""/208, 0xd0}, 0xb}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000000880)=""/181, 0xb5}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/224, 0xe0}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/116, 0x74}, {&(0x7f0000001b00)=""/148, 0x94}, {&(0x7f0000001bc0)=""/101, 0x65}], 0x8}, 0xfffffffe}], 0x3, 0x40000002, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x2}}) 6.294553468s ago: executing program 2 (id=2098): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x50, 0x5, 0x0, 0x0, 0x200000, 0x5, 0x3, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000fbf2044d0740000102022400010103f30509040008ed020101000121ff00010122b00be509058103109863e913"], 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff8095000000000000003c980480000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="01a0000001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="8c000000100037042a00"/20, @ANYRES32, @ANYBLOB="83040500000000006c0012800900010069706970000000005c000280060012004e210000060010000f00000008000100e3459d72aa94b3a616d8ecf371619e6c1d403a0de42ecbdd2d58f08be980b3f7cabd0df13225bf0512967901bb890e4022870af7da534576e0e968cdab3dbe1c0bc8a956a989301957f9ee8c464f8ab8657f3e76fed629e8987a6ce3e8529ff985fdf6c742", @ANYRES32, @ANYBLOB="05000a0001000000060010007f000000060011004e200000050004004b000000060011004e20000006000f0002"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000580)={@dev, @loopback}, &(0x7f00000006c0)=0xc) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="d13c315005579cc3a48c4de16a4361cc2e4a08a70c331e78add9648d1d266c839e59fbf1010da07358061047af0d851a508770f62d07df5dc1c11b5e7d62c9810587ff0e33eceb738e9a904ad4f24679707c17f64784016b4eefefe7d2cb473f7e76a2944727562ecf5e5c546264826213a6d9eca4bbf54bfed0c7816e16dd8b8fecc021f0dee6b61319de0e6c64413301c1ced0f49bf1627a6a515bbc7f1f00e2785e4d14a4384b7724b3ae61693b3c169bee14195916da94b7", 0xba, 0x8884, &(0x7f0000000700)={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) setsockopt$inet_int(r5, 0x0, 0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}}, 0x0) preadv2(r0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1, 0x7ff, 0x2, 0x8) io_setup(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newsa={0x238, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1a0, 0x80}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x7fffffffffffffd}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@loopback}, @migrate={0x134, 0x11, [{@in6=@mcast2, @in=@local, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x0, 0x0, 0x3502, 0xa, 0xa}, {@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in=@empty, @in=@remote, 0x3c, 0x1, 0x0, 0x3506, 0xa, 0xa}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, @in=@empty, 0x3c, 0x2, 0x0, 0x3501, 0x2}, {@in=@remote, @in=@local, @in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x32, 0x4, 0x0, 0x3507, 0xa, 0xa}]}]}, 0x238}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) 6.128027681s ago: executing program 4 (id=2099): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r1, &(0x7f00000001c0)=""/82, 0x52) 6.082676751s ago: executing program 3 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_vlan\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1f, 0xffffffff, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x5810}, 0x40) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x1c}, @void, @mpls={[], @llc={@snap={0xab, 0xaa, "a2", "0e588f"}}}}, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x24c, r9, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8ad, @mcast1, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x67a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7d48b2b1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff35d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x24c}}, 0x4800) bind$alg(r8, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) 5.443322357s ago: executing program 4 (id=2103): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210000000122f8040905810300"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, &(0x7f0000000ac0)={0x20, 0x22, 0x9b, {0x9b, 0x11, "a66676fef0c90c248a97b1950268112afbeb62eb71f71388925a689efde0cd54b1b895ce5854c5343db9a79cbc4693b64f0542e7bda31e6d01ef2f5ba77f9bd4708adfc180caadb84fcaf3deb53f989e86dc063cee02984fd387b76f159838bf9859192beadfd46a3a2881a7dfc49721aa6ee4aa4e4fe87bb2184015b56b99260c43acd29e841d334a53fd30f784ff25fbcf09b4ba55ead33b"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000000bc0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "de8f75da"}, @main=@item_4={0x3, 0x0, 0xa, "d47a7c14"}]}}, &(0x7f0000000c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4ed2, 0x7, 0x1, {0x22, 0xbd9}}}}, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)={0x0, 0x17, 0x21, "aa52908ca8f30d8b11803af62c47ab5c6c4b872162ddf4312a4d311fb5e0b95d7b"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xa6}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000d40)={0x20, 0x1, 0x85, "d07cc61ff1faf48646d5e0f60ef1ed95c8ca0b3ea40114e646bd5609dd3d078651472cb4c8a6fc0771477c237152e2d7f6ac236ce35a6a261a7724f201e5f9be2ea2b1a4d0d01de773cc9da4f16f4dcd4b4fdf3f9bd74eccb748fb1d80ea564feddb75d44318b8f07f8c226bee693a9184ae47b62e6ae1ac77ee93189b40c09307be63785b"}, &(0x7f0000000e00)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = getpid() kcmp(0x0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) kcmp(0x0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000000a40)=[{0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/225, 0xe1}], &(0x7f0000000240)=[0x1000, 0x6, 0xd]}, {0x3, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/51, 0x33}, {&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000380)=""/191, 0xbf}], &(0x7f0000000440)=[0xfffffffffffffff8, 0x75f4, 0x5]}, {0x1, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/241, 0xf1}], &(0x7f0000000600)=[0xfff, 0x8000, 0xb136]}, {0x6, 0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)=""/63, 0x3f}, {&(0x7f0000000680)=""/70, 0x46}, {&(0x7f0000000700)=""/62, 0x3e}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000800)=""/69, 0x45}, {&(0x7f0000000880)=""/212, 0xd4}], &(0x7f0000000a00)=[0x7c5104e2]}], 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x280, 0x2) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x280, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff07000044"]) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) socket$kcm(0x29, 0x5, 0x0) 4.293501101s ago: executing program 1 (id=2104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r4 = syz_clone(0x800, &(0x7f0000000b40)="5e0400c97919aad1b7719f9645aa315b37fed706056f59be9717a12614bc644a96fa9f9f3e20ad049741651825577639dc7e9ff4b83d88837b681b11c9d05da782c8ae50a23bb73d79133e2e9f42e39ca1301b76c6120f73273b1d982c2fdf02a57925088d2ddde013168fabda9fb387d9c55c8407c94b1c0c9f47cd4948a3d96fa6e33acab842c9b58570574568b50b54bdb1e78effdabfb41bdf4a0465aa36cfc4c4446a4c227cbfbd5e5976a633e0ac8fb65168fff20ab3c6be2498531da24cb6", 0xc2, &(0x7f0000000240), &(0x7f0000000a80), &(0x7f0000000c40)="1e90f6109fa522e038724333686780319088799837d7efc3c59eda6674049d116efb832e16b41133c3ed59915767b8aac2ea889d9439a81f9bb2eb268d2abb6153d61b30c009f1f2147ddcfa824fd2874ee08b35b46b5dbf5660658df922d6cdb4b8e061dcbc9938c0b26d603a7b9603125edc219b9a5e4c624d333f2a233518fec71e35b22c6d72b810cee6a356eb9e011718e1ca9c8cda1e45666d07a382c099b0ea8b2d93482b18abc8") ptrace$ARCH_SHSTK_STATUS(0x1e, r4, &(0x7f0000000d00), 0x5005) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x2e2c, 0x5b, {0xffffffffffffffff}, {0xee00}, 0x9, 0x62}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=0x0) (async) r7 = gettid() (async) syz_clone3(&(0x7f0000000740)={0x8000000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0, {0x5}, &(0x7f0000000640)=""/4, 0x4, &(0x7f0000000680)=""/103, &(0x7f0000000700)=[0x0, 0x0], 0x2, {r1}}, 0x58) r9 = syz_clone(0x10000000, &(0x7f00000007c0)="442bb1f5c05bc2e44b09745be3003b363a6cb34b87d522ece46e0725d06fe96ff85ed31456b27c843ce7d5cbf4130f1e07e87e5c2bb54c83b9a020c5a4742c311229ae7144546e22a38ba4e612dd778277e7cdf0f59ec9d37cb70f6ebde642b861f9ea0204fd848c88a1b2b1fafb5afee29db6478cb04923dab59b3b86757513fd64a9ef83b4ea3fd480dfcf10617281fcc977684ff1a0647e41a73fbba3dd3683391f0ca1cdc0f7726be9326a", 0xad, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="d7e0788910d122d218e50bcaf68c21d7ec48aad4852dc359b1c4fab3d8ef63783f2b3b135884a84d58f4ba2d5ef06c9d540c73753dac36ab5a638b79caf506e2444472b7a919e71295cac993c27daf3fe38641a33efcf9427607233d40c5b1daae951b49") r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000a00)={0x1000000, &(0x7f00000000c0), &(0x7f0000000180), 0x0, {0x7}, &(0x7f00000003c0)=""/216, 0xd8, &(0x7f00000004c0)=""/117, &(0x7f0000000980)=[r5, r6, 0x0, r7, 0x0, r8, r9], 0x7, {r10}}, 0x58) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (rerun: 64) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e000000800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x1000, &(0x7f0000000040)) unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 3.615772738s ago: executing program 1 (id=2106): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8004, 0x0, 0xb49, 0x200000000001, 0x6, 0x8, 0x3}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) close_range(r4, r5, 0x200000000000000) r6 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x541b, 0x0) fchdir(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r9, 0xffffffffffffffff, 0x17, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) 3.194058253s ago: executing program 2 (id=2108): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@code={0x1, 0x71, {"440f083636420f218866baf80cb8fb3a4d82ef66bafc0cb09fee66baf80cb8beb3d781ef66bafc0c66b8010066ef410fc7be77c85711c401b572e20066b8df000f00d8b9af030000b8cf090000ba000000000f30670f6489c95a0000440f01c4"}}], 0x71}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x81, 0xffffffffefffff14, 0x3, 0x100000000, 0x3, 0x4]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0) 3.055749148s ago: executing program 2 (id=2109): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x42, 0x6, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x4}, 0x38) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000000102976600000000000000000a0000093c0001802c00018014000300ff02000000000000000000000000000114000400ff0200000000000000000000000000010c0002"], 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4008000) r4 = fsopen(&(0x7f0000000140)='nfs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000110001002dbd7000000000000800000009", @ANYRES8=r4, @ANYRES8], 0x30}], 0x1}, 0x0) r5 = epoll_create(0x3ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48814}, 0x14000092) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f74"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000180)={0x20000008}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, '.\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x25, &(0x7f0000000140)="e8b937bee35e30f238bad186704c784f2a1b7c3364bbe983ea74820235bb50b647039734d0", 0x49, 0x0, &(0x7f00000001c0)="a6045e60836a194b96e7bd9891508cb555607622fc7ed30cb7e3f041047e8fbac1725df541a378fc32dd29192d8b94aa3d079aaca2109553dd398bc99906385da8da3c232725eda1bf"}) 2.372756504s ago: executing program 4 (id=2110): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x8c, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x101}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000540)={0xc, 0x8, 0x0, 'queue0\x00', 0x7}) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f026, 0x6}) r7 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc4}, &(0x7f0000000680)={0x0, "4cb7a7192281015ddd517efd5616ad99b0517bb6aaaf50402589fc9d9e086b30eb1214ab01086d794a3d83329519762d81ae147709cae93bdb82df65e057a0bc", 0x40}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r7, 0xfffffffffffff520) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000002) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.576057549s ago: executing program 0 (id=2111): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 1.527902474s ago: executing program 2 (id=2112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x130b60, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0xa8, &(0x7f0000000440)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2339600723afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800f3fc000000000000000000000aa78ced400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430fcffffff3e34066d42c60a5c15b37adac15084dbaf736b41e5af180200010000000000000000260004001800"], 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100020000000000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603cf72f4496880020010000000000000000000000000002fe8000000000000000000000000000aa000000", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x98141, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fadvise64(r5, 0x9154, 0x5, 0x5) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.50008465s ago: executing program 3 (id=2113): socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x48}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050a"], 0x0) 1.395549571s ago: executing program 0 (id=2114): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x78) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0055fd600000e7ff", 0x8, 0x36}]) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x2062) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.393565599s ago: executing program 4 (id=2115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000001200000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 1.267146727s ago: executing program 4 (id=2116): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x6a, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff669789"}, {0x6, 0x1a01, 0x41, &(0x7f0000000040)="9dc9d967aef82987b99baab7c9aa1ca2dd19ea3e7335a5db8c9b2a55c85c2ef42097d97b8450c58276354541c1f7d6cb688b6cc257e647243787436cd578448889"}, {0x7fff, 0x10, 0x2b, &(0x7f0000000140)="cb7fa7b57c4a657d2e86b7c7342cbbe6a1ca5ef62e5b2dbe38f49cfced5da514d56726fd5255c15436e3e4"}], 0x3}) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) socket$inet(0x2b, 0x801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r8, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) move_pages(r8, 0x3, &(0x7f0000000800)=[&(0x7f0000aac000/0x1000)=nil, &(0x7f000085c000/0x2000)=nil, &(0x7f000030e000/0x1000)=nil], &(0x7f0000000840)=[0x4, 0x4b9, 0x35216b81, 0x800, 0xb3, 0x80000000, 0xfffffffb, 0x6, 0xf9d3], &(0x7f0000000880)=[0x0], 0x6) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)={0x96c, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x92c, 0x8, 0x0, 0x1, [{0x620, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5f3366f00053bb16a4928fd6f216e7a5d1d5a228519c224becfb14e1291d1154"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1416caa875c7cd19379c764c595baf76e5ac8f688149a4118b3ffdaf40bff10c"}, @WGPEER_A_ALLOWEDIPS={0x38c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x214, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xe}}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7f56dab78c7eadb218fdf6af5995a1357a8a292f06c4b980d2d2df33b0c50d55"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "adf3605c55a84d6f0cc0ec21ffbf870f19e85d723262cdd9ddef934e65888a6e"}]}, {0x220, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "772b05dcdcabae683c332da58264c77ce133cfc95b5c90c617d5b336c1ef96e7"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}}, @WGPEER_A_ALLOWEDIPS={0x1a0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x96c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x80000001, 0x443, 0x8, 0xcb, 0x5, 0x9, 0x6, 0x4, 0x7, 0x0, 0x8000, 0x6, 0x1, 0x8000, 0x7fff, 0x1, 0xfffffff7, 0x9, 0x3, 0x3, 0x28000, 0x3ff, 0x40000000, 0x44f, 0x0, 0x1, 0x1000, 0x6, 0x3, 0x7211, 0xd, 0x2, 0x60dc, 0xd5ff, 0x7, 0x3, 0x5, 0x1, 0x80, 0x7, 0x0, 0xffff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x7d80, 0x1, 0xfffff001, 0x1, 0x8, 0x9, 0x7f, 0x7ff, 0x4, 0x80, 0x7e, 0x425, 0x4a, 0xffff0000, 0x2, 0x1ff, 0x29, 0xedad, 0x0, 0x7, 0x200, 0xfffffffb, 0x0, 0x9, 0x0, 0x100, 0x7, 0x10001, 0x0, 0x0, 0xfbb2, 0x62000000, 0x8, 0x0, 0x8, 0x7f, 0xa, 0x8, 0x3, 0x57d6, 0x7, 0x0, 0x3, 0x6cd, 0x5, 0xfff, 0x8000, 0x9, 0x0, 0x7f, 0xe, 0xa1b4, 0xb, 0x5, 0x3cb2, 0xffffff81, 0x8, 0xbc, 0x58, 0x7, 0x9, 0x8, 0x800, 0xff800000, 0xd3a, 0x7, 0x3ff, 0xffffffff, 0x10000, 0xba22, 0x3, 0x7, 0x6, 0x3, 0xfff, 0x200, 0x0, 0x10, 0x0, 0x76, 0x8, 0x5, 0x3ff, 0x3cc, 0x100, 0x6, 0x833, 0xb, 0x8, 0xb, 0x4, 0x2, 0x86, 0x5, 0x45, 0x7, 0x4, 0x6, 0x1, 0xc, 0x80, 0x1b, 0x3000000, 0x0, 0xfffffffe, 0x2, 0x0, 0x8001, 0xa4, 0x3de0e7f6, 0x80000001, 0xf5e, 0x4, 0x7, 0xc50, 0x3, 0x80000001, 0x1000, 0x6, 0xf7a, 0x9, 0x3, 0x7, 0x80000001, 0x80000001, 0x40, 0xba3, 0x5, 0x9, 0x7, 0xffffffff, 0x0, 0x7, 0x9, 0x2, 0x8be0, 0x3, 0xffff7fff, 0x3, 0x5, 0xe, 0x2f813bed, 0x6, 0x3, 0x8, 0x6c, 0x10000, 0x101, 0x9, 0x7, 0xf, 0x100, 0x6, 0xa, 0x7, 0x0, 0x4, 0x1dee5aac, 0x4, 0x2, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x2, 0x3, 0x4, 0x3033, 0x8, 0x8, 0x2f000, 0xfffffffc, 0x3, 0x8, 0x0, 0x6, 0x8, 0xa, 0x5, 0x2, 0x1, 0x100, 0x65a, 0x6, 0xfffffffe, 0x27, 0x8, 0x8be2, 0xcbe, 0x226ece10, 0xfffffffd, 0xdf, 0x67, 0x8, 0x4, 0x7d4, 0x2615c584, 0x7, 0x55, 0xf74a, 0x2, 0x0, 0x2, 0x0, 0x7, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x3, 0x8, 0x2, 0x80000001}, {0x0, 0x0, 0x3, 0x0, 0x4, 0x40}, 0x8, 0x13, 0x16d5}}]}}]}, 0x45c}}, 0x40010) ioctl$I2C_SMBUS(r2, 0x720, 0x0) 1.259103441s ago: executing program 0 (id=2117): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r2, &(0x7f00000022c0)=""/4066, 0xfe2, 0x1fb) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r3, &(0x7f0000000100)=""/162, 0xa2, 0x1ff) 574.952642ms ago: executing program 2 (id=2118): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) socket(0x10, 0x40000, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x1d) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x5dc, 