last executing test programs: 2m29.74061252s ago: executing program 2 (id=836): r0 = socket$inet6(0xa, 0x80000, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0x2400001f, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x3934, &(0x7f0000000400)={0x0, 0xb76c, 0x0, 0x0, 0x209}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000006c0)={0xda0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/111, 0x6f}], &(0x7f0000000640)=[0x7, 0x6, 0x100, 0x7, 0xd, 0x584, 0x0], 0x3}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4c3c, 0x4, 0x3, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x50) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r7, 0xd}, &(0x7f0000001080)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x620a9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x101}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24008040) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r2}, 0x18) 2m28.821606674s ago: executing program 2 (id=838): r0 = syz_open_dev$swradio(&(0x7f00000019c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001a00)={0x20, 0xb, 0x1, "b5dd494a1889b3384fa26dec898ece972588d9ef0ec45065ef9b32db4934ac60", 0x31435750}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x4337, 0x3d) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f7}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000540)={@fd, @ptr={0x77622a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m28.651685407s ago: executing program 2 (id=839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect$printer(0xd3cdc441aab08811, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0xf, 0xaa}}, [{{0x9, 0x5, 0x82, 0x2, 0xe849b9690e04c656, 0x5, 0x2, 0xe}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x3, 0x9, 0xd, 0x10, 0xdc}, 0x84, &(0x7f0000000100)={0x5, 0xf, 0x84, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x82, 0x1, 0xfffe}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2c36ddd05c2aea55fe41a1732f504718"}, @generic={0x50, 0x10, 0xb, "52e3247042e0d3b5e02e1e43e3409b20ce1bdbef5330278027e8e0e9f84a32cca13b52a3bf5e1ab198dad53ae64d40eeccfa08192f4ad8df18a8bf5d174219ff5bfa05ba60b446a8f5db50ad7e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xcb, 0x0, 0x66, 0x8}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x90, &(0x7f0000000240)=@string={0x90, 0x3, "404b2a4e7bf204958547d427c4d8d862f14df8ad0121abe3dfd49be47a60742d4ce532738e02e34b76f0e4f1277bec5a58a52a0d5007938d303c59833bd9b893d62221fc604dee4dfff8edcf32f5f7e5e25c09cd7308c63d24a066b02ff1aef16c89c139c314e77f6db593487a89fad590e67a5bdb54b54aeab513f510b790ae69730a7cb1b36f279793a5c05395"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0x8d, &(0x7f0000000340)=@string={0x8d, 0x3, "95fc5aec38d487e735c26b03f2c4b8b0c588d85508bae38870578c3a279b45bd2e05812d3edbe9c670ba821633eb9842beca1440f92f455bc3ffc4fe3054dd192e0348535ada08e7f3e2ac5b9bb3e2b5facf68673e968dfd79376c18e7a94307ae77501e0677760e85709a12485d71604b019b6bd9e1089e0eb7d257bdd690c617b5ec9380ee885714c610"}}, {0xb2, &(0x7f0000000400)=@string={0xb2, 0x3, "9b9e770a7dc195435e62bc513c8b4b327a8655fdad7e04b26eaa1107da46dc924719b9c8815b6099748d1a01fcbe100381d1dc712f172e3e1547feb5ec71590a9d0ded4353f1a6a8e3b4795091646400362e40733cddf50435c180e5fd9244b3c05b47ceaa4b5c565739e4357a81d36b54b1f6494fa84e24f4eb937cd6bfd7fd1678e7602af819b5e45e898cba4e992059e3f710b3a78c78b56b0bbb766ac22b3ca532b70a0e3814b1c6b8c3b8a71be8"}}]}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB="4c69414f55033cd673c685411647fd7e"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) (async) syz_usb_connect$printer(0xd3cdc441aab08811, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0xf, 0xaa}}, [{{0x9, 0x5, 0x82, 0x2, 0xe849b9690e04c656, 0x5, 0x2, 0xe}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x3, 0x9, 0xd, 0x10, 0xdc}, 0x84, &(0x7f0000000100)={0x5, 0xf, 0x84, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x82, 0x1, 0xfffe}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2c36ddd05c2aea55fe41a1732f504718"}, @generic={0x50, 0x10, 0xb, "52e3247042e0d3b5e02e1e43e3409b20ce1bdbef5330278027e8e0e9f84a32cca13b52a3bf5e1ab198dad53ae64d40eeccfa08192f4ad8df18a8bf5d174219ff5bfa05ba60b446a8f5db50ad7e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xcb, 0x0, 0x66, 0x8}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x90, &(0x7f0000000240)=@string={0x90, 0x3, "404b2a4e7bf204958547d427c4d8d862f14df8ad0121abe3dfd49be47a60742d4ce532738e02e34b76f0e4f1277bec5a58a52a0d5007938d303c59833bd9b893d62221fc604dee4dfff8edcf32f5f7e5e25c09cd7308c63d24a066b02ff1aef16c89c139c314e77f6db593487a89fad590e67a5bdb54b54aeab513f510b790ae69730a7cb1b36f279793a5c05395"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0x8d, &(0x7f0000000340)=@string={0x8d, 0x3, "95fc5aec38d487e735c26b03f2c4b8b0c588d85508bae38870578c3a279b45bd2e05812d3edbe9c670ba821633eb9842beca1440f92f455bc3ffc4fe3054dd192e0348535ada08e7f3e2ac5b9bb3e2b5facf68673e968dfd79376c18e7a94307ae77501e0677760e85709a12485d71604b019b6bd9e1089e0eb7d257bdd690c617b5ec9380ee885714c610"}}, {0xb2, &(0x7f0000000400)=@string={0xb2, 0x3, "9b9e770a7dc195435e62bc513c8b4b327a8655fdad7e04b26eaa1107da46dc924719b9c8815b6099748d1a01fcbe100381d1dc712f172e3e1547feb5ec71590a9d0ded4353f1a6a8e3b4795091646400362e40733cddf50435c180e5fd9244b3c05b47ceaa4b5c565739e4357a81d36b54b1f6494fa84e24f4eb937cd6bfd7fd1678e7602af819b5e45e898cba4e992059e3f710b3a78c78b56b0bbb766ac22b3ca532b70a0e3814b1c6b8c3b8a71be8"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB="4c69414f55033cd673c685411647fd7e"], 0x0, 0x0, 0x0}, 0x0) (async) 2m26.748614272s ago: executing program 2 (id=851): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m25.756056671s ago: executing program 2 (id=855): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x40046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x2f61}]}}}]}, 0x3c}}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) unshare(0xa000680) (async) unshare(0xa000680) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$getflags(r4, 0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bond0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0x18, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaa08391431b1aaaaaafad1e048716e08004500011c0000000000119078000000110000000000004e20000890780149de5c01a8d416761bb8386ed9239df4e1026a18cb9d3aef825961c2c82a57b25197df21f6a53559c031a70fd20c4ee3af48a9d814de3f2cdf8da7dbf79377a268b58e3fa3c277287f5c939dffaf17a30b0ef5f94a0218f2fab70ff24d2f7423ad35fcb30f60693ac2568fc34dd31ec9d3f462972248308b891b28fa7970a2dcff6c74ebdfb0702cd944058693fb248147"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaa08391431b1aaaaaafad1e048716e08004500011c0000000000119078000000110000000000004e20000890780149de5c01a8d416761bb8386ed9239df4e1026a18cb9d3aef825961c2c82a57b25197df21f6a53559c031a70fd20c4ee3af48a9d814de3f2cdf8da7dbf79377a268b58e3fa3c277287f5c939dffaf17a30b0ef5f94a0218f2fab70ff24d2f7423ad35fcb30f60693ac2568fc34dd31ec9d3f462972248308b891b28fa7970a2dcff6c74ebdfb0702cd944058693fb248147"], 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x1, 0x3, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc891}, 0x40020) (async) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x1, 0x3, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc891}, 0x40020) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r11, 0x8004ae98, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r12, {0xd, 0xe}, {}, {0x5, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [""]}, 0x14}}, 0x804) syz_usb_connect(0x0, 0x2d2, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008b216740420709204661010203010902c002010000000009047500efd08de70009050201ff030c0207cb10407a382b84ff1b34cd2ee206df4454f2529eb325760bada00a71f67aefe45f30eb1a82ea2568d765ddf9c4f6cf9d15cdf7897994aae055d3f4654ab18eec5d2ff8f276191defe778db9f063699e57d00e9bd9aa03da6c10d298998004b93eaf6ca5c2a57018daf8e85392ce15baa386cfdf692b68fac0ede1e5313b09c9e13e40b67973376e559125fe4d64c2c3e4927f4ad48743ed8f5fca66abf95b6da7af76b89333470ad9808c6e3f64e87ff6ca2fdd8f9fbd5df7edf83dc9a106f39d89d5f70b43047081a08a86e0a6ccee3d0114be47cd02772f9397c837398d537d76775a2ea84aca894132f89411455354c7d32ca5e23ac1fdf7e052b486de0e97574ca0a751214c8689a25a573a50cdca9552447a34ad28c74cb934f2798a646ac694c7cef3f3ce57358391db8199bd3159141280736ce85bf09050501"], 0x0) (async) syz_usb_connect(0x0, 0x2d2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 2m25.457670364s ago: executing program 2 (id=859): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000002c0), 0x80, &(0x7f00000024c0)=[{&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f0000000240)=""/17, 0x11}], 0x6, &(0x7f0000002540)}, 0x400ff9}], 0x1, 0x10060, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file7\x00', 0x2000, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x80000000]}}) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 2m24.967762329s ago: executing program 32 (id=859): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f00000002c0), 0x80, &(0x7f00000024c0)=[{&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f0000000240)=""/17, 0x11}], 0x6, &(0x7f0000002540)}, 0x400ff9}], 0x1, 0x10060, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file7\x00', 0x2000, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x80000000]}}) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 8.774973708s ago: executing program 0 (id=1574): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a41853000087d7b6a0ad4f0b561f0f7214500c62ce9f000000000000255048ce8849f6b82677f5118ecb71084e6d04a592a95b3bae2ca22d2e84b64918399782e3b47bf91ee43a6f4b277b3d544b09ec7761fbd1f496d8e7ae2ffacdd8e03a10eb34590090ba2df1d3f75b7147fdaa1c18a3772df45a8861db97c7890a1365a3c3f2f6318f9b33b1c85d658a3783"], 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syncfs(r7) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',', @ANYRES16], 0x2c}}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$sock(r9, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)="07a36663c5aaa8b4eb7962f860e7c11acd05f90a7042a01611bf5168670f7a756bfa19a2211b68f276106f9af73099b796d17b1432b9183d7d0cbd6e6bb75a33e8631904a3c4d02e1208851618c1e8138e49a3ad48ebb7a5a6444c5eedae1aa37bed6524eaee395d224995e5f5befba0be9d31f3111270446fcd9766a3170f2fa1705d08bbcf94ed07afa71e0c79d2ac4640ef78d861fdcdaa7ab199569610d7b40c1492f59a871c0fb096bc14aeb8f0016a01642d0bd640def09a5bcda9e6f2869de6222cb7a71c3cab7a646db92839e75553d633645f", 0xd7}, {0x0}, {&(0x7f0000000200)}, {&(0x7f00000002c0)}, {&(0x7f0000000740)="21261aead0eb98f98d743b25ae028f35736c7c79dae5709af5977b24e0116ad7566e5333e47087b466dbceb4f92d7d2d3b84635e2c65fefd43e576617ed3741f373ed701dfa9723712e061c19698a26436d42e2dac44c101e88d3c7032a3ee3abd1ffedad30e7dc46acf3820ffcd9deb6f7b2263500a01bc935f5844e8a5d4b76728ab084e93f46ae50c0b999bb2a2648ffd990fac260c", 0x97}, {&(0x7f0000003940)="1545d1d6ec1a59b3c8705dbbd521c54cec00ee2de9f0913361c00464fac97737c131b821392a49441e6d68542ce5f77fc8992149d7c4c44d09764917eb27dc748ae4356b46775d0bc349ab472e828e70243ec744613f99a77fdbcdf9cdb3b468e90a031704bbabf14e8d", 0x6a}], 0x6, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x4f4167ad}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x30}}, {{&(0x7f00000009c0)=@vsock, 0x80, &(0x7f0000000480)=[{&(0x7f0000000a40)="c0e9a87dd73d0da6aac5516e73932502413a9417a5c1e0ad7bfb3a1cf5069c823009a7169753daf54e158be70714d1c6f4108f3f2e4cc19952c30199069142aa6e0c9dde1dce92742ff6cf8a106675c61b177e89e13123f872075521731fd3daaf80123dfafe9bdd9b1edaeb3e960d950c7ddc89bc292f58afe177879bfaf520d3bd486cd5ce736a2998d8e34348476e9e90bc9a6dd6ebf81e48ca08f8ebc8e13d923c4210098288e522ba085924042ea6428c13a8b4933ad181bd2a21572007641a94fbccbbfd5c7dca4b43bc8d0cfcd6eec474d26fb758aec15411", 0xdc}, {&(0x7f0000000b40)="c06a749e101db2cb53054a24f007390247e368f8e6d964eee3a1bbddc60bae06e367f399ffc46e1beb0aa64777852f52b31731fdcb36a148ed87f30147522240e1f489d730bea7b8557bdd0a9d228dee70944dc18496d0ac1a2bc2fe23092d2fbc96dfa889cda287e7475453370d730dbb85547c37d4b44ab7544161a6e07fbaa8ab8b9e33f0bd00d8f19f84835cf8823207147e0f80e075fd5c6e92fa227d6e0e74b6ef", 0xa4}], 0x2}}, {{&(0x7f0000000c00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000003100)=[{&(0x7f0000000880)="23cd177f4955620be39ccc8612a062462141ad0d81043c0e0bf8ece5b677730d2b314794f8d56f61c6", 0x29}, {0x0}, {&(0x7f0000000d80)="b2273581124d0d59d54b4dbdac44858ff6714dfce44c7635087d18dd8a59c3f420290d6e0e4d0bbf1caf3ec3edfcf7fce667a1fadb0737faaee4ddf50d162c30bc25177a0011e3a3306bff97f700117f710ade591fc62fde733e7afeb23c4c3d927093fe09c115b4f8ab601c98c17aaa7cd99577cb6cb8a94de28dc98924d431ef10ff744708dc3f3985ba0c904dff743db07a960e7d82e9ff4b5cc0e5e2d2913b3ea8c565b215a8b9abfdf59a63af249594051d0a120c0d06d04667ffa2f807f5bdcfe2e87eee01f77ae77684ba7061ebae26e659ddc9df0778690f00fd33c1e60f750185100a5fc73eb1d942c7", 0xee}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="e82771be820c1e07afac11a713f40ef49d44f575b7f76a0e91f6d6a5e9a33a7815539287ffe12f277b344b6bbdee95281b90f5bef7517c5e29bd464801d23ae36720cb97213b6a8a85a12de4963f7145220895417bd5c64cafa0b64202e27141a5d4e5912e6ce1a0d4dccfb128f5cc6ce0811df093ad1a877b6e19ec0ebd4abe688cbe6787970bd95f5e7b3fa9f2f98542028f58562f17ef87a110438c08f804a9ff1c2bde3e8d2462a406eb1df5d831ad756eba2598aaedeadf234e9c66a1346a33a9dbdbda3a04d644e9a4a9304c2f4fc7542a4dbbcf4ea7349ec4", 0xdc}, {&(0x7f0000001f80)="d5ffed549652323de25b6eeb530b046eef0da8c01d5ca754e082f3ddc7b5b56f", 0x20}, {&(0x7f0000001fc0)="cb580b832b6c697e5763e311", 0xc}, {&(0x7f0000002000)="4fa772476b847ceb2bc9a73467bb41d13210b551341ca3f90353e0a5ccf9a934c279459686da389fa1788e36ecaa788d942eb89be293e5818a0b1343232d57db3d9d1977a75f4fd261714bbbcb722d7ae143f549719927324810db6ddfcf1c1ee202c5d52ab62e82312b68ed0cbb30940bea6c34d40fb74421c5ce8d2b2d902ffafafd9f144c82158653f71dbdadbd90aaaecc8fc7f0560675d3a34c52a78fdc8b8100040e27e6d4f6c2bd53cfcc3fd1465db3ec3759441ffc948a25b02e341ea541b3ea83c522dc5d12", 0xca}, {&(0x7f0000002100)="67f088e3e4c3f6700bd1ed6b48a90ab6ad6460e36e13a8cd76cb968d355bb7432ae74609e75501b557039bc46c592f3ed80db5bb5c286f4a52ae3ba748d093df20ec5584aaba49fed27a8eb7216a781ee84d8e27ae38214d0b4aa16fd13aca64a65242272b22d232933c6839eff70c1ba6fdfbaef9354bae0693bdcb2def5af300157f4dfc202596af0efce408853fc9c010726f56faecb47f2a1e08edf97fa758e46fb06a01a604513262ce9de9568235d6c089c9e2bdb13239758b6ac7a0c80f94b0fa911b380a9ed123436be9378f02cfc525eb2aa15513a0f6bcb7d686bd934c63c11db06de6aefbc2a3a7ebb31f3bacc0ef36f06107bfd4b238e9a347706e96c1dc0dc84af65c2481589cbcae6021a9f3183c3bf20e609273feafd5b202ba57637d0e4d5135f2d96f9c7953508f75d75cb4c30ceeaba342e3bf1209c0d17242415f963702aa4e28f3254cf101e00e6fb4a9aef876194c79ae2c7b26f199f4e83ae2bd006a5e2f66b98dc3dd3e3854b3fb034488c9261215304501a4ad7bf93109c70604b9761b6f11152e10008741ca6526c0438baa129b3ac58b3decfb0b92438224a82f0957782d71e893c678508da7e8f50088803cf0d4db5cd3d600fac26aee4265c45196b4c3809eaeebce1febd24e1309c3985a7032958e27b5a9bd7db1091b359b3a7d46e8079824b655dab12f6686f2db2314312dee0b95f76f4fd0b7ab5b6bc470be04f5780777cf74009d91bbd9addc977972abd44fba795b1db254a2e4cb02e365670746a1fb27599196e2e57e135b781bc6cf325acc231dcf461dba67b04447efc33e774a38b9ee0591e8821281bbc8cd2a8506e1b28e68d19753996da56981eb3ae5f7d685dc9efd55cba9f665cee12ac6f4efe87a20681f9bbce259453e212aaeda9c9f31e28589afec66ef764e0b2556175ae6c2ef2074974e0fe109425e24a1525b30035cd5489ab9f1bb46f53b53f8e8ffacb2f86ccb93b4d20ac7331bbda42ac3d268ef7cfef67064248d13cae5547ff06ff9a1ebe49f39ce6e399f72a756543a1acef175ba2fed070408ea1b659b4ed60117cc0e39496199682df62c5676ffcad762172c460f5a818d191cf6a9338f6040a73fde09b19823d712b77a689db617bd86497c2be3d840cc862016845c24bf1d27b9bba5f557ff96ebf90a74de6a761d0eeb5ec9903554abc8b7031ba2fc281a91a82785c66ef54a5d7818ed4e8222c38f12b011c4af8fd460b3c9145e3894cd888897f561d2daf6489bc0ba9a636d42390a96407c4f80ef47f1e1630d6eeca6600255c8ca0e839ef2209c34197c634ce7a2fe902841fd0757228ed7d3cece82219c50bd837d77f126a525a10c86abddeaeb4d20c696f95ad3ee4531edea2c677fe4e9ad07bd7768dd042e3af769ad017080e3b649c6f912fae3b10de11cdf7807c9fd08fdb211af33124194920d376ac7901d9ce132569af0ae321d2a515b9dad6212efb0fe9ce6526ab3aa6db42d0e2b765fc9dbffab2c9aab11eb9b32443e733006f9dcecf47668c19d5c6c63bce4d37d936cd55cdef2710f0d3ba1cc750b147e3a2f813b91bf6f397507111b039fe906a8c5178248a327f4f18b9822d2dc3dea30626666935ad64319311ba5da90f4e2192dd84651ed52c1b7868accbe396556dadd5d36b730338ee1a5a284b825604f07e7b04d210459baedc7b9205d16da4f7496e3c1aea270d80dc8bccaa4545fc09aa5892c73ddc008cfec96fb6e26fd530ae8dda9ef3f99f418f40b8a8a5d49056d989a6dacedb7e92a8552514f70f191f47a0558a70254580853603d4ce3d4dc1297c2ee6e58a56e653a7c92baea62345bb051b33d1ecd0c6bd748ed24c48d2a61085f152229fa1d4f072a5d2326b0175afe03aa6de5cb0c526840d64c1330e8ea36e6e4f0fc60842639ab4364d4b0e2b6ddce6ec40be89d65843b6ba4d72341c44a8903c9aadb66e3a996715babdfc80f5a5e3a595a5aa25d8e41b0e05925b916143ba6331a7becc77555dbc20249af880f85d8dd3ce75c3595f001e9cd25c4206a13b1e180e837aa84a1ca9f49cd87d5ce55a6987e7d72a73c4adbe3ec298a60384573960e563aec6b0151972ddcf6b6fb786323bb7880c3694f033ea730949386385d9937307b582662f830ea5f9fcd38a61d0b9f0e541d4401b59d3612f0211dbc0260ff24e32fdb212fbf6d80249a961439e094fdca1072c0276fa4d5b05522474a0e110c133d59c17455a4a876d868c6d67d002e29574671d85f93a793cea3c5fcbc67c87d1a33841f4e54dc2df1e8e8f894240ea118b947e2ae2c65ce7e98102508b5b91bbb90d69709513a3630754825e91b158f11505dc48087213e92ea590966f4056c8df8c186ee53892cb3f2002f1d9cdb194834d912bf957fdd1c5d6b63ca4e4bf498d662660dfe4b60f3a1a5a47051ba5e3ebb9fa46a894f764dec519d49bf736efd405f1cb820d75aedc79fd9cd6c526f6b0810dce18c0ff6238e42c951757c30074d360e3da3fe0a71f1bdf08eccc