0x8401) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f0000000000000004000000"]) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000006570425848d4921b1df9e70000000a801400070000011700010014000200fc020000000000000000000000000001140001002001000000"], 0x44}}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039040000000000000000001c0000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000000000000000000000ff"], 0x5c}}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) (async) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r6, @ANYBLOB="10102b0000000080a40001800c00070000000000adffffff0c00b0f98b3596410e8eee81970bf2b719cdd3e6a34c03cae7b6e17253758a7a76d135c8a513b9297f83563813252905d6889fb765437df2c8273bd167a95cdde4960ece1808e611c4eaec09d65e597918aa1538baacbbb4658bdd5810944f137b9d3663f228d03a0f68b57d1b81913ca46872c1f9a91c4067f1d4e463f2cd02e8b4980743d4f99577a50b56258d650d09ba8f69c7e7850b1c49de4a8892adc2fbdf876fd8f319ddb0428eddacf74b536c887f27b52e3c8a919778236a2d43f3de44d0ec3adb5185105640acb89d36d7975b7c7d6b5cac1598b7bc31598914cd8b51c6bd3a49732db828a18edaccb703e9a928", @ANYRES64], 0x40c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4040080) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r7, 0x29, 0x46, 0x0, &(0x7f0000000040)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) 311.925472ms ago: executing program 0 (id=2119): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000000c0)={{r0}, "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"}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028004000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0xc8}}, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x3f8, 0x400, 0x70bd28, 0x25dfdbfe, "", [""]}, 0x10}}, 0x4000000) chroot(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x494e4f4b}) 252.043115ms ago: executing program 0 (id=2120): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003d0000000e0001006e6574021d48ef696d0000000f0002006e657464657673696d300000c88882003c6c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0xed8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000070a010300000000000000000a00400109"], 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) setrlimit(0x0, &(0x7f0000000000)={0x37c3, 0x4}) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) 179.034771ms ago: executing program 3 (id=2121): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x120b60, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000ffe000000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 0 (id=2122): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000079106700000000e006000000000000009500000000000000ec017b5708618752d1a3443254c3117b445605e3cfa9416c8ef36f597be80fb9ca09246c05bca7d8756d2ae2a40831b8dd08bca8202896600b94a7db1df26cdaabcd215369198c9174e25bc4a7abbf43968dc5b060728fd188410c16d5c5cdedfab51aac88dc720d5178899a9c84119744ba4c41609096b061cbad9860dce38f0cba2c485cabf056fbaed841aea5f121ed8fb7d9d3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x20000008}) kernel console output (not intermixed with test programs): d descriptor of type 0x2, skipping [ 522.448343][ T5937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.487573][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.524360][ T5937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.533577][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.620494][ T5937] usb 2-1: Product: syz [ 522.677667][ T5937] usb 2-1: Manufacturer: syz [ 522.703875][ T5937] usb 2-1: SerialNumber: syz [ 522.980721][ T5937] usb 2-1: 0:2 : does not exist [ 523.014440][ T5937] usb 2-1: USB disconnect, device number 106 [ 523.073300][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.972777][ T5937] usb 5-1: USB disconnect, device number 101 [ 525.318953][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 525.609220][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 525.643212][ T10] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 525.723950][ T10] usb 2-1: config 0 has no interface number 0 [ 525.828771][ T10] usb 2-1: config 0 interface 37 has no altsetting 0 [ 525.850224][ T10] usb 2-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 525.865113][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.968493][T12634] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 526.024922][ T10] usb 2-1: Product: syz [ 526.038803][ T10] usb 2-1: Manufacturer: syz [ 526.073333][ T10] usb 2-1: SerialNumber: syz [ 526.086288][ T10] usb 2-1: config 0 descriptor?? [ 526.135060][ T10] rtl8150 2-1:0.37: couldn't find required endpoints [ 526.335951][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.349191][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.354749][ T10] rtl8150 2-1:0.37: probe with driver rtl8150 failed with error -5 [ 526.418969][ T10] usb 2-1: USB disconnect, device number 107 [ 526.678850][ T116] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 526.764083][T12661] overlayfs: missing 'lowerdir' [ 526.937419][ T116] usb 1-1: config index 0 descriptor too short (expected 165, got 18) [ 526.981754][ T116] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.036495][ T116] usb 1-1: config 0 has no interfaces? [ 527.130143][ T116] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 527.139447][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.166977][ T116] usb 1-1: Product: syz [ 527.236101][ T116] usb 1-1: Manufacturer: syz [ 527.255358][ T116] usb 1-1: SerialNumber: syz [ 527.400596][ T116] usb 1-1: config 0 descriptor?? [ 527.751455][T12648] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.950254][T12648] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 528.008860][ T10] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 528.024931][T12673] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1710'. [ 528.313791][T12678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.368979][T12678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.540008][ T116] usb 1-1: USB disconnect, device number 120 [ 528.724431][T12686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1713'. [ 528.856205][T12688] loop2: detected capacity change from 0 to 7 [ 528.879086][T12688] Dev loop2: unable to read RDB block 7 [ 528.915333][T12688] loop2: unable to read partition table [ 528.947853][T12688] loop2: partition table beyond EOD, truncated [ 528.956313][T12688] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 529.565119][ T981] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 529.762380][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 529.789650][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 529.811999][ T981] usb 2-1: config index 0 descriptor too short (expected 65535, got 18) [ 529.823323][ T981] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 529.892686][ T981] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 529.910407][ T981] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 529.937836][ T981] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 529.951643][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.964236][ T981] usb 2-1: Product: syz [ 529.975109][T12717] vlan3: entered promiscuous mode [ 529.999268][ T981] usb 2-1: Manufacturer: syz [ 530.119629][ T981] usb 2-1: SerialNumber: syz [ 530.560424][ T5937] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 530.685031][T12708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.693958][T12708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.704394][ T981] usb 2-1: USB disconnect, device number 108 [ 530.753137][ T5937] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 530.780878][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.809417][ T5937] usb 5-1: Product: syz [ 530.816456][ T5937] usb 5-1: Manufacturer: syz [ 530.841889][ T5937] usb 5-1: SerialNumber: syz [ 530.867449][ T5937] usb 5-1: config 0 descriptor?? [ 530.911166][ T5937] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 530.936040][ T30] audit: type=1326 audit(1759547916.413:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12730 comm="syz.0.1726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3ef58eec9 code=0x0 [ 530.970432][ T5937] usb 5-1: Detected FT4232HP [ 531.122698][ T5937] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 531.131699][ T5937] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 531.399220][ T10] usb 5-1: USB disconnect, device number 103 [ 531.426140][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 531.515936][ T10] ftdi_sio 5-1:0.0: device disconnected [ 531.961390][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'. [ 532.259357][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 532.276226][T12767] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 533.207425][T12787] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1735'. [ 533.247536][T12787] sit1: entered promiscuous mode [ 534.028997][T12784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.073628][T12784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.268871][ T5937] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 534.394420][T12803] bond0: left promiscuous mode [ 534.428245][T12803] bond_slave_0: left promiscuous mode [ 534.437252][T12803] netdevsim netdevsim2 : left promiscuous mode [ 534.445571][ T5937] usb 1-1: unable to get BOS descriptor or descriptor too short [ 534.454871][ T5937] usb 1-1: not running at top speed; connect to a high speed hub [ 534.523261][ T5937] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 534.532090][ T5937] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 534.601852][ T5937] usb 1-1: config 5 has no interface number 0 [ 534.608141][ T5937] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 534.621352][ T5937] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.753638][ T5937] usb 1-1: config 5 interface 246 has no altsetting 0 [ 534.808042][ T5937] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 534.817479][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.821181][T12803] veth0_to_team: left promiscuous mode [ 534.834768][ T5937] usb 1-1: Product: syz [ 534.843380][ T5937] usb 1-1: Manufacturer: syz [ 534.848072][ T5937] usb 1-1: SerialNumber: syz [ 534.849123][T12803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.879749][ T1624] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 534.896522][T12803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.967641][T12803] vlan0: left promiscuous mode [ 534.976705][T12803] macvlan0: left promiscuous mode [ 535.015176][T12803] veth1_macvtap: left allmulticast mode [ 535.038888][ T116] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 535.056363][ T1624] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 535.068341][ T1624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.082835][ T1624] usb 5-1: Product: syz [ 535.087858][ T1624] usb 5-1: Manufacturer: syz [ 535.095994][ T1624] usb 5-1: SerialNumber: syz [ 535.114779][T12803] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 535.127486][ T5937] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 535.129413][ T62] usb 1-1: Failed to submit usb control message: -71 [ 535.157051][ T1624] usb 5-1: config 0 descriptor?? [ 535.158757][ T5937] usb 1-1: USB disconnect, device number 121 [ 535.180566][ T62] usb 1-1: unable to send the bmi data to the device: -71 [ 535.186851][T12803] ip6tnl2: left promiscuous mode [ 535.187700][ T62] usb 1-1: unable to get target info from device [ 535.201809][ T62] usb 1-1: could not get target info (-71) [ 535.207800][ T116] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.208597][ T1624] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 535.219081][ T116] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 535.225823][T12803] ip6tnl2: left allmulticast mode [ 535.235134][ T62] usb 1-1: could not probe fw (-71) [ 535.267739][ T116] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.281456][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.290373][ T116] usb 2-1: Product: syz [ 535.304692][ T116] usb 2-1: Manufacturer: syz [ 535.311596][ T116] usb 2-1: SerialNumber: syz [ 535.325841][T12803] vlan3: left promiscuous mode [ 535.342374][ T116] cdc_mbim 2-1:1.0: skipping garbage [ 535.380418][T12803] sit1: left promiscuous mode [ 535.401189][ T8458] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.410115][ T8458] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.430570][ T8458] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.477501][ T8458] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.542148][T12819] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 535.629472][ T1624] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 536.212159][T12819] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 536.220316][ T116] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 536.227921][ T116] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 536.437022][ T116] cdc_mbim 2-1:1.0: setting tx_max = 48 [ 536.446757][ T116] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 536.466095][ T116] wwan wwan0: port wwan0mbim0 attached [ 536.498251][ T116] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 12:1f:91:5a:11:65 [ 536.544959][ T116] usb 2-1: USB disconnect, device number 109 [ 536.687870][ T116] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 536.836188][ T116] wwan wwan0: port wwan0mbim0 disconnected [ 536.921704][ T1624] usb 5-1: USB disconnect, device number 104 [ 537.498119][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 537.631537][ T1624] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 537.845153][ T1624] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 537.877516][ T1624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.906347][ T1624] usb 5-1: Product: syz [ 537.932643][ T1624] usb 5-1: Manufacturer: syz [ 537.944790][ T1624] usb 5-1: SerialNumber: syz [ 537.985475][ T1624] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 538.022327][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 538.376997][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1755'. [ 538.418594][T12895] loop4: detected capacity change from 0 to 2560 [ 538.428303][T12895] buffer_io_error: 355 callbacks suppressed [ 538.428327][T12895] Buffer I/O error on dev loop4, logical block 0, async page read [ 538.445067][T12895] Buffer I/O error on dev loop4, logical block 0, async page read [ 538.499146][T12895] Buffer I/O error on dev loop4, logical block 0, async page read [ 538.507085][T12895] Buffer I/O error on dev loop4, logical block 0, async page read [ 538.839554][ T116] usb 5-1: USB disconnect, device number 105 [ 539.081491][T12895] Buffer I/O error on dev loop4, logical block 0, async page read [ 539.135983][T12895] Buffer I/O error on dev loop4, logical block 0, async page read [ 539.192338][T12895] loop4: unable to read partition table [ 539.192553][T12895] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 539.305925][ T10] usb 5-1: Service connection timeout for: 256 [ 539.305953][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 539.306802][ T10] ath9k_htc: Failed to initialize the device [ 539.320258][ T116] usb 5-1: ath9k_htc: USB layer deinitialized [ 539.332747][T12902] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 539.332869][T12902] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 539.332961][T12902] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 539.333036][T12902] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 540.013919][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 540.021089][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'. [ 540.129593][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'. [ 540.358471][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 541.067605][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 541.398899][ T1624] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 541.471691][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 541.572205][ T1624] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 80, setting to 64 [ 541.583427][ T1624] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.622021][ T1624] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 541.632650][ T1624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.642044][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 541.651241][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 541.671792][ T1624] usb 1-1: Product: Ъ [ 541.676575][ T1624] usb 1-1: Manufacturer: 抇ᱛƀ淫캂鶑ᵅí³ï¼ˆè¦á­…᫞ﭸ㣸ꎻ佗âºâž…惽î‚㛷填帆㎉æ…䀘蠀㘳迹촩㮬▊䟖è‘Ⴉ홉䊭孎І䬿꼎湅鯉餌㑵á¢â¢¢î¨æ¨çŠœï¬à°³ã¾†è›©â쨄渃謷귤ꨫ⌀é•çˆæ ’毥鶬ãœç¨–躶è˜Ü‰ã ´éŠ±ç†¦â³¡î»á•Œè™… [ 541.701980][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 541.711711][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 541.723077][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 541.735034][ T1624] usb 1-1: SerialNumber: syz [ 541.743898][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 541.755573][T12950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 541.770254][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 541.778386][ T10] usb 3-1: Product: syz [ 541.783179][ T10] usb 3-1: Manufacturer: syz [ 541.804311][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 541.818900][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 541.829756][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 541.840160][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 542.110293][T12971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1775'. [ 542.236559][ T1624] usb 1-1: USB disconnect, device number 122 [ 542.526309][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.532919][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.539752][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.546355][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.552640][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.559216][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.565434][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.572033][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.578438][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.585043][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.591458][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.598049][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.604330][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.610923][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.617145][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.623715][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.629968][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.636538][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.642746][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 542.649314][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 542.661431][ T1624] usb 3-1: USB disconnect, device number 91 [ 542.667340][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 543.718903][ T1624] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 543.958958][ T5892] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 543.985263][ T1624] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 543.995332][ T1624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.003597][ T1624] usb 1-1: Product: syz [ 544.008416][ T1624] usb 1-1: Manufacturer: syz [ 544.019342][ T1624] usb 1-1: SerialNumber: syz [ 544.037285][ T1624] usb 1-1: config 0 descriptor?? [ 544.118849][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 544.130827][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 544.152040][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 544.165732][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.174081][ T5892] usb 5-1: Product: syz [ 544.178284][ T5892] usb 5-1: Manufacturer: syz [ 544.182958][ T5892] usb 5-1: SerialNumber: syz [ 544.192353][ T5892] usb 5-1: config 0 descriptor?? [ 544.203228][ T5892] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 544.239389][ T5892] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 544.250777][ T1624] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 544.441509][ T5937] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 544.589137][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 544.683958][ T5937] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 544.699352][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.718244][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 544.764835][ T5937] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.849365][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 545.191815][ T5937] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 545.206177][ T5892] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 545.212686][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 545.241185][ T5937] usb 4-1: Product: syz [ 545.245383][ T5937] usb 4-1: Manufacturer: syz [ 545.253719][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.268867][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.280544][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 545.282120][ T5937] cdc_wdm 4-1:1.0: skipping garbage [ 545.289690][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.326304][ T10] usb 2-1: config 0 descriptor?? [ 545.368886][ T5937] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 545.491168][ T5937] usb 4-1: USB disconnect, device number 112 [ 545.654103][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.692322][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.716797][ T5892] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 545.724948][ T5892] em28xx 5-1:0.0: board has no eeprom [ 545.874170][T12980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.884460][T12980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.966113][ T1624] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 546.039004][ T1624] usb 1-1: USB disconnect, device number 123 [ 546.088825][ T5892] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 546.099395][ T5892] em28xx 5-1:0.0: dvb set to bulk mode. [ 546.105433][ T5846] em28xx 5-1:0.0: Binding DVB extension [ 546.183382][T13014] input: syz0 as /devices/virtual/input/input40 [ 546.202147][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1778'. [ 546.310405][T13014] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1786'. [ 546.462366][ T1624] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 546.608876][ T1624] usb 1-1: device descriptor read/64, error -71 [ 546.835823][ T30] audit: type=1326 audit(1759547932.323:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.3.1788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f425eb8eec9 code=0x0 [ 546.886184][T13022] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1788'. [ 546.896607][ T1624] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 547.003996][T13025] netlink: 'syz.2.1789': attribute type 21 has an invalid length. [ 547.012383][T13025] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1789'. [ 547.025662][T13025] netlink: 'syz.2.1789': attribute type 4 has an invalid length. [ 547.033830][T12982] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 547.035807][T13025] netlink: 'syz.2.1789': attribute type 3 has an invalid length. [ 547.052372][ T1624] usb 1-1: device descriptor read/64, error -71 [ 547.073680][T13025] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1789'. [ 547.112070][ T5846] em28xx 5-1:0.0: Registering input extension [ 547.152054][T13028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1790'. [ 547.179180][ T1624] usb usb1-port1: attempt power cycle [ 547.200659][ T5846] usb 5-1: USB disconnect, device number 106 [ 547.207594][ T5846] em28xx 5-1:0.0: Disconnecting em28xx [ 547.218574][ T5846] em28xx 5-1:0.0: Closing input extension [ 547.228166][ T5892] IPVS: starting estimator thread 0... [ 547.245939][ T5846] em28xx 5-1:0.0: Freeing device [ 547.318840][T13030] IPVS: using max 50 ests per chain, 120000 per kthread [ 547.518838][ T1624] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 547.539164][ T1624] usb 1-1: device descriptor read/8, error -71 [ 547.792308][ T1624] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 547.821379][ T1624] usb 1-1: device descriptor read/8, error -71 [ 547.861946][T13034] netlink: 'syz.3.1792': attribute type 2 has an invalid length. [ 547.963905][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 547.964022][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 548.001942][ T1624] usb usb1-port1: unable to enumerate USB device [ 548.011419][ T10] usb 2-1: USB disconnect, device number 110 [ 548.078246][T13043] delete_channel: no stack [ 548.098798][ T5937] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 548.186056][T13048] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1797'. [ 548.279531][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 548.286830][ T5937] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 548.295337][ T5937] usb 5-1: config 0 has no interface number 0 [ 548.313130][ T5937] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 548.322960][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.331192][ T5937] usb 5-1: Product: syz [ 548.335434][ T5937] usb 5-1: Manufacturer: syz [ 548.340172][ T116] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 548.347858][ T5937] usb 5-1: SerialNumber: syz [ 548.355111][ T5937] usb 5-1: config 0 descriptor?? [ 548.488974][ T116] usb 4-1: device descriptor read/64, error -71 [ 548.528786][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 548.679064][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 548.685667][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.695828][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.697736][ T5937] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 548.710789][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.723146][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.723578][ T5937] uvcvideo 5-1:0.31: No valid video chain found. [ 548.736425][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.743032][ T116] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 548.752398][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.777061][ T5937] usb 5-1: USB disconnect, device number 107 [ 548.918919][ T116] usb 4-1: device descriptor read/64, error -71 [ 548.981852][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 548.987372][ T10] usbtmc 3-1:16.0: can't read capabilities [ 549.039035][ T116] usb usb4-port1: attempt power cycle [ 549.220033][T13050] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 549.236834][ T10] usb 3-1: USB disconnect, device number 92 [ 549.418860][ T116] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 549.441181][ T116] usb 4-1: device descriptor read/8, error -71 [ 549.619313][T13062] overlayfs: missing 'lowerdir' [ 549.715036][ T116] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 549.779654][ T116] usb 4-1: device descriptor read/8, error -71 [ 549.900059][ T116] usb usb4-port1: unable to enumerate USB device [ 551.396585][T13082] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 551.603781][T13079] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 551.714105][T13101] overlayfs: missing 'lowerdir' [ 552.818778][ T10] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 552.988763][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 552.997243][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.010050][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.038097][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 553.067174][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.100795][ T10] usb 5-1: config 0 descriptor?? [ 553.327296][T13111] syz.1.1812(13111): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 553.355315][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 553.528099][T13119] bond4: (slave bond_slave_1): Device is not our slave [ 553.550202][T13119] bond4: option active_slave: invalid value (bond_slave_1) [ 553.570778][T13119] bond4 (unregistering): Released all slaves [ 553.699240][ T5892] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 553.848979][ T5892] usb 2-1: device descriptor read/64, error -71 [ 554.098843][ T5892] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 554.271556][ T5892] usb 2-1: device descriptor read/64, error -71 [ 554.409516][ T5892] usb usb2-port1: attempt power cycle [ 554.568867][ T116] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 554.598947][ T1624] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 554.691356][T13135] loop4: detected capacity change from 0 to 2560 [ 554.698377][T13135] buffer_io_error: 316 callbacks suppressed [ 554.698393][T13135] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.715225][T13135] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.724984][T13135] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.728783][ T116] usb 3-1: Using ep0 maxpacket: 16 [ 554.734246][T13135] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.739957][ T116] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 554.746538][ T1624] usb 4-1: device descriptor read/64, error -71 [ 554.754524][ T116] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 554.760704][ T5892] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 554.768662][ T116] usb 3-1: config 0 has no interface number 0 [ 554.776480][T13135] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.784680][ T116] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 554.790292][T13135] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.799829][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.819463][ T5892] usb 2-1: device descriptor read/8, error -71 [ 554.819732][ T116] usb 3-1: Product: syz [ 554.834979][ T116] usb 3-1: Manufacturer: syz [ 554.841000][ T116] usb 3-1: SerialNumber: syz [ 554.846906][T13135] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.849839][ T116] usb 3-1: config 0 descriptor?? [ 554.872116][ T116] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 554.879647][T13135] loop4: unable to read partition table [ 554.883777][T13136] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 554.885441][ T116] uvcvideo 3-1:0.105: No valid video chain found. [ 554.900772][T13135] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 554.905849][T13136] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 554.945613][T13136] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 554.980972][ T5210] ldm_validate_partition_table(): Disk read failed. [ 554.987851][ T5210] Dev loop4: unable to read RDB block 0 [ 554.995057][ T5210] loop4: unable to read partition table [ 555.049663][ T1624] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 555.069947][ T5892] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 555.103235][ T5892] usb 2-1: device descriptor read/8, error -71 [ 555.133779][ T5907] usb 3-1: USB disconnect, device number 93 [ 555.188839][ T1624] usb 4-1: device descriptor read/64, error -71 [ 555.229532][ T5892] usb usb2-port1: unable to enumerate USB device [ 555.328836][ T1624] usb usb4-port1: attempt power cycle [ 555.596158][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 555.603176][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 555.621112][ T10] usb 5-1: USB disconnect, device number 108 [ 555.720742][ T1624] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 555.759847][ T1624] usb 4-1: device descriptor read/8, error -71 [ 556.008801][ T1624] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 556.060646][ T1624] usb 4-1: device descriptor read/8, error -71 [ 556.148871][ T10] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 556.169817][ T1624] usb usb4-port1: unable to enumerate USB device [ 556.257241][T13169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.300026][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 556.408417][T13158] xt_bpf: check failed: parse error [ 556.474851][T13158] netlink: 'syz.4.1825': attribute type 11 has an invalid length. [ 556.483436][T13158] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1825'. [ 557.848839][ T116] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 558.008843][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 558.019632][ T116] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 558.054595][ T116] usb 4-1: config 0 has no interface number 0 [ 558.064849][ T116] usb 4-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 558.079479][ T116] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 558.090225][ T116] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 558.101439][T13181] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1831'. [ 558.125318][ T116] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 558.142877][ T116] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.153377][ T116] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 558.162784][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.182224][ T116] usb 4-1: config 0 descriptor?? [ 558.200138][ T116] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.317450][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.406825][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.415816][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.815457][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 558.833199][T13189] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1833'. [ 558.845094][ T10] usb 5-1: no configurations [ 558.853780][ T10] usb 5-1: can't read configurations, error -22 [ 559.505555][T13200] tipc: Enabled bearer , priority 0 [ 559.639123][T13201] syzkaller0: entered promiscuous mode [ 559.669839][T13201] syzkaller0: entered allmulticast mode [ 559.693657][T13200] tipc: Resetting bearer [ 559.714124][T13200] tipc: Disabling bearer [ 559.909476][ T10] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 560.093854][T13219] overlayfs: missing 'lowerdir' [ 560.133069][ T10] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 560.142730][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.160904][ T10] usb 5-1: config 0 descriptor?? [ 561.309607][ T1624] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 561.401454][T13233] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1844'. [ 561.508802][ T1624] usb 3-1: Using ep0 maxpacket: 16 [ 561.527092][T13235] FAULT_INJECTION: forcing a failure. [ 561.527092][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 561.544423][T13235] CPU: 1 UID: 0 PID: 13235 Comm: syz.1.1845 Not tainted syzkaller #0 PREEMPT(full) [ 561.544446][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 561.544457][T13235] Call Trace: [ 561.544465][T13235] [ 561.544473][T13235] dump_stack_lvl+0x189/0x250 [ 561.544498][T13235] ? __pfx____ratelimit+0x10/0x10 [ 561.544517][T13235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.544537][T13235] ? __pfx__printk+0x10/0x10 [ 561.544564][T13235] ? __pfx___might_resched+0x10/0x10 [ 561.544582][T13235] ? fs_reclaim_acquire+0x7d/0x100 [ 561.544616][T13235] should_fail_ex+0x414/0x560 [ 561.544643][T13235] should_failslab+0xa8/0x100 [ 561.544669][T13235] kmem_cache_alloc_node_noprof+0x77/0x710 [ 561.544691][T13235] ? __alloc_skb+0x112/0x2d0 [ 561.544710][T13235] ? netlink_autobind+0xdb/0x300 [ 561.544734][T13235] __alloc_skb+0x112/0x2d0 [ 561.544757][T13235] netlink_sendmsg+0x5c6/0xb30 [ 561.544787][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.544813][T13235] ? aa_sock_msg_perm+0xf1/0x1d0 [ 561.544832][T13235] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.544848][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.544869][T13235] __sock_sendmsg+0x219/0x270 [ 561.544889][T13235] ____sys_sendmsg+0x505/0x830 [ 561.544916][T13235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.544947][T13235] ? import_iovec+0x74/0xa0 [ 561.544972][T13235] ___sys_sendmsg+0x21f/0x2a0 [ 561.544995][T13235] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.545049][T13235] ? __fget_files+0x2a/0x420 [ 561.545071][T13235] ? __fget_files+0x3a0/0x420 [ 561.545104][T13235] __x64_sys_sendmsg+0x19b/0x260 [ 561.545128][T13235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.545159][T13235] ? __pfx_ksys_write+0x10/0x10 [ 561.545178][T13235] ? rcu_is_watching+0x15/0xb0 [ 561.545202][T13235] ? do_syscall_64+0xbe/0x3b0 [ 561.545225][T13235] do_syscall_64+0xfa/0x3b0 [ 561.545242][T13235] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.545260][T13235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.545277][T13235] ? clear_bhb_loop+0x60/0xb0 [ 561.545297][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.545314][T13235] RIP: 0033:0x7fc34fd8eec9 [ 561.545330][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.545345][T13235] RSP: 002b:00007fc350cf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.545364][T13235] RAX: ffffffffffffffda RBX: 00007fc34ffe5fa0 RCX: 00007fc34fd8eec9 [ 561.545377][T13235] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 561.545388][T13235] RBP: 00007fc350cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 561.545398][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.545408][T13235] R13: 00007fc34ffe6038 R14: 00007fc34ffe5fa0 R15: 00007fc35010fa28 [ 561.545436][T13235] [ 561.841422][T13231] xt_bpf: check failed: parse error [ 562.116981][T13230] netlink: 'syz.2.1843': attribute type 11 has an invalid length. [ 562.125115][T13230] netlink: 448 bytes leftover after parsing attributes in process `syz.2.1843'. [ 562.260698][ T116] usb 4-1: USB disconnect, device number 121 [ 562.788740][ T5846] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 562.938889][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 562.945927][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 562.957869][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 562.971535][ T5846] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 562.980706][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.988832][ T5846] usb 2-1: Product: syz [ 562.993056][ T5846] usb 2-1: Manufacturer: syz [ 562.997680][ T5846] usb 2-1: SerialNumber: syz [ 563.006268][ T5846] usb 2-1: config 0 descriptor?? [ 563.014531][ T5846] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 563.027724][ T5846] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 563.035260][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.041640][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.194050][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 563.213973][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 563.244033][ T10] usb 5-1: USB disconnect, device number 110 [ 563.391888][ T30] audit: type=1326 audit(1759547948.883:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.3.1851" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f425eb8eec9 code=0x0 [ 563.445019][T13261] netlink: 'syz.3.1851': attribute type 6 has an invalid length. [ 563.628739][ T5846] em28xx 2-1:0.0: unknown em28xx chip ID (232) [ 563.831898][ T5846] em28xx 2-1:0.0: Config register raw data: 0xe8 [ 563.838443][ T5846] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 563.845975][ T5846] em28xx 2-1:0.0: No AC97 audio processor [ 563.863273][ T1624] usb 3-1: unable to get BOS descriptor or descriptor too short [ 563.872437][ T10] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 563.884404][ T1624] usb 3-1: no configurations [ 563.898778][ T1624] usb 3-1: can't read configurations, error -22 [ 563.928759][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 564.038860][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 564.050972][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 564.065645][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 564.101674][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 564.115762][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.129371][ T10] usb 5-1: Product: syz [ 564.133697][ T10] usb 5-1: Manufacturer: syz [ 564.138446][ T10] usb 5-1: SerialNumber: syz [ 564.159181][T13266] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 564.183674][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 564.209890][ T10] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 564.232155][ T10] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 564.489121][T13249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.500248][T13249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.521957][ T5846] usb 2-1: USB disconnect, device number 115 [ 564.926836][T13280] IPv6: sit2: Disabled Multicast RS [ 564.933761][T13280] sit2: entered allmulticast mode [ 565.783191][ T5937] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 565.950528][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 565.960504][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 565.971576][ T5937] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 565.982065][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.994664][ T5937] usb 4-1: config 0 descriptor?? [ 566.005213][ T5937] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 566.015056][ T5937] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 566.028901][ T116] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 566.188778][ T116] usb 3-1: Using ep0 maxpacket: 32 [ 566.195396][ T116] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 566.203621][ T116] usb 3-1: config 0 has no interface number 0 [ 566.209770][ T116] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 566.210657][ T1624] usb 4-1: USB disconnect, device number 122 [ 566.222177][ T116] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 566.237737][ T116] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 566.248872][ T116] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 566.259941][ T116] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 566.269801][ T116] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 566.278996][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.290131][ T116] usb 3-1: config 0 descriptor?? [ 566.308352][ T116] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.398145][T13302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1863'. [ 566.493850][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.547400][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.568912][ T116] usb 5-1: USB disconnect, device number 111 [ 566.584753][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.118866][ T5846] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 567.126729][ T1624] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 567.289295][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 567.300254][ T5846] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.311328][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.375675][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.385909][ T1624] usb 5-1: Using ep0 maxpacket: 16 [ 567.459039][ T5846] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.519078][T13307] xt_bpf: check failed: parse error [ 567.538478][T13307] netlink: 'syz.4.1864': attribute type 11 has an invalid length. [ 567.547051][T13307] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1864'. [ 567.565992][ T5846] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.575437][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.798062][ T5846] usb 4-1: GET_CAPABILITIES returned 0 [ 567.803939][ T5846] usbtmc 4-1:16.0: can't read capabilities [ 568.045285][T13309] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 568.191527][ T116] usb 3-1: USB disconnect, device number 96 [ 568.198844][ T5937] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 568.221010][ T5907] usb 4-1: USB disconnect, device number 123 [ 568.370223][ T5937] usb 2-1: Invalid ep0 maxpacket: 16 [ 568.506491][ T5937] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 568.668760][ T5937] usb 2-1: Invalid ep0 maxpacket: 16 [ 568.681938][ T5937] usb usb2-port1: attempt power cycle [ 568.868947][ T5846] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 569.030534][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 569.038499][ T5846] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 569.038852][ T5937] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 569.047910][ T5846] usb 4-1: config 0 has no interface number 0 [ 569.062563][ T5846] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 569.069285][ T5937] usb 2-1: Invalid ep0 maxpacket: 16 [ 569.077358][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.085487][ T5846] usb 4-1: Product: syz [ 569.089709][ T5846] usb 4-1: Manufacturer: syz [ 569.094318][ T5846] usb 4-1: SerialNumber: syz [ 569.101899][ T5846] usb 4-1: config 0 descriptor?? [ 569.110316][ T5846] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 569.118290][ T5846] dvb-usb: bulk message failed: -22 (2/0) [ 569.128425][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 569.138669][ T5846] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 569.149906][ T5846] usb 4-1: media controller created [ 569.202183][ T5937] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 569.207781][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.239687][ T5937] usb 2-1: Invalid ep0 maxpacket: 16 [ 569.247922][ T5937] usb usb2-port1: unable to enumerate USB device [ 569.269796][ T5846] cxusb: set interface failed [ 569.274687][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 569.297375][T13328] netlink: 'syz.2.1872': attribute type 21 has an invalid length. [ 569.306298][T13328] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1872'. [ 569.318479][T13323] cxusb: i2c wr: len=80 is too big! [ 569.318479][T13323] [ 569.329421][T13328] netlink: 'syz.2.1872': attribute type 4 has an invalid length. [ 569.342541][T13328] netlink: 'syz.2.1872': attribute type 3 has an invalid length. [ 569.350702][T13328] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1872'. [ 569.361469][ T5846] DVB: Unable to find symbol lgdt330x_attach() [ 569.367651][ T5846] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 569.448990][ T5846] rc_core: IR keymap rc-dvico-portable not found [ 569.455705][ T5846] Registered IR keymap rc-empty [ 569.461631][ T5846] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 569.476309][ T5846] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input42 [ 569.489933][ T5846] dvb-usb: schedule remote query interval to 100 msecs. [ 569.496905][ T5846] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 569.512939][ T5846] usb 4-1: USB disconnect, device number 124 [ 569.663023][T13333] overlayfs: missing 'lowerdir' [ 569.819214][ T5846] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 569.907201][ T1624] usb 5-1: unable to get BOS descriptor or descriptor too short [ 569.946186][ T1624] usb 5-1: no configurations [ 569.955520][ T1624] usb 5-1: can't read configurations, error -22 [ 569.989676][T13337] xt_limit: Overflow, try lower: 604147548/4200216962 [ 570.318818][ T1624] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 570.458835][ T1624] usb 5-1: device descriptor read/64, error -71 [ 570.643812][T13342] tipc: Enabled bearer , priority 10 [ 570.744347][ T1624] usb usb5-port1: attempt power cycle [ 571.120770][ T1624] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 571.299905][ T1624] usb 5-1: device descriptor read/8, error -71 [ 571.324077][T13348] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.1876'. [ 571.381590][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 571.538862][ T1624] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 571.588396][ T1624] usb 5-1: device descriptor read/8, error -71 [ 571.700122][ T1624] usb usb5-port1: unable to enumerate USB device [ 572.018953][T13356] tipc: Enabled bearer , priority 0 [ 572.149541][T13353] tipc: Disabling bearer [ 572.927495][T13371] input: syz1 as /devices/virtual/input/input43 [ 573.201853][T13375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.247084][T13375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.319317][T13375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.358274][T13375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.478844][ T1624] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 573.764561][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 573.773787][ T5937] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 573.781744][T13382] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1882'. [ 573.796662][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 573.798773][ T1624] usb 4-1: Using ep0 maxpacket: 8 [ 573.860602][ T2980] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 6081 - 0 [ 573.868984][ T2980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.097627][ T2980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.108094][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 574.147021][ T1624] usb 4-1: config 3 has an invalid interface number: 16 but max is 0 [ 574.165594][ T1624] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 574.167894][ T2980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.314919][ T1624] usb 4-1: config 3 has an invalid interface number: 142 but max is 0 [ 574.370612][ T1624] usb 4-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 574.393902][ T1624] usb 4-1: config 3 has no interface number 0 [ 574.412710][ T1624] usb 4-1: config 3 has no interface number 1 [ 574.428827][ T1624] usb 4-1: config 3 interface 16 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 574.453324][ T1624] usb 4-1: config 3 interface 16 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 574.487355][ T1624] usb 4-1: config 3 interface 16 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 574.552325][ T1624] usb 4-1: config 3 interface 16 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 574.585722][T13380] netlink: 'syz.4.1884': attribute type 11 has an invalid length. [ 574.593934][T13380] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1884'. [ 574.614482][ T1624] usb 4-1: config 3 interface 16 altsetting 7 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 574.700088][ T1624] usb 4-1: config 3 interface 16 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 574.783995][ T1624] usb 4-1: config 3 interface 16 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 574.815032][ T1624] usb 4-1: config 3 interface 16 altsetting 7 has 10 endpoint descriptors, different from the interface descriptor's value: 15 [ 574.925088][ T1624] usb 4-1: too many endpoints for config 3 interface 142 altsetting 142: 56, using maximum allowed: 30 [ 575.048102][ T1624] usb 4-1: config 3 interface 142 altsetting 142 has a duplicate endpoint with address 0xE, skipping [ 575.079826][ T1624] usb 4-1: config 3 interface 142 altsetting 142 has an invalid descriptor for endpoint zero, skipping [ 575.142317][ T1624] usb 4-1: config 3 interface 142 altsetting 142 has a duplicate endpoint with address 0xA, skipping [ 575.208967][ T1624] usb 4-1: config 3 interface 142 altsetting 142 has 5 endpoint descriptors, different from the interface descriptor's value: 56 [ 575.249180][ T30] audit: type=1326 audit(1759547960.723:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 575.272122][ T1624] usb 4-1: config 3 interface 16 has no altsetting 0 [ 575.281919][ T1624] usb 4-1: config 3 interface 142 has no altsetting 0 [ 575.339497][ T1624] usb 4-1: New USB device found, idVendor=056e, idProduct=5003, bcdDevice=59.03 [ 575.355839][ T1624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.379440][ T30] audit: type=1326 audit(1759547960.723:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 575.404385][ T30] audit: type=1326 audit(1759547960.723:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 575.701244][ T1624] usb 4-1: Product: syz [ 575.708580][ T1624] usb 4-1: Manufacturer: 귩ᡯ哠⇻㤜蒖戴倜௰䜋丑ê€êŒ¥ã¿‚瘛둪辛켊辑⽓ﺯ撗ᗫë²ÅŽë—Œìƒ§åŸŽåª¶ëŸ£ì¥¥ã¹¯ä¾žé´·î„­á®ç¹“邂৲ï´æ…¤á˜€Í»î«Ÿéœ´ë®”倒 [ 575.725614][ T1624] usb 4-1: SerialNumber: syz [ 575.831745][ T30] audit: type=1326 audit(1759547960.723:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 575.948440][ T1624] pl2303 4-1:3.16: required endpoints missing [ 575.970121][ T1624] pl2303 4-1:3.142: required endpoints missing [ 575.986119][ T1624] usb 4-1: USB disconnect, device number 125 [ 576.083524][ T30] audit: type=1326 audit(1759547960.733:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 576.120045][ T30] audit: type=1326 audit(1759547960.733:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 576.682169][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 576.690219][ T5937] usb 5-1: no configurations [ 576.694817][ T5937] usb 5-1: can't read configurations, error -22 [ 576.768347][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'. [ 576.777413][T13413] netlink: 'syz.0.1892': attribute type 11 has an invalid length. [ 576.835408][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1890'. [ 576.845190][ T1113] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.862641][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'. [ 576.871783][ T1113] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.885327][ T1113] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.907511][T13413] netlink: 'syz.0.1892': attribute type 11 has an invalid length. [ 577.133866][T13421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1894'. [ 577.174378][T13414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.498211][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'. [ 577.728793][ T5846] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 577.879471][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 