51120faab1b1d903a67867e85c822655afb1bd7645ecc7885878605df6aa5d0d832aceca6c5831e2d1aca23c28817a19dcdb7a66e2f4d6df8df9832cc3689a806250748e44bd19ea9160f72d673c435e958aea997c14851249c0ed4fc6dfe11c0d1d07b70d0032230efc4b3d75651399374dc954c01cc1061c07fcf4c4d43d5c124f2037efa5b967b9b3f908a6b4fe43864963cae81eb309f7c3d9594c7ef310158d4cdce0e991f3c74629ad7f12c7d210252f3783ee7707736bbeacb2f6eb3ecb179d342063e313f0faa7da46f4f4cb89d07d52dfb504a515fd0ab26abf8a461d1fd3ef03f75dedaed6e286ed3f349591ae5c1e4d3de2b3c9706a9661f0538d2b2c5f74f1fdb62681e7584a39f7076047096c1c54a65ea180f36dc241d479fd7013865b3484bf502e6bfcc787579fb0bc59dad3d3ef36014e3164287e6439021603706aaacd67e018c66d190656dba235e4b6a401536313e764eb58fe212d289079cb05f35f75a4146b9cad75d6c23f5efadf1aa2f3e8347ca85d9edb8eb4e04a3e79cbdbba6a2c1b6e3c61a5a5f50e8fe7eb477d39e040d53040566086b7d0d90ab08140e1492c36d200291512fb8ae1c8b58ed1d62764c2d5c4b926b153b1f39bb9ad6266a4c3ef6cecb0fd3e528cfa7424f6a4b5779686f84f3a38e8a64dbcaee659aad837188e4492ab58d9ffe11eec9bec4df93ff0a8ee06e588b70cf62a24ebfd3a3685e0959f4710c316d512d6a89275e5c1d27c25cc01a2814f02bd4432b356630d4b56166fc88796edcba0ed44297826b682250f0ae5fa546e1cc6b76ceae891fca02573872580bd85cc0c028ad6d15e750d589737d24c11e3133cc4358f6855ea67199c5f4d47eb2486ccea4df000f2cad7de2c74b98357c2e4455a1dc53b72e4e6c9e11ee48610459881cbb4a55cb0a299e8159e8affda4036575f04662004972471a1cc6db792b3d55d6bc3943c95c5f382ed2421d6f9063ef897e97fb29f03f926511e134a2e4a5a8affccf079ba337cc0dbdc61a1953a9a64dc1abc04ac6e2d314a7ff0f5ef272c2c972069ce685de22edc679def2a4bea156e5bc98cc5efecf736c28b75f840991d1b596c6fdba14e094c443c0a17be45a03a63ecb2d9c8d5d376dd9648a7760a9c8dc195931b67a26143112233372133e8c0c1332d6f8494310be181c3399903be65038b281684b079a5de1d87811112e728520fc8df04ab9f3fef720c3329536a362051e41ea49bf80d0a119f1c5521f6e060a92485a22b064a193c40eaf78390af24e1a91aa8e6250b453752ea5957be954c2f502a2892b2be82b79146b5e26c3c15b8777377bb0be69d256bd8bfdc65d726c9978c1b7a07fe89c197adcb358df3670412b6774875debebceec8e33aa4c97988cc34245f882f084e07578a492a4cb762393e8caef2719ad6617ca707f52747a1aabfa17a2900ec90b30215c6dbde13ea9b52ed44bfdd0b8bb2375bf29cb8d4f6ced680752d76390539486a3b30145f6a8178516f5ccbb607df314dc3c73b741b307b528020a5e5cc8b0d370242d56cad81269f854d1f02d71a8a468f2dd34100b56eac655608eceee0ae6633f98fbad7f59ab180c15b4192034b45d6a79cf986b4e159faa257d581b88ce8060f4b09d8dfeb17d72a01301390bf07be3b0d8a1d83a5cade59bc20d5f4e8a6655a396c2d7dc5377139ea80cec98469e2b691cb8e0e51da81575b33d500806f8cb6a3c737bc6263f9967cb81d295a82108f9bb8a276f7ad313984b334cd346164f6697ec6497ece1c7526ba0818578de1982eb2e766d0530e50bedf42691541f473c8cb843760a334674d22b399b9411e6ec54dd689af5c13a5dde045a9fc81d6f269a94eb0f243414109d7eaaa73d2cf075ac05406efa582a9dcccbbf7065d7a5ae79542838e5d816c9833c4e6c6f74c60ae9ee973611396cc1f9a88df5b2363aa873fb0dc66aca5b1aa44f706aee4066e6d6c7db1ce7084f7aef18a397955d26479229ca22c83bb4dc38a08b8d9c0d0c6c08e3738648f58d30b93035d29b2b6134e88b2240856347427d9b85715fb8d9dbc4934fc8270c6b1295c9cf1f2d7c428e6e3af9cb2fdc28e516cd2f155a2566d175cfbcd6e8d6a33bfb8f8f820de22bfb48d51bd2fedc23c7ecc062f268c100a3288cef0721180caf7de4b5ece49ea1dbdd72a5aee8b6ef4ede44b2b28f1a7dbaa82631042daab22f11eca5154eedf01d5d9609cf0e7c1e2548adf1e8d2736a06be27582d551cb705947ef3234bd0d0bcecd0992939e980444b33e28ae0e529192994ff2250876824928e6d6fc9dd32a84992a4c60b5c373c79b5cb02b5dc01c7f8dfe975cdbda1beabf7e3f60da242acdc7fdf6032ddd50adb6d0cb873d2d1dd8845307f4bcb46123800515ffdc03a6237e0f5dd7e9cc77e5e2ad8d93b8e089644f4e10c06dbc3d5116ca56cd49f51d58843ecfbe033221f2cb5fe847d98f61226da890f6bd902a63d3155fe95bb1a166f03cd6e535a77b73d349b7ffdf192049c200f777fe378e5d54c0eec58bd6596650069437f34b6b4bc6a7cfb8b0f08be93be58c356fd2ba28c2e4cb8aa5a85b92e24ec5743c7127eb0e3814d3757e7aca7840683a221156959958037ff21d901f323be450f1c6f22a616036c016553bbea633d9f591ef56e3972c437aa2821b6d16c0a095697fb3b4fcc2a0281b0c98786b12d9a8746b91541d354942024029c5ce3ef0daae2ce3f3c559f2123fe18eeb21ceed9b95d7aa1d69bdd728f19804b32b17e16576194ca4f866dc0d4c4cb2351ce170617ea5dc126eb208b0f76367b9252ba4bd761f5672481d694ac3b85289c6360d4032fae1238d04d94e2a3df893cf0fd514b1fb53a46c9", 0xf00}], 0x9, &(0x7f00000031c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xffff3a01}}], 0x78}}, {{&(0x7f0000003580)=@caif=@dbg={0x25, 0xf9, 0x52}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003600)="4c078823ee342ca723cbd5fbaeeab58eab834620a8c3d41e269c64f18d99252c714f2490b3d3543a768e6fe91b8e9d539ce6c4bd18b790f24fc9491b0ed10d91dde4ed1c", 0x44}, {&(0x7f0000003680)="d9b43d6bdff603ed92214bc33c5a261ae56377c252b36ef62c8a0484b2c51dea0666c9301cf262b4f5c81f495f9c8c", 0x2f}, {&(0x7f00000036c0)="cb1077a52d8ac78a2498f17a4705190414f0690d7feb1f123f8f1de98ea43346fe8ba71bb811ad677a1997b539463153e19cb6451a60f5d791734de99fce60cb25e9723f3d58dedefe7070970c28381f701e0a7d0776d1bf5437cd2f3b41153f74b9ba35e311", 0x66}, {&(0x7f0000003780)="c1d3ab8f5a6b2d9b19d6d83216623d22b4bca397cd0eeeca8408293ace96697ed5d399b569071f3a6e264310f34a44f14d57e2b3372ceb395f3e42bb98d06402d2606b2be9", 0x45}, {&(0x7f0000003800)="88", 0x1}], 0x5, &(0x7f00000038c0)=[@timestamping={{0x14, 0x1, 0x25, 0x42}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x60}}, {{&(0x7f0000003e00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000039c0)}, {&(0x7f0000003ac0)="d50acad51d7834ba114db45fbb3289d6fa0ec9cc8e1a30eb0d4caf62a6d2a232aacd7cec3c649e2584a37996b120f31f8b6a714a8de1636641c972d74dd66c4e0e599c95dd34391b8e7fdfbb57ed697d4eb4f8ef82c591312f72747c8a06e6a052145f799920dc77653e9b11398c3b0245c93bd1d546528ae93ccd0321c42f8601b81d3f2dde30235fd25fbb746bdcbf53bdc12000e431c6a461ce8d8e7d275d40441881b93d34e847fcf52c3b08f2eac8f9357420413a21ef3db0654d160225d2bb2c723ee7ac22e987eb9e2b25eea9b252a38d27bcc550e515d574be4ed1f3", 0xe0}], 0x2, &(0x7f0000003c00)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}], 0x48}}], 0x5, 0x20004001) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 6.408739581s ago: executing program 4 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/68, 0x44}], 0x1, 0x80000000, 0xfff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r3 = dup(r2) fallocate(r3, 0x10, 0x0, 0x72000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0106000000000000003e7604b3efa9f771801300010062726f61640e000000000000006b00000c0007c0080002000000000066e4e11fa1c5fc0a790e768524a0cb1d46a460388d939198d2c1d2562cfdaad2ba687d6d597a6c616913b289a5c8d6dc0e3af738993d7de3"], 0x38}}, 0x40040) 6.405925878s ago: executing program 0 (id=1583): socket$igmp6(0xa, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video4linux(0x0, 0x6, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000180)="62c19912ac44fafadc287f2426a7cde4dfd941ceffda4dcb20eceb988b33e5b5de104e025854895d8c0748698652ddb2c7736e732b9f0aa5d3911d9df0c779b1fa6685f26e19a7f134d6e94fc6fe99805ab49d0994b1775be2ad0968a32dabd591ef2c476ac3c2cf50263c5c28b4133c03e3977e42a12352cd66e2cb2a08949282d421680dadf907c37080b92a71", 0x8e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000600), 0x0, 0x6004c801) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004"], 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x20000080) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r4}}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000040)={0x804}, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB], 0x38}}, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r7, 0x4000000007, 0x1) 6.194480713s ago: executing program 4 (id=1584): r0 = io_uring_setup(0x79bf, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)={0x1, 0x5, 0xf7fffff7}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3000000) 5.601837102s ago: executing program 5 (id=1585): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x1000003, 0xc82) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) read(r2, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000042000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000020000001000004000009400000000506000740b8681411"], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) r10 = syz_pidfd_open(r9, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0xc040ff0b, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 5.339634914s ago: executing program 4 (id=1586): r0 = syz_open_dev$sndpcmc(&(0x7f0000005280), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x8, r2, 'id0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d0f000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f00000003c0)="0f6962000f0d240f0936d8f83e0f01fa6690672e260fc71bbaf80c66b874b6088566efbafc0c66ed0faeb7236f26660f7093124e2c", 0x35}], 0x1, 0x5, &(0x7f0000000500)=[@dstype0={0x6, 0x7}, @efer={0x2, 0x9501}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @local, 0x3}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000000540)='syzkaller\x00', 0x1, 0xb9, &(0x7f00000002c0)=""/185, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r7 = dup2(r6, r4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/225, 0xe1}, {0x0}], 0x2) r8 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xbf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xae]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x0) fallocate(r8, 0x0, 0x9, 0x2000000000000004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa77ad9c689998902, 0x12, r8, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000400)=0x100000fb, 0x5, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 4.299927643s ago: executing program 1 (id=1587): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x2, 0xc, 0xfffffffe, 0x0, 0xffffffff, 0x5}) r0 = gettid() ptrace$setopts(0x4206, r0, 0x5, 0x20) capget(&(0x7f0000000100)={0x19980330, r0}, &(0x7f0000000140)={0x6, 0x4, 0x8, 0x2, 0x8, 0x3ff}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280002, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718", @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r1, @ANYRESDEC=r1], 0x30}, 0x2400c880) eventfd2(0x7fffffff, 0x1) (async, rerun: 64) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100300000008c016e105400001020301090224000101021000090400070203010004092137060101225e03090581034000100607"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x2, 0x6, 0x0, 0x10, 0xf}, 0x0, 0x0}) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) 4.224143309s ago: executing program 0 (id=1588): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f000905e702100000fa0009058202"], 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6247, 0x630000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="19db77e15783", 0x0, 0x3, 0x20, 0xc, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x141842, 0x0) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d0d982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdccd2270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1ddf76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e71bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a35d8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba98526110bfdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043894b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f520d1584b4335eabdb20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0xffffffffffffffff, {0x3, 0xfffffffffffffffe, 0xd, 0x1, 0x3, 0x3785, {0x3d, 0x5, 0xffffffffffffffff, 0xff, 0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, 0x7ff, 0x4000, 0x0, 0x0, r7, 0x902, 0xed0c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = fcntl$dupfd(r5, 0x406, r5) getdents64(r8, &(0x7f00000004c0)=""/162, 0xa2) r9 = msgget$private(0x0, 0x3ac) msgsnd(r9, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r9, 0x0, 0x0, 0x98ce86d7921f6527, 0x2800) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x3, 0xffffffffa2934059, 0xfffc, 0xd5, 0x69, 0x2, 0x0, 0x0, 0x10, 0x800933}}, 0x50) r10 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/5, 0x5}, {0x0}], 0x2}, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x14, 0x62, &(0x7f00000000c0)="c0f78ffb8faae6705112987905483198d2e6293666d2ed0fb8a0817de8949734f042fc90b171ac94b4cbc40788f94c4757f95d49988577043a827f5c2ba162fc1c566f7d50ec83e56e1dc0b9359614dc5bcd62dd317b16e4930b2698689161ef53a9"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.060944246s ago: executing program 4 (id=1589): unshare(0x6a040000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x2, 0x71bb0f49, 0x5, 0x9, 0x99, 0x101, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x880202, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000001c0)="bad104ec0f01c466b9fd0800000f3267670f01c90fae77b8260f0d449366b8006800000f23c80f21f86635080000000f23f866b8028000000f23c80f21f86635080030000f23f80f34ba4000b80a00ef", 0x50}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x4, 0x2b, 0x20, 0x1f71, 0x3306, 0x1b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0xe0, 0x0, [{{0x9, 0x4, 0xd1, 0x5, 0x0, 0xa0, 0xee, 0xd8, 0x2}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x7, "4375bc03878249"}}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000280), &(0x7f0000000300)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6003, 0x5000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x80004}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x75d5}]}, 0x50}}, 0x10000800) syz_open_dev$hiddev(&(0x7f0000000340), 0xdfc, 0x100) dup3(r6, r3, 0x0) 3.528168249s ago: executing program 1 (id=1590): r0 = dup(0xffffffffffffffff) accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0xfffffffffffffdf0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./cgroup\x00', r0, 0x4000, r1}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x800) 3.468897996s ago: executing program 1 (id=1591): r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) r1 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000b00)={&(0x7f00000008c0)=@phonet, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000a00)=""/32, 0x20}], 0x3, &(0x7f0000000a80)=""/125, 0x7d}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/140, 0x8c, 0x1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x69c, &(0x7f0000000180)={[{}, {0x691, 0x4e00, "4b350ada6cb12796c58743c7ac2b4e2f68222cb60486d075860b84a4e1b1fee458e33ea60a0e2ad21679c17bc878a8779f8f5e8709090b4944933f4d5eeeecefe7d2a0711c520850c4724565f7c2151046007a542282e6ed3982c914acfebe3ac4707cbddd7853569aaa85b6c021474e5fa3a0fa4d2b557e77d8cef441f4f8198a9140333fff027a8784f86f3cea7436a43ccda888fdc745e2f96e97f91ed3a5ae7c79dd7a42d51bf7ef1a07c64e571e26097adbac8ec5b2ad11ca04432f29f091e838af18e0b4d3ef0ce8911ede73d965a41aa7a60f7b729d5f571adb7f7f0a27f412ecf7b984eba86e688fe933c55a2f1d9d30a80dcacfe7b4a018a48b11e1ff235448ca1b19fe3eff8171a490b6b9021047cb8ddfd63334d06adb7ed3f39c6c3f8626d7843a0a4fab5baddef26cce0dfb2b026ab2757ab1ce2e42eae390ed5ca50c038eb537652e64560d8287faebab595dd92e3dc80fcebd2979b45f7f62d4997cbb225e6b52520a41852244efeab97883fa23304ecb7fe4a4daed05ffe373891541622124b0664adf6d63dff8dd3d9a9ff6cd581413e80d58a634fdae3420142501c173c2c9f488e0250899cac1c80c9af2f43f2c807ab8ed210a7aa7579cb250edbd2181e5c89b3f944884f8022da5975881b2e4262d3fd0b87e816858b11e44aba6cc0ebfca152b5892fd2b8f9490223bdc09f6896c78a7ed81e170684d69b43d0078aa53d06520a6df24c4897f8c8b34845196f6e1c73483c989cec703d305c4989cc247abc3b0900c63bf61c1b0b4c5bdd089a0db81a4ad05ead7177b6c28efdb217fd3194af2b5120ec585a8704031a1e247f5c246aee12a223c4621b634ca8a55d38d971185d5a5028ee78401508041f2d3f25dd7af2236212847cef81f8d084e02654440606c53967d9f72d2101f4a6e6b6844a6973d5b50cfdfb0dd0bbb49d5a8d8862e7350684a0ef5359b694783a760fb4bbe9d8c24c6d48e3145ca776b4895c72a006fad4252c907fb3dac9d19139ff9bd978f8089409e82936dd8d658842c6bab26af0da3f3b70c947fc6cda96e12f1b838ad257766a3da0b0d6e9d7eb124ee78867f6e3bd9ff9671c84560ccc52b57659b6963d509155672b73ca31438248602c95952613c63346c1d7babd4130f60a702de8b108b6ee655d39dab7e42bc310f44118de1cb450735189dd0fda5f06788b962964023f0c4a9fcb90a4cbbe085f544b75372e1db3f566982c1aa6188075e01ec04a9989ffb270b2727057cfd239db9848d15a2ef3643f9fb89407ec9b43373834a50e483d9457fd69fd481d399cc9bb41ac5563c7b380db63af811e57696b0a727afe7ace38eb2568ba6eff9b3068d43bfd114b18e07b540eda7ba1315acceda5db342363c90107e0fbf3dc306439c04f360811edb1c3364a62f6c97157903cce40a5128d721ba8088406b370779995eb6bf41276ce6a5ff62ddab329ea766a88ae9e2319c48c2b603824daaf3f2a430b2e8ce0b42fb0910be56f95f52c6d382d8d3ca951452b0c92178e3d3d976d35b71893b1a0277780f7ab475cb28aab631936f51349370e9559e49a7f8c1cca86042bb05ad6f5135303e5be3b1c14d29c881dc41a9de125b2d1a5e6da933cb0e92f86868fa61acdcd0e5f88f1dd9a542668a78ecba6aa36be9d6aabf51e2fe25289558156a2b4a85b177811b7796e07a7dde3c029c5d316dd8418fcc9f7c881b854c2a3dcf30e4df32987e7ae1578ab5af7ae0fa5b7f872742483caa1f58550c3a2ef430e1a80fa030c97d2aa508addbda60432f60ceb928eead7bd7451d43ec54342e19465d738b020330a16782c51626837c93cf59b2b01d6aaa72725c9f1713eadcb2ea2cd9f560cf162246688b8224b9f386509fb0d4e0684282650a7876e025cb8bd72a93197d728f8ad48b1223f9d2d72c162610e5168d2cd96344af2a256d6d6ee7a65cb64a226374ff5e5c360c364bd05c1f278dd94577806ab38ba67b29bd407515fc8d06022e6dcd5136aa99a284d64f4f344a874f27b5c12c1db6d04755bdf4ef83403ce67c9b27da9c60bc69b948da1427048ffe3262a16cda97cdf0bf1741f2c6b32e83a218d4fd7e741f2fe5ca39f63b0b0638157b9d7f100e43c41ccf309f7982b082c6055e52ccd9568b1277092628e53f044b51c471a461f5a0b680aa99dc7062e7bf614edbcdeb14031bdafcd50fc917a8f329546d1009d6f7972d22d70ef29ec525be871e2b7975c62c12ef7a3d58041f0dda288a049076853a12616dd2147a10d4d997df0e445aeb76f463f9e413a1bedec6914e2471d9b814ff99fccc1047f3385e780baa58b40f509e0b2f6812b9cc6f0e68f2028ce8f40457135729"}]}) userfaultfd(0x80001) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 2.402024167s ago: executing program 4 (id=1593): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2.319673806s ago: executing program 5 (id=1594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', &(0x7f00000001c0), 0x1000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x29, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x9, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x8}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) close(0x3) 2.074031993s ago: executing program 5 (id=1595): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) syz_usb_connect(0x2, 0x1ae, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x64, 0xdf, 0xe0, 0x20, 0x13d3, 0x3399, 0x1902, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19c, 0x1, 0x4, 0xb4, 0x10, 0x6, [{{0x9, 0x4, 0xd5, 0x9, 0x4, 0x6f, 0xca, 0x1f, 0x4, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "ff"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x9, 0x0, 0xfd}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @obex={0x5, 0x24, 0x15, 0x5c}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x4, 0xf8, 0x8}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x5, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x10, 0x7, 0x10}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x8, 0x7, 0xcd, [@generic={0x3c, 0x9, "f96e67c86558887a810bd4ac1ee12f599c5da61d81b3f5c6b1226c6f4ed60bcd1574ffe2c259c9643c6748711722432f9d03abf83c7a1231d4ba"}, @generic={0x102, 0x24, "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"}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x3, 0x7, 0x85, 0xff, 0x40}, 0x238, &(0x7f0000000440)={0x5, 0xf, 0x21e, 0x6, [@generic={0x27, 0x10, 0x8, "71f8f69384cbea24fc2f6fc452375e75f6895376a21348082f94d2c9bc3c502eef1ffb36"}, @generic={0xe5, 0x10, 0x3, "2e2ec0303c5d9b76b12e41fad9849fc915805232b5836f3944c798d369384dbb458e6422f265970f38f4356adacf1e69af658a67ab4a26424aba869b3b8a73b89c08629f29691b748ad969dbe4f82eb8cfc7d561f51b8aefb407e3fc69f1e4e4bc9ead8629beebe25bb94c5f0649e19994faa08c201bc52c8f5e50bc984ee0ed2ddbfbac414b86b1e76577e03536f09da86dd2f7328d5b9679c637bb2e0dade3ddf82b1027e74af82e433428fd863061fa8b08a9de1318992be9f51386ecd6816031af257427f4d9f3afa949a1cbaed30fa340a9adfac9e9d6b72b17bafb6f72d866"}, @ss_container_id={0x7, 0x10, 0x4, 0x8, "93c64e44c7eeac18ff316a02f22ad2ea"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xd, 0xbf, 0xc5, 0x3, 0x5}, @generic={0xeb, 0x10, 0xb, "5124dc7f6df22167ce03e726c11f0b686f0f9f69f1eb465e4156118abd2e570bacc5952a163c1698a8d619935c58783c80e62da320b0c6796134738254fe4bd26d728ad1cdc573010402fe2c56ddb2fba65e66cfb4c114c45fd1f77c6da14649352e6d67c2178ebd6b83a099fa7527329002d0e11a27bf6b1d6a1efa872155373e6ad23b5f6fa71a774558e75914450897b23f474cc05239dc6cb6ddb1a6d6d575ecac678ff1d52271e516969c7030ab47c19ff299160dfd5ac9429c78e64f3d6209807b4fb92749f34093fbd7682b909d2a036ccd5982dbb379d30b1907a199db7e23d299df22e0"}, @ptm_cap={0x3}]}, 0x2, [{0x8c, &(0x7f0000000280)=@string={0x8c, 0x3, "89338bc9d7e1124a5cca982dc95990d8d3aea9e9fd9a0a6a046896f109cf2f0136f4ae318cb5309850a6f00467849b131a13c7cf37931c81390df921b49cec2f8d628eb9f27d9444512d5ddc4a4fd05dd745be7b7002e1e1888dcd321f3e4a43181fa2720a7eacb1c4c4d1d41335f3a89aa4671d1ce4adfb55413f8cc76a4d72e5d1b9348294f1fba064"}}, {0x73, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x861}}]}) syz_usb_connect$uac1(0x4, 0xd9, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0xab, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x5, 0x1, 0x8001, 0x6, 0x5}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0xa, "e63d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x2, 0x7, 0x4, "", "8a76"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xd, 0x4, 0x0, 0x8c, "58a8db", "d65d"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0x6, "37041f773774"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x5, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x8, 0x3, "8aa6f6ad"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x4, 0xbb, "a5", '\x00'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc, 0xa, 0xe2, {0x7, 0x25, 0x1, 0x2, 0x0, 0x71d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xab, 0x7, 0x7, "b9c15d2aac20a414c1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x4f3194042831e619, 0x1, 0x2, 0xb, {0x7, 0x25, 0x1, 0x80, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0xa, 0xf4, 0xf, 0x20, 0xe}, 0x58, &(0x7f0000000780)={0x5, 0xf, 0x58, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "f206f0d02495aebee4928f0d951c881e"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "4a527b65d01fced03e66303fca707f6e"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x6, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x3e, 0x6, 0x7ffffe5, 0xf, 0x2, [0x3fcf, 0xc030, 0x30, 0x30, 0x3f30, 0xff0000]}]}, 0x2, [{0xb0, &(0x7f0000000800)=@string={0xb0, 0x3, "d5a95b84eac00fbe4d68cd696e78de70b9bd8727909a2427af45f23be67ea40cd212754e7ae6b4168b19ceeaa03e0cb64cc5f3e0c3f03e9c4a42cd1b21340fb2f1754529cc388124fe8e549a019c6d3db0d8942e65b6646f822d71187a5b5a59c3dc640f91bb4aa625d0dc0675d33affa853702229ba30f9837d4ad5a23ae128f627ec4a0fd10748a7556ce57193b2b45bb08001245ab2afb445fab25ad4c8adf7870d71c61d03c29295d8e7f41b"}}, {0x6f, &(0x7f00000008c0)=@string={0x6f, 0x3, "20132ddea5f7fd1d99b3a2ed1b3fe053fa77f5acbdd95f41b17aac865e786424bc305ddf80aa50e6be9e89f5a63d5bbaf09e5d8fd980b19ae268ee8ab33145d2d31ccac68c712896d97ec8c723340af3b740a3f10fac5dd5a109aae16a4d8b85e14857ffd6f52eaa02e5f784a5"}}]}) 1.718944938s ago: executing program 1 (id=1598): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x3c0, 0x0, &(0x7f0000000180)=[0x82, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x101, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0xffff, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000200000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c000800"], 0x178}}, 0x0) 1.61794065s ago: executing program 1 (id=1599): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000600000000000000000400001811", @ANYRES32, @ANYBLOB="00000000ecffffffb602008500000083000000bf0900000000000055090100000000009500000000000000185b00000e0000000000000000000000bf"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@cpuid={0x64, 0x18, {0xb, 0x80000001}}], 0x18}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0) 1.392719514s ago: executing program 4 (id=1600): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a41853000087d7b6a0ad4f0b561f0f7214500c62ce9f000000000000255048ce8849f6b82677f5118ecb71084e6d04a592a95b3bae2ca22d2e84b64918399782e3b47bf91ee43a6f4b277b3d544b09ec7761fbd1f496d8e7ae2ffacdd8e03a10eb34590090ba2df1d3f75b7147fdaa1c18a3772df45a8861db97c7890a1365a3c3f2f6318f9b33b1c85d658a3783"], 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syncfs(r7) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',', @ANYRES16], 0x2c}}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$sock(r9, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)="07a36663c5aaa8b4eb7962f860e7c11acd05f90a7042a01611bf5168670f7a756bfa19a2211b68f276106f9af73099b796d17b1432b9183d7d0cbd6e6bb75a33e8631904a3c4d02e1208851618c1e8138e49a3ad48ebb7a5a6444c5eedae1aa37bed6524eaee395d224995e5f5befba0be9d31f3111270446fcd9766a3170f2fa1705d08bbcf94ed07afa71e0c79d2ac4640ef78d861fdcdaa7ab199569610d7b40c1492f59a871c0fb096bc14aeb8f0016a01642d0bd640def09a5bcda9e6f2869de6222cb7a71c3cab7a646db92839e75553d633645f", 0xd7}, {&(0x7f0000000640)}, {&(0x7f0000000200)}, {&(0x7f00000002c0)}, {&(0x7f0000000740)="21261aead0eb98f98d743b25ae028f35736c7c79dae5709af5977b24e0116ad7566e5333e47087b466dbceb4f92d7d2d3b84635e2c65fefd43e576617ed3741f373ed701dfa9723712e061c19698a26436d42e2dac44c101e88d3c7032a3ee3abd1ffedad30e7dc46acf3820ffcd9deb6f7b2263500a01bc935f5844e8a5d4b76728ab084e93f46ae50c0b999bb2a2648ffd990fac260c", 0x97}, {&(0x7f0000003940)="1545d1d6ec1a59b3c8705dbbd521c54cec00ee2de9f0913361c00464fac97737c131b821392a49441e6d68542ce5f77fc8992149d7c4c44d09764917eb27dc748ae4356b46775d0bc349ab472e828e70243ec744613f99a77fdbcdf9cdb3b468e90a031704bbabf14e8d", 0x6a}], 0x6, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x4f4167ad}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x30}}, {{&(0x7f00000009c0)=@vsock, 0x80, &(0x7f0000000480)=[{&(0x7f0000000a40)="c0e9a87dd73d0da6aac5516e73932502413a9417a5c1e0ad7bfb3a1cf5069c823009a7169753daf54e158be70714d1c6f4108f3f2e4cc19952c30199069142aa6e0c9dde1dce92742ff6cf8a106675c61b177e89e13123f872075521731fd3daaf80123dfafe9bdd9b1edaeb3e960d950c7ddc89bc292f58afe177879bfaf520d3bd486cd5ce736a2998d8e34348476e9e90bc9a6dd6ebf81e48ca08f8ebc8e13d923c4210098288e522ba085924042ea6428c13a8b4933ad181bd2a21572007641a94fbccbbfd5c7dca4b43bc8d0cfcd6eec474d26fb758aec15411", 0xdc}, {&(0x7f0000000b40)="c06a749e101db2cb53054a24f007390247e368f8e6d964eee3a1bbddc60bae06e367f399ffc46e1beb0aa64777852f52b31731fdcb36a148ed87f30147522240e1f489d730bea7b8557bdd0a9d228dee70944dc18496d0ac1a2bc2fe23092d2fbc96dfa889cda287e7475453370d730dbb85547c37d4b44ab7544161a6e07fbaa8ab8b9e33f0bd00d8f19f84835cf8823207147e0f80e075fd5c6e92fa227d6e0e74b6ef", 0xa4}], 0x2}}, {{&(0x7f0000000c00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000003100)=[{&(0x7f0000000880)="23cd177f4955620be39ccc8612a062462141ad0d81043c0e0bf8ece5b677730d2b314794f8d56f61c6", 0x29}, {0x0}, {&(0x7f0000000d80)="b2273581124d0d59d54b4dbdac44858ff6714dfce44c7635087d18dd8a59c3f420290d6e0e4d0bbf1caf3ec3edfcf7fce667a1fadb0737faaee4ddf50d162c30bc25177a0011e3a3306bff97f700117f710ade591fc62fde733e7afeb23c4c3d927093fe09c115b4f8ab601c98c17aaa7cd99577cb6cb8a94de28dc98924d431ef10ff744708dc3f3985ba0c904dff743db07a960e7d82e9ff4b5cc0e5e2d2913b3ea8c565b215a8b9abfdf59a63af249594051d0a120c0d06d04667ffa2f807f5bdcfe2e87eee01f77ae77684ba7061ebae26e659ddc9df0778690f00fd33c1e60f750185100a5fc73eb1d942c7", 0xee}, {&(0x7f0000000e80)="e7447d310828eefd7abc9fecaca2ca51619e2b7c3c12371732bed5edd7f427abb3ff262097d16a51587e54d12a54066f6b6ea96a774699b2768b8d937a6d5f91ab1afdb69128ca2f45d30cdb6c464c5ef14a3ec66219d85df5061fa31a98306dcb300f66e5c75b163e9631de8bf8e6eed2d04fe416379f60434af838ea3345f2519d69822ce3cfd3e9db14a7bfd96fe14e1cc4cb82d35618a45fe75a4c0a0e514cc84650f24d7f5d93e97edbffb587c9b2ae85be93ccbc3557bc0cf97ac0afeb68c6adb0f953a00171282a7478248a5d8e942593f7d2e29df96ca6c75e2251aebb4483ae3dbfcffc9a969665db4555887c7180783ba313f4e4f553fbb8d483850aba4b50211cb07954e57b89a2ed06ddd44a0f12b9dfa7814d4861ccbeff17adac561bd22b114c3d992ea214901beaf8162fd353dd115a63cd0bba03fc41b761452e8191c111568df5d9aa918997cebdc788cfee971c95ca49dd0377d1095d33352c25aa1dfa92ee87573fe0da094b58a24c435d743f9ca664fb4375641bef573cceb59b5a4b3f1d7820d551fbde536e00c0abb78eecff7f12acc9109ebbbfd68348f8cc037d813af6996cfe867dc73369c6c85733967deb5c2ae07eec7f2691a80bce4bee7140faaf566e4845b7521f7e66cf6fc6ae4b4b618ec1ecef23a164f2065f924ca11fc42bc2f5ca9b901262ae308b8c8b7df854b6a627e3644f8305021280fdfb24a35f50a4da36cd4a10c12dd020fd66c9d65b764980df38c6839ae2f254221fc6e577c8b54704c4c6f5d57c8f3e99c02d09c62510b25c84f206981ffd89b11cbd19d3cddd0bb837bd28c7d747b4929c20d8943fcf1b71204c58b50244bad71686191087e8caaf1a9c5bbfd261a861bd5411c4ad5c4516d502b4fe58c96dda2ede91f424b9cc6eca6a8a5bc6e5392ce2f4feb6a905b34fbf5b6fff88fd763ddf581b44531e883656eb1ab121c10f5ae5dcdb7740163d8796b7ea9364782dae1f8fadbc828e096c77d36ef962f7efe4838dd28345a78e597b8aaaa4bce8e8fc5295813527763680c55e05f080b7d1e265a2bac423121d42d5a9e15f2af4807eda0bda8b3d34822798eb1936b388d113cab859fb1b5c9d54f67d357888da80195106cb4784a0bef903c323112f08854cf40164dfe46e7ca6271675b019003d7c598f29a35dbb758da2d97a830a9f75c4542fb1fdc821d8c48dba4332812298d5ae4c992d7aba58bd5f26292c00115773b6bd086758e9b488af32490716ee33d4720991aaf24f70d532bffbcb2e2c1c4aeb89425effdfbdc9af81cbd08a4777fb3e3882f39053973ce78d18368758ec0d597523642256965a40b41e50dd466c2c5577cb62cf7ff61790e1108ddfa7d6a1edbb3511b7c5036d87672baac817934a30c3ab4ba41bf98a37cff8aa64679f77e9511594e2f186d43b853588397883d55fe7dcb05d9010a4c09ddd4a25f34cb41558f637b51db36fa6bf7dc14182d4bf850bb3095189a4e20c489cb4de584a46c79d522dd6458cae1ca52716188e9ad1ed14c58fa1da391836397923e1a58dc9f951e3e04a859edadd26df7d958a9d71e8f88f01a2a357a60f9d7c7003a11ffe9f84a80f77fa999183e2c10c1f5434763a9c35d01ca0ed794ea407c6975588f4017bd0b7bba5acf5c839571ac8b7dd3908055d0f3b0b98f486d748a2183ed9131b16cdc1c3abc5b78940431a7b422f03947385ab4ded06b0f69b74f1b185a82980663c78be1496cb1a45e069564c81057f7eb05acb8433cdd712c3f18f0244753e2e795451586ab9e5a7ce81a8daa57fd0049669b26a27ddc05536574a48d369b23b5e1dc79b17a75cab3041c353a16b43c21478c5be8a2b4214b8dfb93166574d588ff9b1e0e3206db6ec599cc7549cdc48d27aa30cc5520d2295a8cde9700073a7d8e9a2bf1c0ec11898a318622468d4d4dd2114ccac37c6f65c9306679e682a42f3aa5d3ff84d234416044b83ba71056bcc2cb035f39d55a7f4f114a4a129789f7b1a3e98461490c35520c7d4d1e1832b1f2e7230324fcf43bc62ba3e7c3269b903253014d025afca0acac4b0148860b544487c1b6925deb36d432cd3b6e6c19cdade940276b6e240a38bdfe55a1a3212112fc82fe9c98b15100e9573976d8ec1dcb039884de24fa2e24d3806fd82aec0220aa8e9955247fede56d994e8fef4f369b9c049c46792dfa5149eb67528e07d9d2e9dbeb3a8886c3810e89af58f2779d3cb3dc92c11936ebe81f64c7b961bf8a33314aa6b1af0656051c13b3f3eedf2ddb46b2ae101d842abcf2151bfd0e75058367ab363ddac9f62be97651739c1ca0c923fc83c52f743b89e15da262373de4b453402220496c0f9f55c95ca810e5898a3723de310437dbd0c7fae768e3d3e2f1df477b17d4e09e737c5559ecb32670b69b3110a0f76aec052ec57b0652af8bba5c987badfc32b3b0d6be4afb30c08c5bb4315aded08a0bf8c986049f082f76cf67e817cc55bea073ae067da5c9603caccd47425b102e230d9c672aca073ebd117bcd17cd4ba9845fb8b121a18987c82e5b66da01e928a19599809987c71799eb6a6c6f9bb0206d0579a46e0f68e1df65c42338acded68d58f5d6a9f750dd8d39f5071970323565f4e833ac1bac5954cf58c7e6451c2bee7092b66bb0f42845b8f1e9208a1570e9af517f4bb720b466d1fd1925ac088dce0261239d05bfbd543d151c9f47f67af2271cf7c32737c02d7fd2617228fba831a95bdb132a6cae0d23baf3890f032d9258bf6f0aee9361627d1dc11867295e6adff99e9bd729f108820365f49d006d242c7b98bbfdaa71da218e5c1d5de24da3086912656b41fd93575f136b30294fd91d3303a8ac190fe11ab8fc5950c89b00acf0fb2485d87b6313cfc07c4f4f5be44ea1742a415597611022b8df72c9ec5620aac9f9a7bcdddc4fe011f937fd2ffce452c4eef59194b5732b81d7cdcfca592b03df4611308a04cbe8c2cfc15e3fe776b02f4d82d36ea890d279d53e6a606a3985580bd707be79ff5de21d0ab4fa015c19e1365af02ac3d1bd9e3fa9a80fd2238ac8c1d9cf0a9740ade843ae32cc0ecc9c007c8f8d4cfa1809b7eda87ed263119bd4b124d6b1f36eba7913112f51bd4dbd1fcef1f98a7953d66913a6833dea847ddb6c1963a8e4da28440ee3212f8a54465b1237e3daba3c8e972b24014be7157a2dfae33b8f363d61b07c56b9f1dcf8d1c5ba8640cb77ca8b3d547f780510a1182a6c8c8ffbf1b05224042e31670e8d024ad7d7bc5931fe44e07173aa3b5103142c7a7ce0e141bdb89e66dbb58d9d3ceef5b53a78392990714ae0d9b20918b67a6763f72508642d6b435e2d8c603df72171750f816d26c2033b2defff813d73dddaf954b19080246dfa4720e7fec012eab709956ecfdcd55627f40633668faaeca3690d628a163e4e2d29ffca15154bd7e8d82abb9e606b63e6852284c024f49345f7cd6d0a86ef1f13281fdde4d74b4547f06d8e2b814c26a0ce2f4d1dc25ff428c0b32a4f437b4d06e329177cdd3c03b9829cddca7ae1f34df00760ff31eb77e360c1e54807df491ddf11af0372f41d3d4532a3690f089ed3d9780eeb9b38c3f4f017345dff32ce043c67ad0a5dd01023190fede2791f716a9b3d8cac47082bae2201d8b4eb4554498d81d0de57dcabc02a24fecb02d019c5fc59195886064f545107280b9088a3ec7b1a298b265bca13038cf706131d19b4a416b89d0d2ef256075d7ae480f6928f7a7d3bd3cfeee8081c5eec12b0a2ed3d6d010d4e1f6adce45eb6733b0fbce75f6fe126205ae27fdba8fa92280d41c015fae9ba2330191b1e0a08b4b05a593e33b7d3526c36d523e0c8db3c05ab5958f4519280481e6c93511ef81bf82adf3e43bb73294e79ec312a73b0edfe1101097ca08b38e9a06804d5834197751b28ca46ec22c37fcbddebf462ee1eef60118736b65df402151ed8ce622be4a6c7b981b1f508d9cc29584882e6f9a1bdb1d5abd1bacf95878edbab7c4c7ca8d2cc9153705dcc5d07009d533dd615dc92e169dc8f7d8ecdc7e3d1fa96b365b424f87480962cb64af64167dbf9daa1d2afd61bc5f86be31f4a3c4e7636af8388f8b675412de2d58dc71a1f79ca3db3a6bce2d5e713f324a89ce6e41b62850d303dd069414409128eaa7b0e60921ed6efaccb80f7d82911fa4ed6d559e3d2cdf2f65568851e437749e82a618a801d8b75eb826d845c13b7649fd014a01d457a7bbc3a0943a0154981405b09139cf67db7e8dd71072259eee9b8f9568faa37e64b042c6f2e336c7aa05e357840dd004edff7e07f1f5f6960e2f8646f13e3b1cff895ce8f24bf469432cb5d6a56c92bf05775f2fe6a4fe132269c1c2d7119461138f538fedc8f0ac23c72c392852e191a3723c4bfef5387becb9ee28870b40fcb6de4623a87ab912c9230cbf11f4fd966ceb33d97486a0e2b91e62f155ccc111f0fc1e29420025008fd7d1a4c618f369d76020837dfdc5b6f81d4cf35cd9bcc067891f2371f6495c3f3006982b4358773d8331dfa3f3d9d226b14b0ba52c19946e270356f6d72f252ad109a90e85d60c9d416037f2d2934fc0457171cb791ed987ff6e224ed0ed94f8b347ec82ccc6c319d3c5f1736b0a12287a0bb37fd725379b8c795b4c06713700f34ab69322894ca1e5845ec75192d169dd06750865ad5b50f3a511ea2d732cbdd29cd985fecbefdd593ff27838641c6dc5127e0cb75c137f87255214215c30a8090884d57f4da240f49f6426b8d1a43abecdac868186fa09f425c9ef6cb865b2e876cde7cd3a21ebacdf5f9613df9952ea74f94cf816bce1d967cbf494d62d7e7cb4e779843b5c2ccb1978e65dac1f5908c48b5c8be0bef6032936bb82da8b86682622273a3b1a8a96a0bcec69cf3639be6e25429779b4ba8d0a79e805be3e818bc7c8cb43d637bf6b89bfb67c966119cd95f10c797e0f9b29a8b549d000eb2b32e7690e6e555944552ccc938e02381dc72189a2aa1d99c6f7d95a05b3fc33fdcf2af1bda1c49331674489d9cf9890dbee619f54d04f697c063c0dafab890770eb831f1e0a3e64ba091a7e57ac68e975bad4e7da595673aba0f9d32c798cfc317375a3b8dc1f37920c5f36c539c04acc379f707e78fdb25383bb91475d7f7ba91e1552b9568673fa87fc17bee603c694392f680b23ea39ab4895d1aa8b7d23c507c11a66dfb71c3340084d70f2a7f8973f3f8cf80ee54feb7f5a0740d709d0e68541eddd3d1c8431334f272bf4fec6457591ae2d6737f1f8d1b94837a57b9859457d80193f2de69fed667f0088e8785de47c1c958d54c733dd94cbbfdc7d2539ea725c0900e2556fbcac26b20f86f90978254442cb2fbce264799ec3dceb426923604dcdfb225b1df8d67d4ddf8623e448dbd01dd73532bb35be3b6008f5c361e59870252bddecaadc3d2ee043fb494ce25d4f983ce3c563282b694e4440619cbda657b4a01c704671916d3f378cb5763c27f57bdd13bbc30b67ab3c3670c13e16ed329308c59e97d7e182e3d92fe858af931eb767b2d6679f98e7453112c0993112b566d713c793ea3b0d0a0fa8ebe8d786cdd2c2f336a359931c6fcc2350029fc4140b45b126448be381bf117b448eb431c76f6437267956fc3e94e359b0afbb42797c6789229ed730505c173ece83ce3eca7830fb0ebf06b95b13d7b667f512cbf6a1d1e980924d557b286cfbd62dfe76cee7e9bed95999f268a88d9b0d622f9a4d7e7ee5b9528321650792122400d749a3e4", 