577.895742][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 577.924422][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 577.938056][ T5846] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 577.947716][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.956032][ T5846] usb 4-1: Product: syz [ 577.960691][ T5846] usb 4-1: Manufacturer: syz [ 577.965386][ T5846] usb 4-1: SerialNumber: syz [ 577.994221][ T5846] usb 4-1: config 0 descriptor?? [ 578.012699][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 578.015618][ T5846] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 578.031754][ T5846] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 578.038940][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1900'. [ 578.048008][T13442] netlink: 'syz.4.1900': attribute type 18 has an invalid length. [ 578.057192][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 578.177933][T13447] fuse: Bad value for 'user_id' [ 578.183973][T13447] fuse: Bad value for 'user_id' [ 578.628789][ T10] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 578.669362][ T5846] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 578.676587][ T5846] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 578.774402][T13462] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1906'. [ 578.808809][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 578.851074][T13455] netlink: 'syz.4.1903': attribute type 11 has an invalid length. [ 579.297491][ T5846] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 579.309875][ T5846] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 579.318394][ T5846] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 579.327431][ T5846] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 579.598830][ T5892] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 579.753195][ T5892] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 579.764755][ T5892] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 579.777048][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.784155][ T5892] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 579.794512][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.815936][ T5892] usb 2-1: config 0 descriptor?? [ 579.822029][T13482] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 580.244385][ T5892] hid-u2fzero 0003:10C4:8ACF.0025: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 580.314437][T13486] syz_tun: entered promiscuous mode [ 580.332503][T13486] vlan2: entered promiscuous mode [ 580.348582][ T5892] hid-u2fzero 0003:10C4:8ACF.0025: U2F Zero LED initialised [ 580.371725][ T5892] hid-u2fzero 0003:10C4:8ACF.0025: U2F Zero RNG initialised [ 580.379944][ T5846] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 580.387160][ T5846] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 580.436636][T13482] netlink: 'syz.1.1911': attribute type 21 has an invalid length. [ 580.445135][T13482] __nla_validate_parse: 1 callbacks suppressed [ 580.445150][T13482] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1911'. [ 580.533391][ T5937] usb 4-1: USB disconnect, device number 126 [ 580.622757][T13482] netlink: 'syz.1.1911': attribute type 4 has an invalid length. [ 580.647596][T13482] netlink: 'syz.1.1911': attribute type 3 has an invalid length. [ 580.658829][T13482] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1911'. [ 580.719990][ T5892] usb 2-1: USB disconnect, device number 120 [ 581.582647][T13500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 581.948808][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 581.989677][ T116] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 581.997565][ T10] usb 5-1: no configurations [ 582.002378][ T10] usb 5-1: can't read configurations, error -22 [ 582.161252][ T116] usb 2-1: config 0 has no interfaces? [ 582.278973][ T116] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 582.289289][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.297609][ T116] usb 2-1: Product: syz [ 582.334233][ T116] usb 2-1: Manufacturer: syz [ 582.348402][ T116] usb 2-1: SerialNumber: syz [ 582.467179][ T116] usb 2-1: config 0 descriptor?? [ 582.885000][T13515] overlayfs: missing 'lowerdir' [ 582.970630][ T10] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 582.998021][T13516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.007400][T13516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.023715][T13516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.034348][T13516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.129028][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 583.139898][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 583.172503][ T10] usb 5-1: config 0 has no interface number 0 [ 583.204003][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.217244][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.227389][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 583.237322][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.249692][ T5892] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 583.261664][ T10] usb 5-1: config 0 descriptor?? [ 583.402020][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 583.416172][ T5892] usb 3-1: no configurations [ 583.421835][ T5892] usb 3-1: can't read configurations, error -22 [ 583.896250][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0026/input/input44 [ 584.044959][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0026/input/input45 [ 584.217946][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.368965][ T10] uclogic 0003:28BD:0071.0026: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 584.454570][ T116] usb 2-1: USB disconnect, device number 121 [ 584.479879][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.495463][ T30] audit: type=1326 audit(1759547969.983:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49f8eec9 code=0x7ffc0000 [ 584.554116][ T10] usb 5-1: USB disconnect, device number 119 [ 584.600502][ T6017] udevd[6017]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 584.608231][ T30] audit: type=1326 audit(1759547969.983:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49f8eec9 code=0x7ffc0000 [ 584.673957][ T30] audit: type=1326 audit(1759547969.983:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fca49f8eec9 code=0x7ffc0000 [ 584.717813][ T6017] udevd[6017]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 584.757830][ T30] audit: type=1326 audit(1759547970.073:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49f8eec9 code=0x7ffc0000 [ 584.798165][ T30] audit: type=1326 audit(1759547970.073:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49f8eec9 code=0x7ffc0000 [ 584.839627][ T5892] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 585.001728][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.023067][T13536] fido_id[13536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 585.048478][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.078781][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 585.207545][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.263558][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.285659][ T5892] usb 3-1: config 0 descriptor?? [ 585.495643][ T30] audit: type=1326 audit(1759547970.983:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca49f8eacb code=0x7ffc0000 [ 585.843370][ T5892] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 585.864444][ T30] audit: type=1326 audit(1759547970.983:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca49f8eacb code=0x7ffc0000 [ 585.915047][T13562] netlink: 'syz.3.1935': attribute type 21 has an invalid length. [ 585.924830][T13562] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1935'. [ 585.934054][ T30] audit: type=1326 audit(1759547971.013:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fca49fc1785 code=0x7ffc0000 [ 585.955927][ T5892] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 585.972713][T13562] netlink: 'syz.3.1935': attribute type 4 has an invalid length. [ 586.038837][T13562] netlink: 'syz.3.1935': attribute type 3 has an invalid length. [ 586.057667][T13562] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1935'. [ 586.086988][ T30] audit: type=1326 audit(1759547971.213:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49f8eec9 code=0x7ffc0000 [ 586.150706][ T30] audit: type=1326 audit(1759547971.213:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49f8eec9 code=0x7ffc0000 [ 586.381432][T13566] netlink: 'syz.1.1937': attribute type 21 has an invalid length. [ 586.395618][T13566] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1937'. [ 586.420452][T13566] netlink: 'syz.1.1937': attribute type 4 has an invalid length. [ 586.510422][T13566] netlink: 'syz.1.1937': attribute type 3 has an invalid length. [ 586.518178][T13566] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1937'. [ 586.908029][T13571] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1938'. [ 588.057174][ T116] usb 3-1: USB disconnect, device number 99 [ 588.985217][T13604] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1947'. [ 589.031932][T13606] netlink: 'syz.1.1948': attribute type 21 has an invalid length. [ 589.041306][T13606] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1948'. [ 589.078951][T13606] netlink: 'syz.1.1948': attribute type 4 has an invalid length. [ 589.087884][T13606] netlink: 'syz.1.1948': attribute type 3 has an invalid length. [ 589.123345][T13606] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1948'. [ 589.573222][T13611] overlayfs: missing 'lowerdir' [ 590.048819][ T116] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 590.201226][ T116] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.211438][ T116] usb 5-1: config 0 has no interfaces? [ 590.259565][ T116] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 590.291050][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.327537][ T116] usb 5-1: Product: syz [ 590.342276][ T116] usb 5-1: Manufacturer: syz [ 590.358389][ T116] usb 5-1: SerialNumber: syz [ 590.377851][ T116] usb 5-1: config 0 descriptor?? [ 590.491601][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 590.502557][T13629] veth1_macvtap: left promiscuous mode [ 590.654920][ T116] usb 5-1: USB disconnect, device number 120 [ 590.702956][T13627] ALSA: mixer_oss: invalid OSS volume 'u' [ 590.828776][ T5892] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 590.989348][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 591.047379][T13631] netlink: 'syz.2.1955': attribute type 11 has an invalid length. [ 591.055837][T13631] netlink: 448 bytes leftover after parsing attributes in process `syz.2.1955'. [ 591.312895][T13642] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1960'. [ 591.809041][ T116] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 591.958789][ T116] usb 4-1: Using ep0 maxpacket: 16 [ 591.965572][ T116] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 591.973823][ T116] usb 4-1: config 0 has no interface number 0 [ 591.980593][ T116] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 591.993354][ T116] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 591.998760][ T10] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 592.002473][ T116] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 592.002496][ T116] usb 4-1: Manufacturer: syz [ 592.023765][ T116] usb 4-1: SerialNumber: syz [ 592.032259][ T116] usb 4-1: config 0 descriptor?? [ 592.158819][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 592.165997][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 592.175851][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 592.185713][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 592.195978][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.209165][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 592.218551][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.248934][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.262742][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.290653][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 592.290670][ T30] audit: type=1326 audit(1759547977.783:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.302438][T13653] netlink: 'syz.1.1965': attribute type 4 has an invalid length. [ 592.327545][ T30] audit: type=1326 audit(1759547977.783:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.350831][ T30] audit: type=1326 audit(1759547977.783:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.374219][ T30] audit: type=1326 audit(1759547977.783:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.398408][ T30] audit: type=1326 audit(1759547977.783:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.421990][ T30] audit: type=1326 audit(1759547977.783:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.445719][ T30] audit: type=1326 audit(1759547977.783:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.471380][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 592.479030][ T10] usbtmc 5-1:16.0: can't read capabilities [ 592.486044][ T116] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 592.494402][ T30] audit: type=1326 audit(1759547977.783:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.518592][ T30] audit: type=1326 audit(1759547977.783:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.563014][ T30] audit: type=1326 audit(1759547977.783:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc34fd8eec9 code=0x7ffc0000 [ 592.571025][ T116] usb 4-1: USB disconnect, device number 127 [ 592.702212][T13651] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 592.851344][ T116] usb 5-1: USB disconnect, device number 121 [ 593.049292][ T5937] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 593.210863][ T5937] usb 2-1: config 5 has an invalid interface number: 3 but max is 0 [ 593.227356][T13668] tipc: Enabled bearer , priority 0 [ 593.232808][ T5937] usb 2-1: config 5 has no interface number 0 [ 593.243429][T13668] tipc: Resetting bearer [ 593.250445][ T5937] usb 2-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 593.263803][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.284371][ T5937] usb 2-1: Product: syz [ 593.299580][ T5937] usb 2-1: Manufacturer: syz [ 593.305492][ T5937] usb 2-1: SerialNumber: syz [ 593.321335][T13667] tipc: Disabling bearer [ 593.324090][ T5937] ftdi_sio 2-1:5.3: FTDI USB Serial Device converter detected [ 593.343900][ T5937] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 593.485221][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 593.493068][ T5892] usb 3-1: no configurations [ 593.499839][ T5892] usb 3-1: can't read configurations, error -22 [ 593.530569][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 593.549411][ T10] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 593.551376][T13661] batadv0: entered promiscuous mode [ 593.565232][T13661] macvtap1: entered promiscuous mode [ 593.572263][T13661] macvtap1: entered allmulticast mode [ 593.577653][T13661] batadv0: entered allmulticast mode [ 593.585828][T13661] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 593.599083][T13676] batadv0: left allmulticast mode [ 593.604880][T13676] batadv0: left promiscuous mode [ 593.615150][ T5846] usb 2-1: USB disconnect, device number 122 [ 593.633657][ T5846] ftdi_sio 2-1:5.3: device disconnected [ 593.718866][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 593.731784][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 593.745220][ T10] usb 5-1: config 0 has no interface number 0 [ 593.754631][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.824470][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 593.879274][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.961519][T13684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 594.011319][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 594.024434][ T5951] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 594.033525][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 594.043350][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.064447][ T10] usb 5-1: config 0 descriptor?? [ 594.075381][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 594.208852][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 594.217582][ T5951] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 594.226773][ T5951] usb 4-1: config 0 has no interface number 0 [ 594.233607][ T5951] usb 4-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 594.253794][ T5951] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 594.301723][ T5951] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 594.313171][ T5951] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 594.325756][ T5951] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.354864][ T10] usb 5-1: USB disconnect, device number 122 [ 594.360959][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 594.372330][ T5951] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 594.385822][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.470310][ T5951] usb 4-1: config 0 descriptor?? [ 594.490976][ T5951] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.575167][T13670] ldusb: No device or device unplugged -19 [ 594.575170][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 594.706757][T13682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.716913][T13682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.616597][ T5937] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 595.778747][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 595.785733][ T5937] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.797168][ T5937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 595.809760][ T5937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.100350][ T5937] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.145569][ T5937] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 596.159206][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.644407][ T5937] usb 5-1: usb_control_msg returned -71 [ 596.651450][ T5937] usbtmc 5-1:16.0: can't read capabilities [ 596.775645][ T5937] usb 5-1: USB disconnect, device number 123 [ 596.827409][ T5951] usb 4-1: USB disconnect, device number 2 [ 596.877459][T13720] netlink: 'syz.2.1984': attribute type 21 has an invalid length. [ 596.908351][T13720] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1984'. [ 596.939505][T13720] netlink: 'syz.2.1984': attribute type 4 has an invalid length. [ 596.955607][T13720] netlink: 'syz.2.1984': attribute type 3 has an invalid length. [ 596.999300][T13720] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1984'. [ 597.169560][T13731] overlayfs: missing 'lowerdir' [ 597.229248][T13737] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1988'. [ 597.339103][ T5937] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 597.553723][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 597.570669][ T5937] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 597.580136][ T5937] usb 5-1: config 0 has no interface number 0 [ 597.586217][ T5937] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.970816][ T5937] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.990765][ T5937] usb 5-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.029691][ T5937] usb 5-1: config 0 interface 2 has no altsetting 0 [ 598.054003][ T5937] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 598.123126][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.184840][ T5937] usb 5-1: config 0 descriptor?? [ 598.578779][ T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 598.588812][ T5907] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 598.609740][T13730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.618448][T13730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.639361][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 598.639397][ T30] audit: type=1326 audit(1759547984.133:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4438eec9 code=0x7ffc0000 [ 598.674779][T13757] bridge_slave_0: left allmulticast mode [ 598.688961][ T30] audit: type=1326 audit(1759547984.133:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4438eec9 code=0x7ffc0000 [ 598.712743][ T30] audit: type=1326 audit(1759547984.133:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f1e4438eec9 code=0x7ffc0000 [ 598.735374][ T5907] usb 3-1: device descriptor read/64, error -71 [ 598.750281][T13757] bridge_slave_0: left promiscuous mode [ 598.756546][T13757] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.774258][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.799021][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 598.817794][T13759] netlink: 'syz.0.1994': attribute type 10 has an invalid length. [ 598.870663][T13757] bridge_slave_1: left allmulticast mode [ 598.900408][T13757] bridge_slave_1: left promiscuous mode [ 598.949751][ T10] usb 2-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 598.979161][ T5907] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 598.988786][ T10] usb 2-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 599.041167][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'. [ 599.055008][ T10] usb 2-1: Product: syz [ 599.065445][ T10] usb 2-1: Manufacturer: syz [ 599.070287][ T10] usb 2-1: SerialNumber: syz [ 599.076101][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.105514][ T5937] uclogic 0003:5543:0781.0028: unknown main item tag 0x0 [ 599.117151][ T10] usb 2-1: config 0 descriptor?? [ 599.141954][ T5937] uclogic 0003:5543:0781.0028: unknown main item tag 0x0 [ 599.149143][ T5907] usb 3-1: device descriptor read/64, error -71 [ 599.158475][T13757] bond0: (slave bond_slave_0): Releasing backup interface [ 599.158519][ T30] audit: type=1326 audit(1759547984.633:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4438eec9 code=0x7ffc0000 [ 599.197817][ T5937] uclogic 0003:5543:0781.0028: unknown main item tag 0x0 [ 599.208347][ T30] audit: type=1326 audit(1759547984.633:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4438eec9 code=0x7ffc0000 [ 599.208355][ T5937] uclogic 0003:5543:0781.0028: unknown main item tag 0x1 [ 599.208386][ T5937] uclogic 0003:5543:0781.0028: unknown main item tag 0x0 [ 599.251542][T13757] bond0: (slave bond_slave_1): Releasing backup interface [ 599.281432][T13757] team0: Port device team_slave_0 removed [ 599.289117][ T5937] uclogic 0003:5543:0781.0028: unknown main item tag 0x0 [ 599.301717][ T5937] uclogic 0003:5543:0781.0028: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input2 [ 599.313498][ T5907] usb usb3-port1: attempt power cycle [ 599.324329][T13757] team0: Port device team_slave_1 removed [ 599.334842][ T116] usb 2-1: USB disconnect, device number 123 [ 599.360512][T13757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.369210][ T5892] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 599.382040][T13757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.400485][T13757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.408953][T13757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.418480][T13757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.486920][T13759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.524607][T13759] team0: Port device bond0 added [ 599.530283][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 599.537006][ T5892] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 599.546632][ T5892] usb 4-1: config 0 has no interface number 0 [ 599.553225][ T5892] usb 4-1: config 0 interface 184 has no altsetting 0 [ 599.562721][ T5892] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 599.573599][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.586289][ T5892] usb 4-1: Product: syz [ 599.591212][ T5892] usb 4-1: Manufacturer: syz [ 599.608730][ T5892] usb 4-1: SerialNumber: syz [ 599.636997][ T5892] usb 4-1: config 0 descriptor?? [ 599.646342][ T5892] smsc75xx v1.0.0 [ 599.662942][ T5907] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 599.694009][ T5907] usb 3-1: device descriptor read/8, error -71 [ 599.732076][T13761] team0 (unregistering): Port device bond0 removed [ 599.938760][ T5907] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 599.969453][ T5907] usb 3-1: device descriptor read/8, error -71 [ 600.079070][ T5907] usb usb3-port1: unable to enumerate USB device [ 600.471911][ T5951] usb 5-1: USB disconnect, device number 124 [ 600.643950][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 600.658013][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 600.670176][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 600.692274][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 600.708324][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 600.724708][ T5892] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 600.751972][ T5892] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 600.764511][T13777] netlink: 'syz.4.1998': attribute type 11 has an invalid length. [ 600.790014][ T5892] usb 4-1: USB disconnect, device number 3 [ 600.797774][T13777] fuse: Bad value for 'user_id' [ 600.802787][T13777] fuse: Bad value for 'user_id' [ 600.958123][T13781] netlink: 'syz.0.2000': attribute type 21 has an invalid length. [ 600.966738][T13781] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2000'. [ 600.977314][T13781] netlink: 'syz.0.2000': attribute type 4 has an invalid length. [ 600.986639][T13781] netlink: 'syz.0.2000': attribute type 3 has an invalid length. [ 600.994848][T13781] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2000'. [ 601.063498][T13785] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 601.108870][ T1624] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 601.265776][ T1624] usb 5-1: Using ep0 maxpacket: 8 [ 601.272194][ T1624] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 601.306242][ T1624] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 601.328888][ T1624] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 601.371516][ T1624] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.398800][ T1624] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 601.408628][ T1624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.689173][ T116] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 601.880328][ T116] usb 3-1: device descriptor read/64, error -71 [ 601.971701][ T1624] usb 5-1: usb_control_msg returned -71 [ 601.977391][ T1624] usbtmc 5-1:16.0: can't read capabilities [ 601.992835][ T1624] usb 5-1: USB disconnect, device number 125 [ 602.118341][T13807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2007'. [ 602.119360][ T116] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 602.127727][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 602.318887][ T116] usb 3-1: device descriptor read/64, error -71 [ 602.433119][ T116] usb usb3-port1: attempt power cycle [ 602.493394][T13817] loop4: detected capacity change from 0 to 2560 [ 602.501923][T13817] buffer_io_error: 333 callbacks suppressed [ 602.502172][T13817] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.533394][T13817] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.543936][T13817] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.553370][T13817] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.561641][T13817] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.570477][T13817] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.580122][T13817] loop4: unable to read partition table [ 602.584409][T13819] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 602.602234][T13817] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 602.606120][T13819] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 602.648035][T13819] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 602.679269][ T5210] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 602.724104][ T5210] ldm_validate_partition_table(): Disk read failed. [ 602.731937][ T5210] Dev loop4: unable to read RDB block 0 [ 602.737916][ T5210] loop4: unable to read partition table [ 602.781916][T13823] loop4: detected capacity change from 0 to 2560 [ 602.788938][ T116] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 602.801338][ T6017] ldm_validate_partition_table(): Disk read failed. [ 602.808367][ T6017] Dev loop4: unable to read RDB block 0 [ 602.810551][ T116] usb 3-1: device descriptor read/8, error -71 [ 602.815983][ T6017] loop4: unable to read partition table [ 602.827951][T13823] ldm_validate_partition_table(): Disk read failed. [ 602.838565][T13823] Dev loop4: unable to read RDB block 0 [ 602.845399][T13823] loop4: unable to read partition table [ 602.852538][T13823] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 603.011301][T13831] fuse: Bad value for 'group_id' [ 603.016403][T13831] fuse: Bad value for 'group_id' [ 603.047720][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2014'. [ 603.059715][ T116] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 603.079505][ T116] usb 3-1: device descriptor read/8, error -71 [ 603.189487][ T116] usb usb3-port1: unable to enumerate USB device [ 604.170595][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2018'. [ 604.181037][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 604.328795][ T116] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 604.401833][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 604.478778][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 604.494642][ T116] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 604.504166][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.527817][ T116] usb 4-1: config 0 descriptor?? [ 604.542847][ T116] gspca_main: sq930x-2.14.0 probing 041e:403c [ 604.570656][T13857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2022'. [ 604.750720][ T1624] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 604.919891][ T1624] usb 5-1: Using ep0 maxpacket: 8 [ 604.930940][ T1624] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 604.942407][ T1624] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 604.963952][ T1624] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.976111][ T1624] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.997489][ T1624] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 605.012506][ T1624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.482241][ T1624] usb 5-1: usb_control_msg returned -71 [ 605.490819][ T1624] usbtmc 5-1:16.0: can't read capabilities [ 605.508256][ T1624] usb 5-1: USB disconnect, device number 126 [ 605.575536][ T116] gspca_sq930x: ucbus_write failed -71 [ 605.581206][ T116] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 605.601413][ T116] usb 4-1: USB disconnect, device number 4 [ 605.690490][T13872] netlink: 'syz.0.2026': attribute type 21 has an invalid length. [ 605.728206][T13872] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2026'. [ 605.780023][T13872] netlink: 'syz.0.2026': attribute type 4 has an invalid length. [ 605.821428][T13872] netlink: 'syz.0.2026': attribute type 3 has an invalid length. [ 605.875695][T13872] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2026'. [ 606.198994][ T1624] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 606.378768][ T1624] usb 5-1: Using ep0 maxpacket: 8 [ 606.385545][ T1624] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 606.398724][ T1624] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 606.427287][ T1624] usb 5-1: config 1 has no interface number 1 [ 606.434501][ T1624] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 606.443666][ T1624] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 606.454496][ T116] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 606.476624][ T1624] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 606.495200][ T1624] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.504806][ T1624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.513097][ T1624] usb 5-1: Product: syz [ 606.517410][ T1624] usb 5-1: Manufacturer: syz [ 606.522948][ T1624] usb 5-1: SerialNumber: syz [ 606.598872][ T116] usb 4-1: Using ep0 maxpacket: 8 [ 606.605644][ T116] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 606.660701][ T116] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.677699][ T116] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.693360][ T116] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.708610][ T116] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.733510][ T116] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 606.743435][T13880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.755127][T13880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.763068][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.827519][ T1624] usb 5-1: 0:8 : does not exist [ 606.838797][ T5951] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 606.873091][ T1624] usb 5-1: USB disconnect, device number 127 [ 606.894758][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.064086][ T116] usb 4-1: usb_control_msg returned -32 [ 607.074355][ T116] usbtmc 4-1:16.0: can't read capabilities [ 607.131104][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.142804][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.153616][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.168381][ T5951] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.178332][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.196662][ T5951] usb 3-1: config 0 descriptor?? [ 607.508803][ T116] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 607.661482][ T116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.671954][ T116] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 607.681030][ T116] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 607.690875][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.695311][ T1624] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 607.695797][ T5951] usbhid 3-1:0.0: can't add hid device: -71 [ 607.713636][ T5951] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 607.725779][ T116] usb 2-1: config 0 descriptor?? [ 607.725872][ T5951] usb 3-1: USB disconnect, device number 110 [ 607.873834][ T1624] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 607.882660][ T1624] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 607.893311][ T1624] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 607.902437][ T1624] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 607.915774][ T1624] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 607.925138][ T1624] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 607.934935][ T1624] usb 5-1: Product: syz [ 607.940381][ T1624] usb 5-1: Manufacturer: syz [ 607.967743][ T1624] cdc_wdm 5-1:1.0: skipping garbage [ 607.981348][ T1624] cdc_wdm 5-1:1.0: skipping garbage [ 608.004653][ T1624] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 608.018613][ T1624] cdc_wdm 5-1:1.0: Unknown control protocol [ 608.044498][T13903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2036'. [ 608.084726][ T116] usb 2-1: USB disconnect, device number 124 [ 608.314714][T13910] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 608.326867][ T5907] usb 5-1: USB disconnect, device number 2 [ 608.898936][ T5907] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 608.973704][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'. [ 609.048536][T13932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.062477][ T5907] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.088568][ T5907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.146668][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.162003][T13936] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 609.173014][T13936] block device autoloading is deprecated and will be removed. [ 609.181164][ T5907] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.265651][ T1624] usb 4-1: USB disconnect, device number 5 [ 609.272274][ T5907] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.305152][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 609.338175][ T5907] usb 5-1: Product: syz [ 609.344243][ T5907] usb 5-1: Manufacturer: syz [ 609.367063][T13947] netlink: 'syz.3.2048': attribute type 20 has an invalid length. [ 609.370001][ T5907] cdc_wdm 5-1:1.0: skipping garbage [ 609.390325][ T5907] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 609.582503][ T981] usb 5-1: USB disconnect, device number 3 [ 609.718851][ T1624] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 609.738881][ T5907] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 609.868786][ T5907] usb 2-1: device descriptor read/64, error -71 [ 609.890223][ T1624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.901425][ T1624] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 609.910594][ T1624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.920502][ T1624] usb 4-1: config 0 descriptor?? [ 610.108936][ T5907] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 610.186764][ T1624] usbhid 4-1:0.0: can't add hid device: -71 [ 610.201144][ T1624] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 610.216082][ T1624] usb 4-1: USB disconnect, device number 6 [ 610.252243][ T5907] usb 2-1: device descriptor read/64, error -71 [ 610.404472][ T5907] usb usb2-port1: attempt power cycle [ 610.453898][T13970] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2053'. [ 610.758820][ T5907] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 610.784391][ T5907] usb 2-1: device descriptor read/8, error -71 [ 610.919786][ T1624] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 611.028834][ T5907] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 611.050936][ T5907] usb 2-1: device descriptor read/8, error -71 [ 611.144746][ T1624] usb 4-1: Using ep0 maxpacket: 32 [ 611.150845][ T1624] usb 4-1: no configurations [ 611.155615][ T1624] usb 4-1: can't read configurations, error -22 [ 611.159982][ T5907] usb usb2-port1: unable to enumerate USB device [ 611.298888][ T1624] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 611.375765][T13974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.463656][ T1624] usb 4-1: Using ep0 maxpacket: 32 [ 611.471304][ T1624] usb 4-1: no configurations [ 611.476127][ T1624] usb 4-1: can't read configurations, error -22 [ 611.483771][ T1624] usb usb4-port1: attempt power cycle [ 611.838228][ T1624] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 611.879793][ T1624] usb 4-1: Using ep0 maxpacket: 32 [ 611.888097][ T1624] usb 4-1: no configurations [ 611.911000][ T1624] usb 4-1: can't read configurations, error -22 [ 612.079298][ T1624] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 612.099223][ T1624] usb 4-1: Using ep0 maxpacket: 32 [ 612.104833][ T1624] usb 4-1: no configurations [ 612.109496][ T1624] usb 4-1: can't read configurations, error -22 [ 612.116969][ T1624] usb usb4-port1: unable to enumerate USB device [ 612.218951][ T5907] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 612.368842][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 612.380001][ T5907] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 612.394457][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.402997][ T5907] usb 3-1: Product: syz [ 612.407418][ T5907] usb 3-1: Manufacturer: syz [ 612.412490][ T5907] usb 3-1: SerialNumber: syz [ 612.422202][ T5907] usb 3-1: config 0 descriptor?? [ 612.706550][ T5907] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 612.716193][ T5907] eb 9a 47 80 9b f8 7a f0 [ 612.721010][ T5907] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 612.952017][ T1624] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 613.118740][ T1624] usb 4-1: Using ep0 maxpacket: 8 [ 613.125762][ T1624] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 613.137412][ T1624] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 613.148336][ T1624] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.187349][ T1624] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.263928][T13992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.265366][ T1624] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 613.272748][T13992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.293269][ T1624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.488284][ T5907] usb 3-1: USB disconnect, device number 111 [ 613.616906][ T1624] usb 4-1: usb_control_msg returned -71 [ 613.624459][ T1624] usbtmc 4-1:16.0: can't read capabilities [ 613.636009][ T1624] usb 4-1: USB disconnect, device number 11 [ 613.769808][T14005] FAULT_INJECTION: forcing a failure. [ 613.769808][T14005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.793486][T14005] CPU: 0 UID: 0 PID: 14005 Comm: syz.4.2063 Not tainted syzkaller #0 PREEMPT(full) [ 613.793506][T14005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 613.793513][T14005] Call Trace: [ 613.793518][T14005] [ 613.793523][T14005] dump_stack_lvl+0x189/0x250 [ 613.793540][T14005] ? __pfx____ratelimit+0x10/0x10 [ 613.793552][T14005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.793563][T14005] ? __pfx__printk+0x10/0x10 [ 613.793584][T14005] should_fail_ex+0x414/0x560 [ 613.793602][T14005] _copy_to_user+0x31/0xb0 [ 613.793617][T14005] rng_dev_read+0x3f2/0x770 [ 613.793633][T14005] ? __pfx_rng_dev_read+0x10/0x10 [ 613.793647][T14005] ? common_file_perm+0x1b5/0x230 [ 613.793659][T14005] ? bpf_lsm_file_permission+0x9/0x20 [ 613.793669][T14005] ? security_file_permission+0x75/0x290 [ 613.793682][T14005] ? rw_verify_area+0x2a6/0x4d0 [ 613.793695][T14005] ? __lock_acquire+0xab9/0xd20 [ 613.793704][T14005] ? __pfx_rng_dev_read+0x10/0x10 [ 613.793717][T14005] vfs_read+0x200/0xa30 [ 613.793734][T14005] ? __pfx_vfs_read+0x10/0x10 [ 613.793747][T14005] ? __fget_files+0x2a/0x420 [ 613.793763][T14005] ? __fget_files+0x2a/0x420 [ 613.793776][T14005] ? __fget_files+0x3a0/0x420 [ 613.793790][T14005] ? __fget_files+0x2a/0x420 [ 613.793808][T14005] ksys_read+0x145/0x250 [ 613.793822][T14005] ? __pfx_ksys_read+0x10/0x10 [ 613.793833][T14005] ? rcu_is_watching+0x15/0xb0 [ 613.793848][T14005] ? do_syscall_64+0xbe/0x3b0 [ 613.793861][T14005] do_syscall_64+0xfa/0x3b0 [ 613.793871][T14005] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.793881][T14005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.793890][T14005] ? clear_bhb_loop+0x60/0xb0 [ 613.793904][T14005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.793920][T14005] RIP: 0033:0x7f1e4438eec9 [ 613.793935][T14005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.793950][T14005] RSP: 002b:00007f1e45249038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 613.793968][T14005] RAX: ffffffffffffffda RBX: 00007f1e445e5fa0 RCX: 00007f1e4438eec9 [ 613.793982][T14005] RDX: 0000000000002020 RSI: 0000200000001440 RDI: 0000000000000003 [ 613.793993][T14005] RBP: 00007f1e45249090 R08: 0000000000000000 R09: 0000000000000000 [ 613.794003][T14005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.794013][T14005] R13: 00007f1e445e6038 R14: 00007f1e445e5fa0 R15: 00007f1e4470fa28 [ 613.794040][T14005] [ 614.039023][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.071931][T14004] random: crng reseeded on system resumption [ 614.688747][ T116] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 614.840356][ T116] usb 5-1: config 0 has an invalid descriptor of length 109, skipping remainder of the config [ 614.851238][ T116] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 614.862819][ T116] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 614.883356][ T116] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 614.893109][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.901669][ T116] usb 5-1: Product: syz [ 614.906064][ T116] usb 5-1: Manufacturer: syz [ 614.910795][ T116] usb 5-1: SerialNumber: syz [ 614.917524][ T116] usb 5-1: config 0 descriptor?? [ 615.197330][ T116] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 615.235245][ T116] uvcvideo 5-1:0.0: No valid video chain found. [ 615.256681][ T116] usb 5-1: USB disconnect, device number 4 [ 615.386057][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2070'. [ 615.867556][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 615.895759][T14041] vlan0: entered promiscuous mode [ 616.054184][T14043] tipc: Enabled bearer , priority 0 [ 616.062926][T14043] syzkaller0: entered promiscuous mode [ 616.069426][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 616.085453][T14043] syzkaller0: entered allmulticast mode [ 616.091589][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.107725][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 616.118577][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 616.131500][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 616.149539][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 616.152776][T14043] tipc: Resetting bearer [ 616.160958][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 616.185221][T14042] tipc: Resetting bearer [ 616.204137][T14042] tipc: Disabling bearer [ 616.226671][ T10] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 616.318735][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 616.326745][ T10] usb 3-1: Product: syz [ 616.365072][ T10] usb 3-1: Manufacturer: syz [ 616.384019][ T10] usb 3-1: SerialNumber: syz [ 616.402783][ T10] usb 3-1: config 0 descriptor?? [ 616.427873][ T10] usb 3-1: no audio or video endpoints found [ 616.614503][T14034] netlink: 'syz.2.2071': attribute type 14 has an invalid length. [ 616.650653][ T5951] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 616.693485][ T116] usb 3-1: USB disconnect, device number 112 [ 617.290045][ T5951] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 617.318751][ T5951] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.356289][ T5951] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 617.385581][ T5951] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 617.420901][T14076] loop8: detected capacity change from 0 to 1 [ 617.429406][T14076] Dev loop8: unable to read RDB block 1 [ 617.445657][T14076] loop8: unable to read partition table [ 617.451859][ T5951] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 617.481769][T14076] loop8: partition table beyond EOD, truncated [ 617.498126][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 617.498403][T14076] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 617.558743][ T5951] usb 2-1: Product: syz [ 617.562983][ T5951] usb 2-1: Manufacturer: syz [ 617.611246][ T5951] cdc_wdm 2-1:1.0: skipping garbage [ 617.618030][ T5951] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 617.693532][T14082] futex_wake_op: syz.0.2088 tries to shift op by -1; fix this program [ 617.808407][ T116] usb 2-1: USB disconnect, device number 3 [ 617.818769][ T5907] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 618.059452][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 618.066243][ T5907] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 618.078846][ T5907] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 618.106008][ T5907] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 618.131172][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 618.134200][T14089] netlink: 'syz.4.2089': attribute type 5 has an invalid length. [ 618.188017][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 618.188052][T14089] bridge0: port 3(macsec0) entered blocking state [ 618.198465][T14089] bridge0: port 3(macsec0) entered disabled state [ 618.252908][T14089] macsec0: entered allmulticast mode [ 618.261741][T14091] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2090'. [ 618.273499][T14089] veth1_macvtap: entered allmulticast mode [ 618.313800][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 618.314771][T14089] macsec0: entered promiscuous mode [ 618.363894][ T5907] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 618.379406][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.480178][ T5907] usb 4-1: config 0 descriptor?? [ 618.705507][ T5907] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 618.748852][ T116] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 618.804587][T14089] bridge0: port 3(macsec0) entered blocking state [ 618.811512][T14089] bridge0: port 3(macsec0) entered forwarding state [ 618.888778][ T116] usb 2-1: device descriptor read/64, error -71 [ 618.910118][ C1] usblp0: nonzero read bulk status received: -71 [ 618.916775][ T5907] usb 4-1: USB disconnect, device number 12 [ 619.124981][T14079] usblp0: removed [ 619.148822][ T116] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 619.311331][ T116] usb 2-1: device descriptor read/64, error -71 [ 619.339950][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 619.381071][T14110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2096'. [ 619.421894][ T116] usb usb2-port1: attempt power cycle [ 619.485969][T14117] IPVS: Scheduler module ip_vs_ not found [ 619.801487][ T116] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 619.830356][ T116] usb 2-1: device descriptor read/8, error -71 [ 620.068798][ T116] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 620.068899][ T10] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 620.109331][ T116] usb 2-1: device descriptor read/8, error -71 [ 620.208811][ T10] usb 3-1: device descriptor read/64, error -71 [ 620.219348][ T116] usb usb2-port1: unable to enumerate USB device [ 620.450321][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 620.588786][ T10] usb 3-1: device descriptor read/64, error -71 [ 620.638808][ T5907] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 620.699178][ T10] usb usb3-port1: attempt power cycle [ 620.790515][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.806867][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.841008][ T5907] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 620.878904][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.912093][ T5907] usb 5-1: config 0 descriptor?? [ 621.059630][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 621.189652][ T10] usb 3-1: device descriptor read/8, error -71 [ 621.346424][T14139] program syz.4.2103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.374709][ T5907] sony 0003:054C:024B.0029: unexpected long global item [ 621.392032][ T5907] sony 0003:054C:024B.0029: parse failed [ 621.405016][ T5907] sony 0003:054C:024B.0029: probe with driver sony failed with error -22 [ 621.468800][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 621.513131][ T10] usb 3-1: device descriptor read/8, error -71 [ 621.639666][ T10] usb usb3-port1: unable to enumerate USB device [ 622.581943][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 622.734835][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 622.763667][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 622.780027][T14159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2109'. [ 622.794636][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.805792][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.815984][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 622.840403][ T10] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 622.864347][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.880401][ T10] usb 2-1: config 0 descriptor?? [ 623.404455][ T5907] usb 5-1: USB disconnect, device number 5 [ 623.531437][T14148] random: crng reseeded on system resumption [ 623.821379][T14170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2106'. [ 623.830816][T14170] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 623.875630][T14169] input: syz0 as /devices/virtual/input/input48 [ 624.453084][T14180] netlink: 742 bytes leftover after parsing attributes in process `syz.0.2114'. [ 624.471873][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.478243][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.638817][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 624.758893][ T116] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 624.800444][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 624.810268][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 624.822244][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 624.831394][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.839641][ T5892] usb 4-1: Product: syz [ 624.843835][ T5892] usb 4-1: Manufacturer: syz [ 624.848491][ T5892] usb 4-1: SerialNumber: syz [ 624.856347][ T5892] usb 4-1: config 0 descriptor?? [ 624.865828][ T5892] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 624.918751][ T116] usb 5-1: Using ep0 maxpacket: 32 [ 624.925788][ T116] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 624.935222][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.946769][ T116] usb 5-1: config 0 descriptor?? [ 625.092489][ T5892] usb 4-1: USB disconnect, device number 13 [ 625.175486][ T116] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 625.201091][ T116] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 625.217417][ T116] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 625.230569][ T116] usb 5-1: media controller created [ 625.263239][ T116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 625.365124][ T116] DVB: Unable to find symbol dib7000p_attach() [ 625.377984][ T116] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 625.522018][ T116] rc_core: IR keymap rc-dib0700-rc5 not found [ 625.531388][ T116] Registered IR keymap rc-empty [ 625.536572][ T116] dvb-usb: could not initialize remote control. [ 625.573534][ T116] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 