0x1000}, {&(0x7f0000001e80)="e82771be820c1e07afac11a713f40ef49d44f575b7f76a0e91f6d6a5e9a33a7815539287ffe12f277b344b6bbdee95281b90f5bef7517c5e29bd464801d23ae36720cb97213b6a8a85a12de4963f7145220895417bd5c64cafa0b64202e27141a5d4e5912e6ce1a0d4dccfb128f5cc6ce0811df093ad1a877b6e19ec0ebd4abe688cbe6787970bd95f5e7b3fa9f2f98542028f58562f17ef87a110438c08f804a9ff1c2bde3e8d2462a406eb1df5d831ad756eba2598aaedeadf234e9c66a1346a33a9dbdbda3a04d644e9a4a9304c2f4fc7542a4dbbcf4ea7349ec4", 0xdc}, {&(0x7f0000001f80)="d5ffed549652323de25b6eeb530b046eef0da8c01d5ca754e082f3ddc7b5b56f", 0x20}, {&(0x7f0000001fc0)="cb580b832b6c697e5763e311", 0xc}, {&(0x7f0000002000)="4fa772476b847ceb2bc9a73467bb41d13210b551341ca3f90353e0a5ccf9a934c279459686da389fa1788e36ecaa788d942eb89be293e5818a0b1343232d57db3d9d1977a75f4fd261714bbbcb722d7ae143f549719927324810db6ddfcf1c1ee202c5d52ab62e82312b68ed0cbb30940bea6c34d40fb74421c5ce8d2b2d902ffafafd9f144c82158653f71dbdadbd90aaaecc8fc7f0560675d3a34c52a78fdc8b8100040e27e6d4f6c2bd53cfcc3fd1465db3ec3759441ffc948a25b02e341ea541b3ea83c522dc5d12", 0xca}, {&(0x7f0000002100)="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", 0xf00}], 0x9, &(0x7f00000031c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xffff3a01}}], 0x78}}, {{&(0x7f0000003580)=@caif=@dbg={0x25, 0xf9, 0x52}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003600)="4c078823ee342ca723cbd5fbaeeab58eab834620a8c3d41e269c64f18d99252c714f2490b3d3543a768e6fe91b8e9d539ce6c4bd18b790f24fc9491b0ed10d91dde4ed1c", 0x44}, {&(0x7f0000003680)="d9b43d6bdff603ed92214bc33c5a261ae56377c252b36ef62c8a0484b2c51dea0666c9301cf262b4f5c81f495f9c8c", 0x2f}, {&(0x7f00000036c0)="cb1077a52d8ac78a2498f17a4705190414f0690d7feb1f123f8f1de98ea43346fe8ba71bb811ad677a1997b539463153e19cb6451a60f5d791734de99fce60cb25e9723f3d58dedefe7070970c28381f701e0a7d0776d1bf5437cd2f3b41153f74b9ba35e311", 0x66}, {&(0x7f0000003780)="c1d3ab8f5a6b2d9b19d6d83216623d22b4bca397cd0eeeca8408293ace96697ed5d399b569071f3a6e264310f34a44f14d57e2b3372ceb395f3e42bb98d06402d2606b2be9", 0x45}, {&(0x7f0000003800)="88", 0x1}], 0x5, &(0x7f00000038c0)=[@timestamping={{0x14, 0x1, 0x25, 0x42}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x60}}, {{&(0x7f0000003e00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000039c0)}, {&(0x7f0000003ac0)="d50acad51d7834ba114db45fbb3289d6fa0ec9cc8e1a30eb0d4caf62a6d2a232aacd7cec3c649e2584a37996b120f31f8b6a714a8de1636641c972d74dd66c4e0e599c95dd34391b8e7fdfbb57ed697d4eb4f8ef82c591312f72747c8a06e6a052145f799920dc77653e9b11398c3b0245c93bd1d546528ae93ccd0321c42f8601b81d3f2dde30235fd25fbb746bdcbf53bdc12000e431c6a461ce8d8e7d275d40441881b93d34e847fcf52c3b08f2eac8f9357420413a21ef3db0654d160225d2bb2c723ee7ac22e987eb9e2b25eea9b252a38d27bcc550e515d574be4ed1f3", 0xe0}], 0x2, &(0x7f0000003c00)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}], 0x48}}], 0x5, 0x20004001) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 1.336610214s ago: executing program 1 (id=1601): prlimit64(0x0, 0xe, 0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000001821f10f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000904"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) (async) setregid(0xee01, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (rerun: 64) 987.041025ms ago: executing program 3 (id=1603): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') fcntl$setstatus(r0, 0x4, 0x40800) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, &(0x7f0000001400)=""/4076, 0xfffffeea) r2 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x792, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r2, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 896.795635ms ago: executing program 0 (id=1604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x1000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x29, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x8}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00!\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 706.142333ms ago: executing program 3 (id=1605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7801000017000100000000ffffff8000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) 606.534541ms ago: executing program 5 (id=1606): r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0x6, '\x00', @p_u32=0x0}}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x40, 0x80200) pread64(r1, &(0x7f00000000c0)=""/57, 0x39, 0xa) 550.249494ms ago: executing program 3 (id=1607): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc010000190001002abd700000000000e0000002000000000000000000000000e000000100000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000004010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001"], 0x1bc}}, 0x4000) 424.382696ms ago: executing program 3 (id=1608): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x10, 0x5}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x10, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) sched_setscheduler(0x0, 0x6, 0x0) syz_clone(0x90041800, &(0x7f0000000340)="e6976ef6e6582d8ca872054c34106f8ddc77e8bf55be08aaf0e489d5d9c98ae9fbdb0fd87ed9d9ce0596acbb9c8fa41b2900840c9da93b37f4e13845d4560392a775d9a370ca825550421d553cb9fff6e709ea4612e821af47e2a5b93ec658feeadb03c0650972d163eb88d2081d606388845e39fc40246a564deeb90e6793c36b334303880e4a3566767b171758d19040dec3820e6f0c23", 0x98, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000580)="d9dea0dffcbb56c1ff92cc6f8244a065b7de9618493d47cd662e75fafc3afcdcda9d741db68fafa8acffadf3210e3284ecc48b3ab8818331b033cf86c09a09364296b5b41a6e22ede0ea5b8c461c26e1a5c78f85d7313f093d6a8acf1a670ac440f7aa2a174d9e6728ff4fde2202b8a55850e7f9ff8a1d6cf9cf938a89d899ddc4f61b77565214551975f1760698eb680fb1def0a6ab972e954e93da65c1ee9c312d13c9d433eaa5011aa4975e1343d2fcae8892456782c7f09ab21b98ef572153f0456bafac63542586f26148569fd23a4d57") bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000"], 0x13c}}, 0x20040880) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000"], 0x13c}}, 0x20040880) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 342.273249ms ago: executing program 0 (id=1609): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x3c0, 0x0, &(0x7f0000000180)=[0x82, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x101, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0xffff, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000300000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c000800"], 0x178}}, 0x0) 340.119696ms ago: executing program 5 (id=1610): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400000000e0a01030000000000000000070000000900020073797a31000000000900010073797a300000000014000380100000800800034000000006"], 0xd4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a00010025bd7000ffdbdf2502202000000000070010000008000300", @ANYRES32=r1, @ANYBLOB="080019"], 0x2c}, 0x1, 0x0, 0x0, 0x60d0}, 0xea5bc50b6199d77e) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 261.651274ms ago: executing program 0 (id=1611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0xca0, 0xffffffffffffffff, 0x2000000002c, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x100008000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x99) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000380)='./file0\x00', 0x10000041) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x20000000000006) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r6, r7, 0x1, 0x0) dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x5) unshare(0xc040400) fcntl$notify(r8, 0x402, 0x8000003d) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64=r10], 0x40}}, 0x200040b4) 170.343742ms ago: executing program 3 (id=1612): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x88901, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0xfa, 0xb, 0xfffffffd, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0xffffffff, 0x200}}) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=r4], 0x64}}, 0x800) 262.451µs ago: executing program 5 (id=1613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80221, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x1000, 0xe000, {}, 0x1, 0x1}, {"d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a586500cb1ac4aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) 0s ago: executing program 3 (id=1614): read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x6, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={&(0x7f0000000180)="c877d9a224297931a9711a7bb19b0713f681de39e298eef8d5ac2c55e61e19cb4b97b31a4c6fe23f198c550cc5d98f215e370ad262e28aabdb6f50e5961b3327ab3078e46d58b6a8f96c5cf1a5cf7db5a75bd7ce073419731092e1784bb76711145b72ba1e4236b49d5bb8fa37ceb06748b950dcc9c4ea44a364dffb4f8768fc16178116ab6e38f1ca8aa1cc0eda4399ef94", &(0x7f0000002380)="9339e4076d5ad7b8670678d597549543318017695b246ad108d1a95ec354b955b2b35afc0b299bce88452bb3a649e6e7a374c5dcbc6a591561d0602da4d9be1c7a6129b69dbc924a096cbe5b0a33a35e17785e6d5e92ee6a39ce27f8d0c8778bebe6b39683f10624738855fc3a6391b5e72d177c88da26caf8c7358bb6dbab58d685ddd8625ee68200a199e3e021dd1e643f259d903fdd5ad7fd28e6a27681b124cf0eed7af55c4c1266ac0790689bea697ca34d2cc8ad34ec961efb466311e565dd89a9fec1a8ce5b87cd4b2e2acc0a5fde9d36c9c57d014e3d7189c24eea64ba045de8"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000600)={0x1, 0x1}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r4, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='uid_map\x00') ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x268, 0x0, 0x800000002000000}]}) timer_getoverrun(r1) r9 = fcntl$dupfd(r5, 0x0, r5) read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000000080)=ANY=[], 0x2a) kernel console output (not intermixed with test programs): x___mutex_trylock_common+0x10/0x10 [ 338.131016][ T9857] ? rcu_is_watching+0x15/0xb0 [ 338.131026][ T9857] ? trace_contention_end+0x39/0x100 [ 338.131036][ T9857] ? __mutex_lock+0x319/0x1300 [ 338.131052][ T9857] netlink_rcv_skb+0x232/0x4b0 [ 338.131064][ T9857] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 338.131074][ T9857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.131091][ T9857] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.131100][ T9857] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.131111][ T9857] xfrm_netlink_rcv+0x79/0x90 [ 338.131126][ T9857] netlink_unicast+0x80f/0x9b0 [ 338.131145][ T9857] ? __pfx_netlink_unicast+0x10/0x10 [ 338.131159][ T9857] ? __alloc_skb+0x193/0x390 [ 338.131171][ T9857] ? netlink_sendmsg+0x650/0xb40 [ 338.131180][ T9857] ? skb_put+0x11b/0x210 [ 338.131194][ T9857] netlink_sendmsg+0x813/0xb40 [ 338.131212][ T9857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.131224][ T9857] ? aa_sock_msg_perm+0xf1/0x1b0 [ 338.131238][ T9857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.131250][ T9857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.131259][ T9857] ____sys_sendmsg+0xa68/0xad0 [ 338.131273][ T9857] ? __might_fault+0xaf/0x130 [ 338.131290][ T9857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.131307][ T9857] ? import_iovec+0x73/0xa0 [ 338.131323][ T9857] ___sys_sendmsg+0x2a5/0x360 [ 338.131336][ T9857] ? __lock_acquire+0x6b5/0x2cf0 [ 338.131352][ T9857] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.131382][ T9857] ? __fget_files+0x2a/0x420 [ 338.131392][ T9857] ? __fget_files+0x3a0/0x420 [ 338.131407][ T9857] __x64_sys_sendmsg+0x1bd/0x2a0 [ 338.131422][ T9857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.131439][ T9857] ? __pfx_ksys_write+0x10/0x10 [ 338.131459][ T9857] do_syscall_64+0xe2/0xf80 [ 338.131470][ T9857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.131479][ T9857] ? trace_irq_disable+0x37/0x100 [ 338.131488][ T9857] ? clear_bhb_loop+0x60/0xb0 [ 338.131500][ T9857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.131510][ T9857] RIP: 0033:0x7fab7cf9aeb9 [ 338.131521][ T9857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.131529][ T9857] RSP: 002b:00007fab7de4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.131541][ T9857] RAX: ffffffffffffffda RBX: 00007fab7d215fa0 RCX: 00007fab7cf9aeb9 [ 338.131548][ T9857] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 338.131554][ T9857] RBP: 00007fab7de4c090 R08: 0000000000000000 R09: 0000000000000000 [ 338.131560][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.131566][ T9857] R13: 00007fab7d216038 R14: 00007fab7d215fa0 R15: 00007fab7d33fa48 [ 338.131581][ T9857] [ 338.133641][ T5876] usb 6-1: config 0 descriptor?? [ 338.754382][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 339.049844][ T5876] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 339.228556][ T5876] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 339.336824][ T5902] usb 6-1: USB disconnect, device number 3 [ 339.344946][ T5902] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 339.477209][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 339.492026][ T5876] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 339.501982][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.510302][ T5876] usb 2-1: Product: syz [ 339.516035][ T5876] usb 2-1: Manufacturer: syz [ 339.529549][ T5876] usb 2-1: SerialNumber: syz [ 339.556043][ T5876] r8152-cfgselector 2-1: Unknown version 0x0000 [ 339.572207][ T5876] r8152-cfgselector 2-1: config 0 descriptor?? [ 339.967393][ T5876] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 340.087832][ T9872] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 340.130363][ T5876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 340.143043][ T5876] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 340.153125][ T9872] bond1: (slave geneve2): making interface the new active one [ 340.167945][ T9881] netlink: 'syz.3.1105': attribute type 8 has an invalid length. [ 340.175629][ T9872] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 340.175879][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.194249][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.203286][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.212904][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.219969][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 340.231280][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.233299][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.267377][ T5876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 340.276758][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 340.285298][ T5876] usb 5-1: Product: syz [ 340.290522][ T5876] usb 5-1: Manufacturer: syz [ 340.331202][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 340.358203][ T9866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.367928][ T9866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.379891][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 340.391154][ T5876] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 340.440046][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 340.443611][ T9885] FAULT_INJECTION: forcing a failure. [ 340.443611][ T9885] name failslab, interval 1, probability 0, space 0, times 0 [ 340.468092][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.3.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.468120][ T9885] Tainted: [L]=SOFTLOCKUP [ 340.468125][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 340.468131][ T9885] Call Trace: [ 340.468136][ T9885] [ 340.468140][ T9885] dump_stack_lvl+0xe8/0x150 [ 340.468157][ T9885] should_fail_ex+0x412/0x560 [ 340.468173][ T9885] should_failslab+0xa8/0x100 [ 340.468185][ T9885] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 340.468201][ T9885] ? __alloc_skb+0x193/0x390 [ 340.468212][ T9885] ? __alloc_skb+0x1d7/0x390 [ 340.468222][ T9885] ? __local_bh_enable_ip+0xd0/0x130 [ 340.468232][ T9885] ? __alloc_skb+0x193/0x390 [ 340.468243][ T9885] __alloc_skb+0x1d7/0x390 [ 340.468256][ T9885] netlink_sendmsg+0x5d4/0xb40 [ 340.468271][ T9885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.468283][ T9885] ? aa_sock_msg_perm+0xf1/0x1b0 [ 340.468296][ T9885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.468307][ T9885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.468317][ T9885] ____sys_sendmsg+0xa68/0xad0 [ 340.468330][ T9885] ? __might_fault+0xaf/0x130 [ 340.468348][ T9885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.468365][ T9885] ? import_iovec+0x73/0xa0 [ 340.468380][ T9885] ___sys_sendmsg+0x2a5/0x360 [ 340.468393][ T9885] ? __lock_acquire+0x6b5/0x2cf0 [ 340.468409][ T9885] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.468437][ T9885] ? __fget_files+0x2a/0x420 [ 340.468448][ T9885] ? __fget_files+0x3a0/0x420 [ 340.468462][ T9885] __x64_sys_sendmsg+0x1bd/0x2a0 [ 340.468476][ T9885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.468494][ T9885] ? __pfx_ksys_write+0x10/0x10 [ 340.468513][ T9885] do_syscall_64+0xe2/0xf80 [ 340.468524][ T9885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.468533][ T9885] ? trace_irq_disable+0x37/0x100 [ 340.468542][ T9885] ? clear_bhb_loop+0x60/0xb0 [ 340.468554][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.468563][ T9885] RIP: 0033:0x7fab7cf9aeb9 [ 340.468573][ T9885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.468582][ T9885] RSP: 002b:00007fab7de4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.468594][ T9885] RAX: ffffffffffffffda RBX: 00007fab7d215fa0 RCX: 00007fab7cf9aeb9 [ 340.468601][ T9885] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 340.468607][ T9885] RBP: 00007fab7de4c090 R08: 0000000000000000 R09: 0000000000000000 [ 340.468613][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.468619][ T9885] R13: 00007fab7d216038 R14: 00007fab7d215fa0 R15: 00007fab7d33fa48 [ 340.468633][ T9885] [ 340.752827][ T5876] usb 5-1: USB disconnect, device number 54 [ 340.915645][ T9888] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 340.977626][ T9894] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 340.986886][ T9888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.987391][ T9894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1108'. [ 341.013870][ T9888] batadv0: entered promiscuous mode [ 341.035652][ T9888] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 341.058665][ T9894] batadv0: entered allmulticast mode [ 341.066779][ T9894] bond0: (slave batadv0): Releasing backup interface [ 341.087755][ T9894] bridge0: port 3(batadv0) entered blocking state [ 341.094432][ T9894] bridge0: port 3(batadv0) entered disabled state [ 341.147302][ T5902] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 341.359816][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 341.369664][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 341.402888][ T5902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.416919][ T5902] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.457869][ T9900] syz_tun: entered promiscuous mode [ 341.463538][ T5902] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 341.475458][ T9900] macsec1: entered allmulticast mode [ 341.480805][ T5902] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 341.480833][ T5902] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.483162][ T5902] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.517634][ T9900] syz_tun: entered allmulticast mode [ 341.534764][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 341.551658][ T9900] syz_tun: left allmulticast mode [ 341.567487][ T9900] syz_tun: left promiscuous mode [ 341.732983][ T5902] usb 1-1: Product: syz [ 341.784633][ T5902] usb 1-1: Manufacturer: syz [ 341.800929][ T5902] usb 1-1: SerialNumber: syz [ 341.806343][ T5924] r8152-cfgselector 2-1: USB disconnect, device number 40 [ 341.830758][ T5902] cdc_mbim 1-1:1.0: skipping garbage [ 342.098703][ T9890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.134928][ T5902] cdc_mbim 1-1:1.0: bind() failure [ 342.185855][ T5902] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 342.234086][ T5902] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 342.276923][ T5902] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 342.396092][ T5902] usb 1-1: USB disconnect, device number 52 [ 342.457870][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 342.637221][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 342.651295][ T24] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 342.674082][ T24] usb 5-1: config 0 has no interface number 0 [ 342.710662][ T24] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 342.738719][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.760754][ T24] usb 5-1: Product: syz [ 342.764517][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 342.764537][ T30] audit: type=1326 audit(1769918556.820:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff14699aeb9 code=0x0 [ 342.856946][ T24] usb 5-1: Manufacturer: syz [ 342.866373][ T24] usb 5-1: SerialNumber: syz [ 342.888175][ T9930] netlink: 'syz.5.1119': attribute type 8 has an invalid length. [ 342.899206][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1119'. [ 342.915223][ T24] usb 5-1: config 0 descriptor?? [ 342.926267][ T24] redrat3 5-1:0.83: Couldn't find all endpoints [ 343.062368][ T9930] bond0: entered promiscuous mode [ 343.068347][ T9930] bond_slave_0: entered promiscuous mode [ 343.133972][ T9930] bond_slave_1: entered promiscuous mode [ 343.163752][ T9930] gretap0: entered promiscuous mode [ 343.170179][ T9930] veth0_to_team: entered promiscuous mode [ 343.176908][ T9930] debugfs: 'hsr1' already exists in 'hsr' [ 343.184304][ T9930] Cannot create hsr debugfs directory [ 343.198590][ T9930] hsr1: entered promiscuous mode [ 343.437599][ T5902] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 343.627210][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 343.664287][ T9907] delete_channel: no stack [ 343.709817][ T5924] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 343.739250][ T9] usb 5-1: USB disconnect, device number 55 [ 343.903871][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 343.922555][ T5902] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 343.931340][ T5902] usb 2-1: config 7 has no interface number 0 [ 343.942480][ T5924] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 343.955655][ T5924] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 343.980847][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 344.001903][ T5924] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.047069][ T5902] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 344.059352][ T5924] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 344.070864][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 344.092879][ T5924] usb 1-1: Product: syz [ 344.095860][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.162630][ T5924] usb 1-1: Manufacturer: syz [ 344.170634][ T5902] usb 2-1: Product: syz [ 344.175020][ T5902] usb 2-1: Manufacturer: syz [ 344.194299][ T5924] cdc_wdm 1-1:1.0: skipping garbage [ 344.202895][ T5924] cdc_wdm 1-1:1.0: skipping garbage [ 344.208300][ T5924] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 344.229716][ T5902] usb 2-1: SerialNumber: syz [ 344.295940][ T30] audit: type=1326 audit(1769918558.360:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9954 comm="syz.3.1125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab7cf9aeb9 code=0x0 [ 344.391928][ T9952] picdev_read: 4 callbacks suppressed [ 344.391942][ T9952] kvm: pic: non byte read [ 344.484947][ T5905] usb 1-1: USB disconnect, device number 53 [ 344.497821][ T9952] kvm: pic: non byte read [ 344.504672][ T9952] kvm: pic: non byte read [ 344.509736][ T9952] kvm: pic: non byte read [ 344.516186][ T9952] kvm: pic: non byte read [ 344.521216][ T9952] kvm: pic: non byte read [ 344.526454][ T9952] kvm: pic: non byte read [ 344.531592][ T9952] kvm: pic: non byte read [ 344.536512][ T9952] kvm: pic: non byte read [ 344.541448][ T9952] kvm: pic: non byte read [ 344.611999][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.644490][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 344.655760][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.123822][ T9969] netlink: 'syz.4.1129': attribute type 30 has an invalid length. [ 345.242106][ T30] audit: type=1326 audit(1769918559.300:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.3.1130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab7cf9aeb9 code=0x0 [ 345.400487][ T5905] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 345.631071][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.648774][ T5905] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 345.672374][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.914060][ T5905] usb 1-1: config 0 descriptor?? [ 345.925898][ T9976] syzkaller0: entered promiscuous mode [ 345.933460][ T9976] syzkaller0: entered allmulticast mode [ 346.049797][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 346.484514][ T5902] usb 2-1: USB disconnect, device number 41 [ 346.510948][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 346.518375][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 346.529357][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 346.635022][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 346.645218][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 346.652697][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 346.659994][ T5905] pwc: recv_control_msg error -32 req 02 val 2000 [ 346.667762][ T9983] vivid-000: ================= START STATUS ================= [ 346.675783][ T9983] vivid-000: Test Pattern: 75% Colorbar [ 346.682818][ T5905] pwc: recv_control_msg error -32 req 02 val 2100 [ 346.689482][ T9983] vivid-000: Fill Percentage of Frame: 100 [ 346.698711][ T9983] vivid-000: Horizontal Movement: No Movement [ 346.713798][ T9983] vivid-000: Vertical Movement: No Movement [ 346.728083][ T9983] vivid-000: OSD Text Mode: All [ 346.738143][ T9984] trusted_key: encrypted_key: keylen parameter is missing [ 346.757290][ T9983] vivid-000: Show Border: false [ 346.762232][ T9983] vivid-000: Show Square: false [ 346.801920][ T9983] vivid-000: Sensor Flipped Horizontally: false [ 346.814981][ T9983] vivid-000: Sensor Flipped Vertically: false [ 346.868166][ T9983] vivid-000: Insert SAV Code in Image: false [ 346.874217][ T9983] vivid-000: Insert EAV Code in Image: false [ 346.895212][ T9983] vivid-000: Insert Video Guard Band: false [ 346.902908][ T9983] vivid-000: Reduced Framerate: false [ 346.908576][ T9983] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 346.917835][ T9983] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 346.934651][ T9983] vivid-000: Enable Capture Cropping: true [ 346.997912][ T9983] vivid-000: Enable Capture Composing: true [ 347.018161][ T9983] vivid-000: Enable Capture Scaler: true [ 347.024016][ T9983] vivid-000: Timestamp Source: End of Frame [ 347.046290][ T9983] vivid-000: Colorspace: sRGB [ 347.051285][ T9983] vivid-000: Transfer Function: Default [ 347.056972][ T9983] vivid-000: Y'CbCr Encoding: Default [ 347.067729][ T9988] loop2: detected capacity change from 0 to 7 [ 347.074942][ T9983] vivid-000: HSV Encoding: Hue 0-179 [ 347.081237][ T9983] vivid-000: Quantization: Default [ 347.096004][ T9983] vivid-000: Apply Alpha To Red Only: false [ 347.096150][ T9988] Dev loop2: unable to read RDB block 7 [ 347.102341][ T9983] vivid-000: Standard Aspect Ratio: 4x3 [ 347.121106][ T9988] loop2: unable to read partition table [ 347.125687][ T9983] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 347.204458][ T9983] vivid-000: DV Timings: 640x480p59 inactive [ 347.213387][ T9988] loop2: partition table beyond EOD, truncated [ 347.285737][ T9988] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 347.297772][ T9983] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 347.305574][ T9983] vivid-000: Maximum EDID Blocks: 2 [ 347.311315][ T9983] vivid-000: Limited RGB Range (16-235): false [ 347.375455][ T9983] vivid-000: Rx RGB Quantization Range: Automatic [ 347.398568][ T9983] vivid-000: Power Present: 0x00000001 [ 347.440405][ T9983] tpg source WxH: 320x180 (Y'CbCr) [ 347.505777][ T9983] tpg field: 1 [ 347.519318][ T5194] Dev loop2: unable to read RDB block 7 [ 347.558913][ T5194] loop2: unable to read partition table [ 347.565176][ T5194] loop2: partition table beyond EOD, truncated [ 347.575907][ T9983] tpg crop: (0,0)/320x180 [ 347.590330][ T9983] tpg compose: (0,0)/320x180 [ 347.595026][ T9983] tpg colorspace: 8 [ 347.615495][ T9983] tpg transfer function: 0/0 [ 347.642102][ T9983] tpg Y'CbCr encoding: 0/0 [ 347.646711][ T9983] tpg quantization: 0/0 [ 347.659286][ T9983] tpg RGB range: 0/2 [ 347.663777][ T9983] vivid-000: ================== END STATUS ================== [ 348.298725][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 350.047659][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 350.094692][ T5905] pwc: recv_control_msg error -71 req 02 val 2500 [ 350.105102][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 350.118357][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 350.141087][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 350.165244][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 350.223680][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 350.259098][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 350.285609][ T5905] pwc: Registered as video103. [ 350.321692][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 350.336614][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.439871][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.441048][ T5905] usb 1-1: USB disconnect, device number 54 [ 350.787717][T10017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 352.787215][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 353.216304][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.251401][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.357226][ T5924] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 353.519799][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 353.539086][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.549917][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.583518][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.594156][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.602985][ T5924] usb 1-1: Product: syz [ 353.608398][ T5924] usb 1-1: Manufacturer: syz [ 353.613151][ T5924] usb 1-1: SerialNumber: syz [ 353.841949][ T5924] usb 1-1: 0:2 : does not exist [ 353.875148][ T5924] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 353.924093][ T5924] usb 1-1: USB disconnect, device number 55 [ 354.003651][ T6190] udevd[6190]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.007388][ T5902] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 354.102004][T10071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.135709][T10071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.217239][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 354.231733][ T5902] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 354.253694][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.280880][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.302362][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.317251][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.335511][ T5902] usb 5-1: Product: syz [ 354.345665][ T5902] usb 5-1: Manufacturer: syz [ 354.355794][ T5902] usb 5-1: SerialNumber: syz [ 354.581291][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1157'. [ 354.647360][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.677739][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.720512][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.729660][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.818632][ T5902] usb 5-1: 0:2 : does not exist [ 354.893108][T10098] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 354.959207][T10098] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 354.966893][T10098] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 354.988884][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.008120][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.036404][ T5902] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 355.100804][ T5902] usb 5-1: USB disconnect, device number 56 [ 355.127795][T10098] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 355.137865][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 355.169833][ T6190] udevd[6190]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.319451][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 355.328455][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 355.344712][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 355.364055][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.395550][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 355.406090][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 355.414327][ T9] usb 6-1: Product: syz [ 355.418953][ T9] usb 6-1: Manufacturer: syz [ 355.438593][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 355.476123][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 355.503007][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 355.536202][ T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 355.647696][ T9] usb 6-1: USB disconnect, device number 4 [ 355.887254][ T5924] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 355.907340][ T5902] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 355.928897][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.958410][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.979487][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 356.037421][ T5902] usb 1-1: device descriptor read/64, error -71 [ 356.038272][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 356.051083][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.062944][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 356.074355][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.085888][ T5924] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 356.096787][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.111533][ T5924] usb 5-1: config 0 descriptor?? [ 356.128289][T10114] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 356.148239][ T5924] hub 5-1:0.0: USB hub found [ 356.290322][ T5902] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 356.341606][ T5924] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 356.363309][ T5924] usbhid 5-1:0.0: can't add hid device: -71 [ 356.388087][ T5924] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 356.441446][ T5924] usb 5-1: USB disconnect, device number 57 [ 356.442081][ T5902] usb 1-1: device descriptor read/64, error -71 [ 356.567230][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 356.575231][ T5902] usb usb1-port1: attempt power cycle [ 356.743629][ T24] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 356.760326][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.770761][ T24] usb 6-1: config 0 descriptor?? [ 356.939472][ T5902] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 356.968190][ T5902] usb 1-1: device descriptor read/8, error -71 [ 356.985104][ T24] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 357.257339][ T5902] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 357.277791][ T5902] usb 1-1: device descriptor read/8, error -71 [ 357.391552][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 357.397246][ T5924] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 357.417612][ T5902] usb usb1-port1: unable to enumerate USB device [ 357.657585][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 357.672402][ T5924] usb 5-1: config 0 has no interfaces? [ 357.690916][ T5924] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 357.706800][ T5924] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 357.715907][ T5924] usb 5-1: Manufacturer: syz [ 357.841597][ T5924] usb 5-1: config 0 descriptor?? [ 359.071544][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.099291][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.279359][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 359.426677][ T24] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 359.436475][ T24] [drm] Initialized udl on minor 2 [ 359.508865][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 359.533804][ T24] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 359.543109][ T5905] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 359.572166][ T24] usb 6-1: USB disconnect, device number 5 [ 359.578672][ T5905] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 359.605289][ T5905] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 359.925836][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1189'. [ 360.002845][ T24] usb 5-1: USB disconnect, device number 58 [ 360.124444][T10177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.124513][T10177] IPv6: NLM_F_CREATE should be set when creating new route [ 360.124596][T10177] IPv6: NLM_F_CREATE should be set when creating new route [ 360.124627][T10177] IPv6: NLM_F_CREATE should be set when creating new route [ 360.437379][ T5924] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 360.577379][ T5924] usb 1-1: device descriptor read/64, error -71 [ 360.847397][ T5924] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 361.213554][ T30] audit: type=1326 audit(1769918575.200:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 361.337283][ T30] audit: type=1326 audit(1769918575.200:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 361.404119][ T5924] usb 1-1: device descriptor read/64, error -71 [ 361.411106][ T30] audit: type=1326 audit(1769918575.200:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 361.490367][ T30] audit: type=1326 audit(1769918575.550:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 361.566931][ T5924] usb usb1-port1: attempt power cycle [ 361.627247][ T30] audit: type=1326 audit(1769918575.550:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 361.651486][T10207] syz_tun: entered allmulticast mode [ 361.658373][ T30] audit: type=1326 audit(1769918575.620:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab7cf5b78e code=0x7ffc0000 [ 361.697448][ T30] audit: type=1326 audit(1769918575.620:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 361.937241][ T5924] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 361.957267][ T5902] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 362.005876][ T5924] usb 1-1: device descriptor read/8, error -71 [ 362.043340][ T30] audit: type=1326 audit(1769918575.620:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 362.149715][ T30] audit: type=1326 audit(1769918575.630:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 362.152313][ T5902] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 362.173876][ T30] audit: type=1326 audit(1769918575.630:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 362.277531][ T5924] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 362.318062][ T5924] usb 1-1: device descriptor read/8, error -71 [ 362.324483][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.341981][ T5902] usb 6-1: Product: syz [ 362.387490][ T5902] usb 6-1: Manufacturer: syz [ 362.392106][ T5902] usb 6-1: SerialNumber: syz [ 362.427798][ T5924] usb usb1-port1: unable to enumerate USB device [ 362.724306][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.735536][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.839385][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 362.857470][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 363.127202][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 363.341119][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.353504][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.363472][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.385811][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.430968][T10226] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 363.485268][T10226] team0: Port device batadv1 added [ 363.503270][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 363.527649][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 363.647932][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 363.661151][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.678598][ T24] usb 2-1: config 0 descriptor?? [ 363.699048][ T5902] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 364.559340][T10234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.574817][T10234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.753333][T10245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.763014][T10245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.515480][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 365.647246][ T5924] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 365.885895][ T5902] usb 6-1: USB disconnect, device number 6 [ 366.029420][ T5924] usb 1-1: device descriptor read/64, error -71 [ 366.151114][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 366.475449][ T5924] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 366.527268][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 366.534301][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 366.565811][ T24] usb 2-1: USB disconnect, device number 42 [ 366.647381][ T5924] usb 1-1: device descriptor read/64, error -71 [ 366.652950][T10268] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 366.732778][T10268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.841688][T10268] bond1: (slave geneve2): making interface the new active one [ 366.847658][ T5924] usb usb1-port1: attempt power cycle [ 366.853098][T10268] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 366.887316][T10276] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1214'. [ 366.909322][T10268] syz.4.1212 (10268) used greatest stack depth: 18368 bytes left [ 366.997245][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 367.149766][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.158927][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 367.186329][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.197230][ T5924] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 367.212445][ T24] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 367.232816][ T5924] usb 1-1: device descriptor read/8, error -71 [ 367.260274][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 367.330159][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.339759][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.356597][ T24] usb 2-1: Product: syz [ 367.365564][ T24] usb 2-1: Manufacturer: syz [ 367.400278][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 367.417434][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 367.429692][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 367.477247][ T5924] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 367.513471][ T5924] usb 1-1: device descriptor read/8, error -71 [ 367.683509][ T5924] usb usb1-port1: unable to enumerate USB device [ 367.688621][ T24] usb 2-1: USB disconnect, device number 43 [ 368.032417][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.147631][T10288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.182777][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.235499][T10288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.655269][T10304] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.015274][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.044355][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.171860][T10318] bond0: option all_slaves_active: invalid value (6) [ 369.187337][ T5883] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 369.508655][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.541038][ T5883] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.582514][ T5883] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.618428][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.653224][ T5883] usb 6-1: SerialNumber: syz [ 369.746632][T10324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 370.171047][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.213015][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.329416][ T5876] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 370.497282][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 370.509079][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.519573][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 370.535305][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 370.560380][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 370.583927][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 370.606058][ T5876] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 370.635725][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 370.723137][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.792455][ T5876] hub 5-1:1.0: bad descriptor, ignoring hub [ 370.812055][ T5876] hub 5-1:1.0: probe with driver hub failed with error -5 [ 370.831052][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 370.845421][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 370.888387][ T5876] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 371.167559][ T24] usb 5-1: USB disconnect, device number 59 [ 371.167587][ T5876] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 371.347520][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 371.522163][ T5876] usb 1-1: unable to get BOS descriptor or descriptor too short [ 371.564324][ T5876] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 371.581059][ T5876] usb 1-1: config 8 has an invalid interface number: 242 but max is 1 [ 371.596607][ T5876] usb 1-1: config 8 has no interface number 0 [ 371.606620][ T5876] usb 1-1: config 8 has no interface number 1 [ 371.616899][ T5876] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 371.633049][ T5876] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 371.672335][ T5876] usb 1-1: config 8 interface 24 has no altsetting 0 [ 371.682455][ T5876] usb 1-1: config 8 interface 242 has no altsetting 0 [ 371.770900][ T5876] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 371.782870][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.791603][ T5876] usb 1-1: Product: syz [ 371.796023][ T5876] usb 1-1: Manufacturer: syz [ 371.801424][ T5876] usb 1-1: SerialNumber: syz [ 371.819729][T10375] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 371.878219][ T5883] usb 6-1: 0:2 : does not exist [ 371.921971][ T5883] usb 6-1: unit 5: unexpected type 0x09 [ 372.013514][ T5883] usb 6-1: USB disconnect, device number 7 [ 372.075060][ T5876] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 372.342243][ T5876] vmk80xx 1-1:8.242: driver 'vmk80xx' failed to auto-configure device. [ 372.351476][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.416239][ T5876] usb 1-1: USB disconnect, device number 68 [ 372.595642][T10411] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1244'. [ 372.687288][ T5883] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 372.730672][T10417] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 372.739784][T10417] batadv0: left allmulticast mode [ 372.744885][T10417] batadv0: left promiscuous mode [ 372.750625][T10417] bridge0: port 3(batadv0) entered disabled state [ 372.765966][T10417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.792936][T10417] batadv0: entered promiscuous mode [ 372.799820][T10417] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 372.810408][ T5876] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 372.860064][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.884931][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.901930][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 372.919786][ T5883] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 372.931740][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.956622][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1250'. [ 372.966644][ T5883] usb 6-1: config 0 descriptor?? [ 373.001553][ T5876] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.014649][ T5876] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 373.048720][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.077517][T10426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 373.087887][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 373.119726][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 373.155698][ T5876] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.179109][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.187487][ T5876] usb 2-1: Product: syz [ 373.191798][ T5876] usb 2-1: Manufacturer: syz [ 373.210398][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 373.218052][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 373.226246][ T5876] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 373.234575][ T5876] cdc_wdm 2-1:1.0: Unknown control protocol [ 373.291698][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 373.291716][ T30] audit: type=1800 audit(1769918587.360:1253): pid=10437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1253" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=36458 res=0 errno=0 [ 373.389697][ T5883] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 373.413261][T10409] FAULT_INJECTION: forcing a failure. [ 373.413261][T10409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.430817][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.1.1243 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.430846][T10409] Tainted: [L]=SOFTLOCKUP [ 373.430852][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 373.430866][T10409] Call Trace: [ 373.430875][T10409] [ 373.430882][T10409] dump_stack_lvl+0xe8/0x150 [ 373.430907][T10409] should_fail_ex+0x412/0x560 [ 373.430931][T10409] _copy_to_user+0x31/0xb0 [ 373.430956][T10409] simple_read_from_buffer+0xe1/0x170 [ 373.430978][T10409] proc_fail_nth_read+0x1bb/0x230 [ 373.431004][T10409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.431027][T10409] ? rw_verify_area+0x2a6/0x4d0 [ 373.431048][T10409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.431071][T10409] vfs_read+0x20c/0xa70 [ 373.431090][T10409] ? fdget_pos+0x246/0x320 [ 373.431113][T10409] ? __pfx___mutex_lock+0x10/0x10 [ 373.431132][T10409] ? __pfx_vfs_read+0x10/0x10 [ 373.431156][T10409] ? __fget_files+0x2a/0x420 [ 373.431177][T10409] ? __fget_files+0x3a0/0x420 [ 373.431194][T10409] ? __fget_files+0x2a/0x420 [ 373.431218][T10409] ksys_read+0x150/0x270 [ 373.431237][T10409] ? __fget_files+0x2a/0x420 [ 373.431256][T10409] ? __pfx_ksys_read+0x10/0x10 [ 373.431288][T10409] do_syscall_64+0xe2/0xf80 [ 373.431312][T10409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.431328][T10409] ? trace_irq_disable+0x37/0x100 [ 373.431344][T10409] ? clear_bhb_loop+0x60/0xb0 [ 373.431363][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.431382][T10409] RIP: 0033:0x7ff14695b78e [ 373.431399][T10409] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 373.431412][T10409] RSP: 002b:00007ff1478eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.431431][T10409] RAX: ffffffffffffffda RBX: 00007ff1478eb6c0 RCX: 00007ff14695b78e [ 373.431443][T10409] RDX: 000000000000000f RSI: 00007ff1478eb0a0 RDI: 0000000000000005 [ 373.431453][T10409] RBP: 00007ff1478eb090 R08: 0000000000000000 R09: 0000000000000000 [ 373.431462][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.431471][T10409] R13: 00007ff146c16038 R14: 00007ff146c15fa0 R15: 00007ff146d3fa48 [ 373.431495][T10409] [ 373.666147][T10406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.675749][T10406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.684094][ T5876] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 373.733760][ T5902] usb 2-1: USB disconnect, device number 44 [ 373.839153][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.850451][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.861491][ T5876] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 