625.895831][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.928974][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.108385][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.128882][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.244257][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.254710][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.444935][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2116'. [ 626.555248][ T12] tipc: Resetting bearer [ 627.006893][ T12] tipc: Disabling bearer [ 627.049506][ T12] bond3 (unregistering): (slave bridge1): Releasing active interface [ 627.206613][ T12] bond0 (unregistering): Released all slaves [ 627.222843][ T12] bond1 (unregistering): Released all slaves [ 627.237425][ T12] bond2 (unregistering): Released all slaves [ 627.252562][ T12] bond3 (unregistering): Released all slaves [ 627.273307][T14201] team0: Caught tx_queue_len zero misconfig [ 627.279577][T14201] sch_tbf: peakrate 64 is lower than or equals to rate 2147483649 ! [ 627.343047][ T12] tipc: Left network mode [ 628.386022][ T10] usbhid 2-1:0.0: can't add hid device: -32 [ 628.392139][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 630.715193][ T5907] usb 5-1: USB disconnect, device number 6 [ 630.746876][ T5907] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 685.901066][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.907392][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.342587][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.349127][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 770.388860][ T31] INFO: task kworker/0:2:1624 blocked for more than 143 seconds. [ 770.397256][ T31] Not tainted syzkaller #0 [ 770.402490][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.411218][ T31] task:kworker/0:2 state:D stack:21464 pid:1624 tgid:1624 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 770.423416][ T31] Workqueue: events rfkill_op_handler [ 770.428892][ T31] Call Trace: [ 770.432210][ T31] [ 770.435132][ T31] __schedule+0x1798/0x4cc0 [ 770.439729][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 770.446067][ T31] ? __pfx___schedule+0x10/0x10 [ 770.450944][ T31] ? irqentry_exit+0x74/0x90 [ 770.455544][ T31] ? schedule+0x91/0x360 [ 770.459888][ T31] schedule+0x165/0x360 [ 770.464048][ T31] schedule_preempt_disabled+0x13/0x30 [ 770.469580][ T31] __mutex_lock+0x7e6/0x1350 [ 770.474182][ T31] ? __mutex_lock+0x5bb/0x1350 [ 770.478982][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 770.484286][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 770.489381][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.494576][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 770.500553][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 770.506885][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 770.512853][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 770.517980][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 770.523727][ T31] rfkill_set_block+0x1d2/0x440 [ 770.528649][ T31] rfkill_epo+0x7e/0x180 [ 770.532892][ T31] rfkill_op_handler+0x84/0x240 [ 770.537728][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 770.543642][ T31] process_scheduled_works+0xade/0x17b0 [ 770.549257][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 770.555246][ T31] worker_thread+0x8a0/0xda0 [ 770.559880][ T31] kthread+0x70e/0x8a0 [ 770.563954][ T31] ? __pfx_worker_thread+0x10/0x10 [ 770.569112][ T31] ? __pfx_kthread+0x10/0x10 [ 770.573708][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 770.578948][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.584141][ T31] ? __pfx_kthread+0x10/0x10 [ 770.588836][ T31] ret_from_fork+0x436/0x7d0 [ 770.593425][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 770.598519][ T31] ? __switch_to_asm+0x39/0x70 [ 770.603317][ T31] ? __switch_to_asm+0x33/0x70 [ 770.608084][ T31] ? __pfx_kthread+0x10/0x10 [ 770.612712][ T31] ret_from_fork_asm+0x1a/0x30 [ 770.617509][ T31] [ 770.620814][ T31] INFO: task syz-executor:5831 blocked for more than 143 seconds. [ 770.628661][ T31] Not tainted syzkaller #0 [ 770.633597][ T31] Blocked by coredump. [ 770.638172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.646898][ T31] task:syz-executor state:D stack:24584 pid:5831 tgid:5831 ppid:5826 task_flags:0x40010c flags:0x00080001 [ 770.658859][ T31] Call Trace: [ 770.662129][ T31] [ 770.665044][ T31] __schedule+0x1798/0x4cc0 [ 770.669632][ T31] ? __pfx___schedule+0x10/0x10 [ 770.674495][ T31] ? schedule+0x91/0x360 [ 770.678787][ T31] schedule+0x165/0x360 [ 770.682970][ T31] schedule_preempt_disabled+0x13/0x30 [ 770.688412][ T31] __mutex_lock+0x7e6/0x1350 [ 770.693095][ T31] ? __mutex_lock+0x5bb/0x1350 [ 770.697866][ T31] ? rfkill_unregister+0xc8/0x220 [ 770.702948][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 770.707978][ T31] ? __pfx_device_del+0x10/0x10 [ 770.712874][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 770.718089][ T31] rfkill_unregister+0xc8/0x220 [ 770.722980][ T31] hci_unregister_dev+0x374/0x510 [ 770.728009][ T31] vhci_release+0x152/0x1a0 [ 770.732725][ T31] ? __pfx_vhci_release+0x10/0x10 [ 770.737752][ T31] __fput+0x449/0xa70 [ 770.741814][ T31] task_work_run+0x1d1/0x260 [ 770.746409][ T31] ? __pfx_task_work_run+0x10/0x10 [ 770.751589][ T31] do_exit+0x6b5/0x2300 [ 770.755767][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 770.761191][ T31] ? __pfx_do_exit+0x10/0x10 [ 770.765798][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 770.771048][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.776246][ T31] do_group_exit+0x21c/0x2d0 [ 770.782407][ T31] __x64_sys_exit_group+0x3f/0x40 [ 770.787424][ T31] x64_sys_call+0x21f7/0x2200 [ 770.792173][ T31] do_syscall_64+0xfa/0x3b0 [ 770.796674][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.801902][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.807967][ T31] ? clear_bhb_loop+0x60/0xb0 [ 770.812673][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.818563][ T31] RIP: 0033:0x7ff3ef58eec9 [ 770.823010][ T31] RSP: 002b:00007ffd79fb17a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 770.831454][ T31] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007ff3ef58eec9 [ 770.839646][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 770.847699][ T31] RBP: 00007ff3ef7e67b8 R08: 00007ffd79faf546 R09: 0000000000000008 [ 770.855690][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 770.863772][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 770.871856][ T31] [ 770.874925][ T31] INFO: task kworker/0:7:5951 blocked for more than 143 seconds. [ 770.882732][ T31] Not tainted syzkaller #0 [ 770.887665][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.896397][ T31] task:kworker/0:7 state:D stack:20616 pid:5951 tgid:5951 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 770.908438][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 770.915169][ T31] Call Trace: [ 770.918446][ T31] [ 770.921402][ T31] __schedule+0x1798/0x4cc0 [ 770.925919][ T31] ? __pfx___schedule+0x10/0x10 [ 770.930832][ T31] ? schedule+0x91/0x360 [ 770.935077][ T31] schedule+0x165/0x360 [ 770.939279][ T31] schedule_preempt_disabled+0x13/0x30 [ 770.944734][ T31] __mutex_lock+0x7e6/0x1350 [ 770.949553][ T31] ? __mutex_lock+0x5bb/0x1350 [ 770.954321][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 770.960597][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 770.965632][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 770.971372][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 770.977091][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 770.983189][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 770.988946][ T31] process_scheduled_works+0xade/0x17b0 [ 770.994489][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 771.000538][ T31] worker_thread+0x8a0/0xda0 [ 771.005127][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 771.011493][ T31] ? __kthread_parkme+0x7b/0x200 [ 771.016435][ T31] kthread+0x70e/0x8a0 [ 771.020744][ T31] ? __pfx_worker_thread+0x10/0x10 [ 771.025866][ T31] ? __pfx_kthread+0x10/0x10 [ 771.030501][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 771.035691][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.040906][ T31] ? __pfx_kthread+0x10/0x10 [ 771.045500][ T31] ret_from_fork+0x436/0x7d0 [ 771.050175][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 771.055351][ T31] ? __switch_to_asm+0x39/0x70 [ 771.060357][ T31] ? __switch_to_asm+0x33/0x70 [ 771.065128][ T31] ? __pfx_kthread+0x10/0x10 [ 771.070080][ T31] ret_from_fork_asm+0x1a/0x30 [ 771.074866][ T31] [ 771.077896][ T31] INFO: task syz.1.2106:14149 blocked for more than 144 seconds. [ 771.085664][ T31] Not tainted syzkaller #0 [ 771.090610][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 771.099412][ T31] task:syz.1.2106 state:D stack:27048 pid:14149 tgid:14146 ppid:5842 task_flags:0x400040 flags:0x00080002 [ 771.111373][ T31] Call Trace: [ 771.114643][ T31] [ 771.117575][ T31] __schedule+0x1798/0x4cc0 [ 771.122228][ T31] ? __pfx___schedule+0x10/0x10 [ 771.127087][ T31] ? schedule+0x91/0x360 [ 771.131382][ T31] schedule+0x165/0x360 [ 771.135534][ T31] schedule_preempt_disabled+0x13/0x30 [ 771.141024][ T31] __mutex_lock+0x7e6/0x1350 [ 771.145633][ T31] ? __mutex_lock+0x5bb/0x1350 [ 771.150450][ T31] ? rfkill_unregister+0xc8/0x220 [ 771.155496][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 771.160565][ T31] ? __pfx_device_del+0x10/0x10 [ 771.165442][ T31] rfkill_unregister+0xc8/0x220 [ 771.170466][ T31] nfc_unregister_device+0x96/0x2a0 [ 771.175678][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 771.181493][ T31] virtual_ncidev_close+0x56/0x90 [ 771.186542][ T31] __fput+0x449/0xa70 [ 771.190588][ T31] task_work_run+0x1d1/0x260 [ 771.195179][ T31] ? __pfx_task_work_run+0x10/0x10 [ 771.200315][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 771.205772][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 771.211094][ T31] do_syscall_64+0x2bd/0x3b0 [ 771.215682][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.221773][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 771.227419][ T31] ? clear_bhb_loop+0x60/0xb0 [ 771.232151][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.238104][ T31] RIP: 0033:0x7fc34fd8eec9 [ 771.242549][ T31] RSP: 002b:00007fc350caf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 771.251011][ T31] RAX: 0000000000000000 RBX: 00007fc34ffe6180 RCX: 00007fc34fd8eec9 [ 771.259036][ T31] RDX: 0200000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 771.267006][ T31] RBP: 00007fc34fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 771.275023][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.283063][ T31] R13: 00007fc34ffe6218 R14: 00007fc34ffe6180 R15: 00007fc35010fa28 [ 771.291432][ T31] [ 771.294477][ T31] [ 771.294477][ T31] Showing all locks held in the system: [ 771.302425][ T31] 4 locks held by kworker/u8:0/12: [ 771.307541][ T31] #0: ffff88801ae9e948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 771.318522][ T31] #1: ffffc90000117bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 771.329197][ T31] #2: ffffffff8f0b8a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 771.338502][ T31] #3: ffffffff8f395548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 771.348816][ T31] 1 lock held by khungtaskd/31: [ 771.353676][ T31] #0: ffffffff8dd3b160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 771.363599][ T31] 4 locks held by kworker/0:2/1624: [ 771.368878][ T31] #0: ffff88801a019948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 771.379951][ T31] #1: ffffc90004a6fbc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 771.391072][ T31] #2: ffffffff8f395548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 771.400700][ T31] #3: ffff888079064100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 771.410445][ T31] 2 locks held by klogd/5199: [ 771.415117][ T31] #0: ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 771.425153][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 771.434084][ T31] 2 locks held by getty/5599: [ 771.438961][ T31] #0: ffff8880334010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 771.448791][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 771.458998][ T31] 1 lock held by syz-executor/5831: [ 771.464195][ T31] #0: ffffffff8f395548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 771.474363][ T31] 3 locks held by kworker/0:7/5951: [ 771.479628][ T31] #0: ffff88801a019948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 771.490672][ T31] #1: ffffc90004a4fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 771.504275][ T31] #2: ffffffff8f395548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 771.515658][ T31] 2 locks held by syz.1.2106/14149: [ 771.520871][ T31] #0: ffff888079064100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 771.530653][ T31] #1: ffffffff8f395548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 771.540854][ T31] [ 771.543171][ T31] ============================================= [ 771.543171][ T31] [ 771.551643][ T31] NMI backtrace for cpu 1 [ 771.551656][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 771.551672][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.551681][ T31] Call Trace: [ 771.551688][ T31] [ 771.551697][ T31] dump_stack_lvl+0x189/0x250 [ 771.551722][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.551739][ T31] ? __pfx__printk+0x10/0x10 [ 771.551770][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 771.551796][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 771.551819][ T31] ? __pfx__printk+0x10/0x10 [ 771.551842][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 771.551869][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 771.551895][ T31] watchdog+0xf60/0xfa0 [ 771.551916][ T31] ? watchdog+0x1e2/0xfa0 [ 771.551935][ T31] kthread+0x70e/0x8a0 [ 771.551955][ T31] ? __pfx_watchdog+0x10/0x10 [ 771.551966][ T31] ? __pfx_kthread+0x10/0x10 [ 771.551984][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 771.551997][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.552010][ T31] ? __pfx_kthread+0x10/0x10 [ 771.552028][ T31] ret_from_fork+0x436/0x7d0 [ 771.552044][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 771.552061][ T31] ? __switch_to_asm+0x39/0x70 [ 771.552077][ T31] ? __switch_to_asm+0x33/0x70 [ 771.552091][ T31] ? __pfx_kthread+0x10/0x10 [ 771.552109][ T31] ret_from_fork_asm+0x1a/0x30 [ 771.552136][ T31] [ 771.552144][ T31] Sending NMI from CPU 1 to CPUs 0: [ 771.697889][ C0] NMI backtrace for cpu 0 [ 771.697905][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 771.697924][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.697935][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 771.697957][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 0a 15 00 f3 0f 1e fa fb f4 88 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 771.697971][ C0] RSP: 0018:ffffffff8da07d80 EFLAGS: 000002c2 [ 771.697987][ C0] RAX: cc824508ae35c300 RBX: ffffffff81954a27 RCX: cc824508ae35c300 [ 771.698000][ C0] RDX: 0000000000000001 RSI: ffffffff8d50da07 RDI: ffffffff8b9ec260 [ 771.698012][ C0] RBP: ffffffff8da07eb8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 771.698025][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f5b9130 [ 771.698038][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b52a40 [ 771.698050][ C0] FS: 0000000000000000(0000) GS:ffff888126396000(0000) knlGS:0000000000000000 [ 771.698064][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.698075][ C0] CR2: 0000559566ac5660 CR3: 000000000db36000 CR4: 00000000003526f0 [ 771.698090][ C0] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 771.698101][ C0] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 771.698112][ C0] Call Trace: [ 771.698120][ C0] [ 771.698127][ C0] default_idle+0x13/0x20 [ 771.698146][ C0] default_idle_call+0x73/0xb0 [ 771.698166][ C0] do_idle+0x1e7/0x510 [ 771.698187][ C0] ? __pfx_do_idle+0x10/0x10 [ 771.698212][ C0] cpu_startup_entry+0x44/0x60 [ 771.698229][ C0] rest_init+0x2de/0x300 [ 771.698251][ C0] start_kernel+0x3ae/0x410 [ 771.698276][ C0] x86_64_start_reservations+0x24/0x30 [ 771.698296][ C0] x86_64_start_kernel+0x143/0x1c0 [ 771.698315][ C0] common_startup_64+0x13e/0x147 [ 771.698344][ C0] [ 771.698923][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 771.698937][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 771.698956][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.698967][ T31] Call Trace: [ 771.698975][ T31] [ 771.698984][ T31] dump_stack_lvl+0x99/0x250 [ 771.699005][ T31] ? __asan_memcpy+0x40/0x70 [ 771.699027][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.699047][ T31] ? __pfx__printk+0x10/0x10 [ 771.699082][ T31] vpanic+0x237/0x6d0 [ 771.699101][ T31] ? __pfx_vpanic+0x10/0x10 [ 771.699122][ T31] ? preempt_schedule_common+0x83/0xd0 [ 771.699146][ T31] panic+0xb9/0xc0 [ 771.699165][ T31] ? __pfx_panic+0x10/0x10 [ 771.699186][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 771.699208][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 771.699234][ T31] watchdog+0xf9f/0xfa0 [ 771.699256][ T31] ? watchdog+0x1e2/0xfa0 [ 771.699278][ T31] kthread+0x70e/0x8a0 [ 771.699303][ T31] ? __pfx_watchdog+0x10/0x10 [ 771.699319][ T31] ? __pfx_kthread+0x10/0x10 [ 771.699341][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 771.699357][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.699380][ T31] ? __pfx_kthread+0x10/0x10 [ 771.699402][ T31] ret_from_fork+0x436/0x7d0 [ 771.699423][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 771.699445][ T31] ? __switch_to_asm+0x39/0x70 [ 771.699465][ T31] ? __switch_to_asm+0x33/0x70 [ 771.699485][ T31] ? __pfx_kthread+0x10/0x10 [ 771.699507][ T31] ret_from_fork_asm+0x1a/0x30 [ 771.699541][ T31] [ 772.039975][ T31] Kernel Offset: disabled [ 772.044279][ T31] Rebooting in 86400 seconds..