373.870657][ T5876] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 373.878851][ T5876] usb 5-1: Manufacturer: syz [ 373.885083][ T5876] usb 5-1: config 0 descriptor?? [ 374.224187][ T5876] usbhid 5-1:0.0: can't add hid device: -71 [ 374.249256][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 374.269450][ T5876] usb 5-1: USB disconnect, device number 60 [ 374.501406][T10458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.518026][T10458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.116517][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 375.314971][ T5902] usb 6-1: USB disconnect, device number 8 [ 375.797330][ T5902] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 375.953246][ T5902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 375.953278][ T5902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 375.968250][ T5902] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 375.968280][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.968299][ T5902] usb 6-1: Product: syz [ 375.968313][ T5902] usb 6-1: Manufacturer: syz [ 375.968328][ T5902] usb 6-1: SerialNumber: syz [ 375.973429][ T5902] usb 6-1: config 0 descriptor?? [ 375.974062][T10472] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 375.974165][T10472] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 376.137746][ T30] audit: type=1326 audit(1769918590.210:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.4.1269" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1449d9aeb9 code=0x0 [ 376.243205][T10486] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1269'. [ 376.327239][ T9] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 376.477356][ T5876] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 376.479352][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.479389][ T9] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 376.479412][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.481575][ T9] usb 1-1: config 0 descriptor?? [ 376.631618][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 376.634459][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.647510][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 376.661213][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 376.661272][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 376.661322][ T5876] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 376.661420][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.784379][ T5876] hub 2-1:1.0: bad descriptor, ignoring hub [ 376.784403][ T5876] hub 2-1:1.0: probe with driver hub failed with error -5 [ 376.785153][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 376.785173][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 376.806812][ T5876] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 376.806830][ T5876] cdc_wdm 2-1:1.0: Unknown control protocol [ 376.928131][ T9] waltop 0003:172F:0037.0010: collection stack underflow [ 376.928168][ T9] waltop 0003:172F:0037.0010: item 0 1 0 12 parsing failed [ 376.929415][ T9] waltop 0003:172F:0037.0010: probe with driver waltop failed with error -22 [ 376.988785][ T24] usb 1-1: USB disconnect, device number 69 [ 377.038405][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 377.962599][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 377.962655][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 377.962682][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 377.962706][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 377.962729][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 377.962745][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 377.962759][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 377.962774][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 377.962794][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 377.962820][ T9] hid-generic 0000:0000:0004.0011: unknown main item tag 0x0 [ 378.005276][ T9] hid-generic 0000:0000:0004.0011: hidraw0: HID v0.03 Device [syz1] on syz0 [ 378.306305][T10517] fido_id[10517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 378.428410][T10523] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 378.452110][ T5902] dm9601 6-1:0.0: probe with driver dm9601 failed with error -71 [ 378.513645][ T5902] usb 6-1: USB disconnect, device number 9 [ 378.799271][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.805591][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.180046][ T9] usb 2-1: USB disconnect, device number 45 [ 379.553854][T10549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1283'. [ 379.725568][T10553] loop2: detected capacity change from 0 to 7 [ 379.735232][T10553] Dev loop2: unable to read RDB block 7 [ 379.841860][T10553] loop2: unable to read partition table [ 379.864047][T10553] loop2: partition table beyond EOD, truncated [ 379.911143][T10553] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 380.423630][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 380.530972][T10562] netlink: 'syz.1.1288': attribute type 21 has an invalid length. [ 380.583639][T10562] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 380.615949][T10562] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1288'. [ 380.634998][ T30] audit: type=1326 audit(1769918594.700:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577b79aeb9 code=0x7ffc0000 [ 380.703604][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 380.705616][ T30] audit: type=1326 audit(1769918594.710:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577b79aeb9 code=0x7ffc0000 [ 380.848633][T10562] netlink: set zone limit has 4 unknown bytes [ 380.870118][ T30] audit: type=1326 audit(1769918594.710:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f577b79aeb9 code=0x7ffc0000 [ 380.964219][ T30] audit: type=1326 audit(1769918594.710:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577b79aeb9 code=0x7ffc0000 [ 381.222597][ T30] audit: type=1326 audit(1769918594.720:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577b79aeb9 code=0x7ffc0000 [ 381.264719][T10585] netlink: 'syz.4.1292': attribute type 61 has an invalid length. [ 381.497399][T10592] netlink: 'syz.4.1292': attribute type 13 has an invalid length. [ 381.627707][ T30] audit: type=1326 audit(1769918594.720:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f577b79aeb9 code=0x7ffc0000 [ 381.777261][ T30] audit: type=1326 audit(1769918594.720:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577b79aeb9 code=0x7ffc0000 [ 381.915323][ T30] audit: type=1326 audit(1769918594.720:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.5.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577b79aeb9 code=0x7ffc0000 [ 381.998167][ T5902] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 382.137450][ T5902] usb 2-1: device descriptor read/64, error -71 [ 382.378049][ T5902] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 382.519339][ T5902] usb 2-1: device descriptor read/64, error -71 [ 382.533797][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 382.546002][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 382.590260][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 382.627928][ T5902] usb usb2-port1: attempt power cycle [ 382.747460][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 382.754778][ T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 382.763324][ T24] usb 6-1: config 0 has no interface number 0 [ 382.773274][ T24] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 382.789203][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 382.800895][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 382.813451][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 382.823054][ T24] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 382.831372][ T24] usb 6-1: Product: syz [ 382.835948][ T24] usb 6-1: SerialNumber: syz [ 382.844312][ T24] usb 6-1: config 0 descriptor?? [ 382.849505][ T5890] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 382.863903][ T24] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 382.977341][T10627] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 382.987298][ T5890] usb 1-1: device descriptor read/64, error -71 [ 382.994042][ T5902] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 383.028398][ T5902] usb 2-1: device descriptor read/8, error -71 [ 383.064423][ T9] usb 6-1: USB disconnect, device number 10 [ 383.237324][ T5890] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 383.267924][ T5902] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 383.287964][ T5902] usb 2-1: device descriptor read/8, error -71 [ 383.367267][ T5890] usb 1-1: device descriptor read/64, error -71 [ 383.397474][ T5902] usb usb2-port1: unable to enumerate USB device [ 383.485679][ T5890] usb usb1-port1: attempt power cycle [ 383.550185][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.560465][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.827206][ T5890] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 383.857804][ T5890] usb 1-1: device descriptor read/8, error -71 [ 384.108327][ T5890] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 384.137830][ T5890] usb 1-1: device descriptor read/8, error -71 [ 384.282838][ T5890] usb usb1-port1: unable to enumerate USB device [ 384.428537][T10644] kvm: emulating exchange as write [ 384.598357][T10647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.843021][T10653] loop8: detected capacity change from 0 to 524287999 [ 384.956766][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 384.984436][ T6190] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 385.926221][T10663] loop2: detected capacity change from 0 to 7 [ 385.955674][T10663] Dev loop2: unable to read RDB block 7 [ 385.987222][T10663] loop2: unable to read partition table [ 385.993143][T10663] loop2: partition table beyond EOD, truncated [ 386.046222][T10663] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 386.081656][ T5194] Dev loop2: unable to read RDB block 7 [ 386.096957][ T5194] loop2: unable to read partition table [ 386.103878][ T5194] loop2: partition table beyond EOD, truncated [ 387.607210][ T5890] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 387.767222][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 387.784909][ T5890] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.816661][ T5890] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.888747][ T5902] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 387.905643][ T5890] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 387.987797][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.057597][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 388.074382][ T5902] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 388.113365][ T5902] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 388.123955][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.137865][ T5902] usb 5-1: Product: syz [ 388.150734][ T5902] usb 5-1: Manufacturer: syz [ 388.168738][ T5902] usb 5-1: SerialNumber: syz [ 388.187504][T10711] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 388.199309][ T5902] usb 5-1: config 0 descriptor?? [ 388.223671][ T5902] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 388.243327][ T5902] usb 5-1: setting power ON [ 388.254956][ T5902] dvb-usb: bulk message failed: -22 (2/0) [ 388.283702][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.303251][ T5902] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 388.312176][ T5902] usb 5-1: media controller created [ 388.352580][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.413174][ T5902] usb 5-1: selecting invalid altsetting 6 [ 388.435741][ T5902] usb 5-1: digital interface selection failed (-22) [ 388.443100][ T5902] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 388.445016][T10708] syzkaller0: entered promiscuous mode [ 388.452896][ T5902] usb 5-1: setting power OFF [ 388.467890][ T5902] dvb-usb: bulk message failed: -22 (2/0) [ 388.478510][T10708] syzkaller0: entered allmulticast mode [ 388.500196][ T5902] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 388.514715][ T5890] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 388.537382][ T5902] (NULL device *): no alternate interface [ 388.584945][ T5902] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 388.744866][T10703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.766360][T10703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.777544][ T9] usb 5-1: USB disconnect, device number 61 [ 388.784845][ T5902] usb 2-1: USB disconnect, device number 50 [ 388.935120][T10718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.947685][T10718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.963815][T10718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.974689][T10718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.986101][T10718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.038022][ T5890] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 389.197241][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 389.204432][ T5890] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 389.213049][ T5890] usb 1-1: config 0 has no interface number 0 [ 389.219205][ T5890] usb 1-1: config 0 interface 209 has no altsetting 0 [ 389.228050][ T5890] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 389.237251][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.245246][ T5890] usb 1-1: Product: syz [ 389.249498][ T5890] usb 1-1: Manufacturer: syz [ 389.254098][ T5890] usb 1-1: SerialNumber: syz [ 389.263009][ T5890] usb 1-1: config 0 descriptor?? [ 389.484749][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 389.643531][ T5890] usb 1-1: USB disconnect, device number 74 [ 389.734018][T10733] loop2: detected capacity change from 0 to 7 [ 389.741193][T10733] Dev loop2: unable to read RDB block 7 [ 389.747288][T10733] loop2: unable to read partition table [ 389.753798][T10733] loop2: partition table beyond EOD, truncated [ 389.776785][T10733] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 389.805854][ T5194] Dev loop2: unable to read RDB block 7 [ 389.811968][ T5194] loop2: unable to read partition table [ 389.840161][ T5194] loop2: partition table beyond EOD, truncated [ 390.147216][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 390.514915][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 390.585020][T10744] bond1: option primary_reselect: invalid value (13) [ 390.636769][T10744] bond1 (unregistering): Released all slaves [ 390.702781][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'. [ 391.308890][T10774] netlink: 'syz.1.1345': attribute type 27 has an invalid length. [ 391.757203][ T5890] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 391.859622][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.867029][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.065328][T10774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.072927][ T5883] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 392.085408][T10774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.224236][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 392.235282][ T5890] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 392.243638][ T5890] usb 2-1: config 0 has no interface number 0 [ 392.288231][ T5890] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 392.334817][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.351163][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 392.355833][ T5890] usb 2-1: Product: syz [ 392.368308][ T5890] usb 2-1: Manufacturer: syz [ 392.369044][ T5883] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 392.372958][ T5890] usb 2-1: SerialNumber: syz [ 392.394627][ T5883] usb 5-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 392.398980][ T5890] usb 2-1: config 0 descriptor?? [ 392.423654][T10774] hsr1: left promiscuous mode [ 392.505637][T10775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.520453][T10775] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.550444][ T5897] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 392.566953][ T5890] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 392.580499][T10775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.649146][ T5883] usb 5-1: config 0 has no interface number 0 [ 392.665824][ T5883] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has an invalid bInterval 30, changing to 7 [ 392.678950][ T5883] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 17395, setting to 1024 [ 392.690514][ T5883] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.704353][ T5883] usb 5-1: config 0 interface 184 has no altsetting 0 [ 392.721515][T10348] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.722438][ T5897] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 392.731018][T10348] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.750230][T10348] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.752964][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.759517][T10348] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.787742][ T5883] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 392.800173][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.809723][ T5883] usb 5-1: Product: syz [ 392.814010][ T5883] usb 5-1: Manufacturer: syz [ 392.861058][ T5897] usb 1-1: config 0 has no interface number 0 [ 392.872461][ T5897] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 392.883571][ T5883] usb 5-1: SerialNumber: syz [ 392.887008][ T5897] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.910921][ T5883] usb 5-1: config 0 descriptor?? [ 392.918020][ T5897] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 392.940682][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.966882][ T5897] usb 1-1: Product: syz [ 392.971647][ T5897] usb 1-1: Manufacturer: syz [ 392.974469][ T5883] smsc75xx v1.0.0 [ 392.976386][ T5897] usb 1-1: SerialNumber: syz [ 392.996271][ T5883] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 392.998643][ T5897] usb 1-1: config 0 descriptor?? [ 393.054070][ T5883] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 393.106906][ T5890] gspca_spca1528: reg_w err -110 [ 393.126361][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1349'. [ 393.135861][ T5890] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 393.481802][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 393.625297][T10753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.635968][T10753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.645404][ T5897] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 393.660052][ T5897] usb 1-1: USB disconnect, device number 75 [ 394.349907][ T5876] usb 2-1: USB disconnect, device number 51 [ 394.950686][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1361'. [ 395.125781][T10830] macvlan0: entered allmulticast mode [ 395.212420][T10841] macvlan0 (unregistering): left allmulticast mode [ 395.290866][T10830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.319544][T10830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.497271][ T5905] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 395.564537][ T5924] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 395.697541][ T5905] usb 2-1: device descriptor read/64, error -71 [ 395.777273][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 395.784004][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.799784][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.840404][ T5924] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 395.861037][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.887071][ T5924] usb 6-1: config 0 descriptor?? [ 395.902103][ T5924] hub 6-1:0.0: USB hub found [ 395.937294][ T5905] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 396.087334][ T5905] usb 2-1: device descriptor read/64, error -71 [ 396.101401][ T5924] hub 6-1:0.0: 1 port detected [ 396.201074][ T5890] usb 5-1: USB disconnect, device number 62 [ 396.210267][ T5905] usb usb2-port1: attempt power cycle [ 396.587563][ T5905] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 396.618058][ T5905] usb 2-1: device descriptor read/8, error -71 [ 396.877378][ T5905] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 396.931061][ T5905] usb 2-1: device descriptor read/8, error -71 [ 397.057013][T10859] loop7: detected capacity change from 0 to 7 [ 397.075806][ T5905] usb usb2-port1: unable to enumerate USB device [ 397.111799][ T5924] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 397.121996][ T5924] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 397.150972][ T5924] usbhid 6-1:0.0: can't add hid device: -32 [ 397.157370][ T5924] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 397.239478][T10861] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 397.247227][T10861] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 397.338557][T10865] netlink: 'syz.3.1368': attribute type 1 has an invalid length. [ 397.381602][T10859] Dev loop7: unable to read RDB block 7 [ 397.388620][T10859] loop7: unable to read partition table [ 397.394506][T10865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.396074][T10859] loop7: partition table beyond EOD, truncated [ 397.411428][T10859] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 397.537517][ T5897] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 397.540243][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.566565][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.598726][ T5905] usb 6-1: USB disconnect, device number 11 [ 397.723924][ T5897] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 397.744499][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.759907][ T5897] usb 1-1: Product: syz [ 397.764919][ T5897] usb 1-1: Manufacturer: syz [ 397.770400][ T5897] usb 1-1: SerialNumber: syz [ 397.795278][ T5897] usb 1-1: config 0 descriptor?? [ 398.009288][ T5897] mos7840 1-1:0.0: required endpoints missing [ 398.032020][ T5897] usb 1-1: USB disconnect, device number 76 [ 398.071915][ T5905] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 398.227861][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1378'. [ 398.242540][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 398.258539][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.277213][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.297243][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 398.316609][ T5905] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 398.342935][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.360179][T10907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1382'. [ 398.382768][ T5905] usb 5-1: config 0 descriptor?? [ 398.411820][T10907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1382'. [ 398.761076][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1388'. [ 398.778228][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 398.875246][ T5905] apple 0003:05AC:027A.0013: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 398.883679][T10925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.914938][T10936] netlink: 'syz.0.1387': attribute type 10 has an invalid length. [ 398.962257][T10936] team0: Port device netdevsim0 added [ 398.994836][T10938] netlink: 'syz.0.1387': attribute type 10 has an invalid length. [ 399.023752][T10938] team0: Port device netdevsim0 removed [ 399.050042][T10938] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 399.065698][T10938] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 399.100260][T10925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.207533][ T5924] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 399.367188][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 399.374197][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.386320][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.396812][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 399.406493][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.423840][ T5924] usb 2-1: config 0 descriptor?? [ 399.437910][ T5924] hub 2-1:0.0: USB hub found [ 399.635838][ T5924] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 399.839627][ T5924] usbhid 2-1:0.0: can't add hid device: -71 [ 399.846043][ T5924] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 399.889839][ T5924] usb 2-1: USB disconnect, device number 56 [ 400.227558][ T5924] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 400.237860][ T9] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 400.392801][T10954] netlink: 'syz.1.1398': attribute type 29 has an invalid length. [ 400.401692][T10954] netlink: 'syz.1.1398': attribute type 29 has an invalid length. [ 400.409460][ T5924] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.423767][ T5924] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 400.435454][ T5924] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.448933][ T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.467785][ T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.487177][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 400.494009][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 400.504201][ T5924] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 400.514075][ T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 400.526767][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.536240][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.557541][ T9] usb 1-1: config 0 descriptor?? [ 400.563710][ T5924] usb 6-1: config 0 descriptor?? [ 400.570798][ T30] audit: type=1326 audit(1769918614.640:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.577944][T10948] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 400.605041][ T30] audit: type=1326 audit(1769918614.670:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.627988][ T30] audit: type=1326 audit(1769918614.670:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.657836][ T30] audit: type=1326 audit(1769918614.670:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.684198][ T30] audit: type=1326 audit(1769918614.670:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.684242][ T30] audit: type=1326 audit(1769918614.670:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.684278][ T30] audit: type=1326 audit(1769918614.670:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.684323][ T30] audit: type=1326 audit(1769918614.670:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.684357][ T30] audit: type=1326 audit(1769918614.670:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.684389][ T30] audit: type=1326 audit(1769918614.670:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab7cf9aeb9 code=0x7ffc0000 [ 400.997200][ T5905] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 401.017026][ T9] hid-steam 0003:28DE:1102.0014: item fetching failed at offset 4/5 [ 401.019675][ T5890] usb 5-1: USB disconnect, device number 63 [ 401.027965][ T9] hid-steam 0003:28DE:1102.0014: steam_probe:parse of hid interface failed [ 401.044995][ T9] hid-steam 0003:28DE:1102.0014: probe with driver hid-steam failed with error -22 [ 401.095865][ T5924] usbhid 6-1:0.0: can't add hid device: -71 [ 401.107496][ T5924] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 401.137948][ T5924] usb 6-1: USB disconnect, device number 12 [ 401.160703][ T5905] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 401.173732][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.206939][ T5905] usb 2-1: config 0 has no interface number 0 [ 401.218153][ T5897] usb 1-1: USB disconnect, device number 77 [ 401.226234][ T5905] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 401.243252][ T5905] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 401.254119][ T5905] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.272001][ T5905] usb 2-1: config 0 interface 52 has no altsetting 0 [ 401.282593][ T5905] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 401.293247][ T5905] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 401.411317][ T5905] usb 2-1: Manufacturer: syz [ 401.421947][ T5905] usb 2-1: config 0 descriptor?? [ 401.450409][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1401'. [ 401.642028][T10958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.667647][T10958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.702113][ T5905] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 401.722770][ T5905] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 401.864237][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.892508][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.922304][ T5905] usb 2-1: USB disconnect, device number 57 [ 401.937449][T10975] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1404'. [ 401.987215][ T5890] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 402.086946][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 402.161314][ T5890] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 402.188711][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 402.227392][ T5890] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.240632][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.259650][ T5890] usb 6-1: config 0 descriptor?? [ 402.299490][ T5890] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 402.571157][T10993] futex_wake_op: syz.3.1409 tries to shift op by 32; fix this program [ 402.591790][T10362] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.604350][T10362] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.822037][T10362] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.832221][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'. [ 402.841441][T10362] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.013567][T11008] geneve2: entered promiscuous mode [ 403.019193][ T5890] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 403.190381][ T5890] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.199569][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.227335][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.261334][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.315497][ T5890] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.326406][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.334997][ T5890] usb 2-1: Product: syz [ 403.341502][ T5890] usb 2-1: Manufacturer: syz [ 403.380496][ T5890] cdc_wdm 2-1:1.0: skipping garbage [ 403.398935][ T5890] cdc_wdm 2-1:1.0: skipping garbage [ 403.414526][ T5890] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 403.788497][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 403.940327][ T9] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 403.950924][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 403.964135][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.973497][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.984317][ T9] usb 5-1: config 0 descriptor?? [ 403.992799][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 404.097227][ T5890] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 404.251691][ T5890] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 404.267399][ T5890] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 404.278223][ T5890] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 404.287401][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.296227][T11040] fuse: Bad value for 'fd' [ 404.308036][T11036] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 404.325818][ T5890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.536330][ T9] usb 1-1: USB disconnect, device number 78 [ 404.752021][ T5924] usb 6-1: USB disconnect, device number 13 [ 404.978752][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1426'. [ 405.456606][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'. [ 405.529747][T11060] libceph: resolve '0..' (ret=-3): failed [ 405.572261][ T5924] usb 2-1: USB disconnect, device number 58 [ 405.904927][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1432'. [ 405.929056][T11076] libceph: resolve '0..' (ret=-3): failed [ 406.437317][ T5890] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 406.554398][ T5905] usb 5-1: USB disconnect, device number 64 [ 406.600588][ T5890] usb 1-1: config 0 has an invalid interface number: 182 but max is 1 [ 406.635759][ T5890] usb 1-1: config 0 has no interface number 1 [ 406.692700][ T5890] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 406.704837][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.713665][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 406.746956][ T5890] usb 1-1: config 0 descriptor?? [ 406.859314][T11089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.893054][T11089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.913241][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1440'. [ 406.981779][T11075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.992136][T11075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.998110][ T5905] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 407.168858][ T5905] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 407.184647][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.211845][ T5905] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 407.227372][ T5883] usb 1-1: USB disconnect, device number 79 [ 407.240933][ T5905] usb 5-1: config 1 has no interface number 1 [ 407.260126][ T5905] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 407.283645][ T5905] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.304843][ T5905] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.314464][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.323614][ T5905] usb 5-1: Product: syz [ 407.330183][ T5905] usb 5-1: Manufacturer: syz [ 407.334992][ T5905] usb 5-1: SerialNumber: syz [ 407.386489][T11104] fuse: Bad value for 'fd' [ 407.462353][ T5890] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 407.596140][T11113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.605000][T11113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.685374][ T5890] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 407.696965][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 407.735539][ T5905] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 407.882566][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 407.937056][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 407.976397][ T5890] usb 2-1: Product: syz [ 407.988520][ T5905] usb 5-1: MIDIStreaming interface descriptor not found [ 407.998308][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 408.011957][T11117] ipvlan2: entered promiscuous mode [ 408.030430][ T5890] usb 2-1: Manufacturer: syz [ 408.072757][ T5890] usb 2-1: SerialNumber: syz [ 408.086923][ T5890] usb 2-1: config 0 descriptor?? [ 408.167591][ T5890] usb 2-1: selecting invalid altsetting 0 [ 408.187011][ T5905] usb 5-1: USB disconnect, device number 65 [ 408.597333][T11129] netlink: 'syz.4.1449': attribute type 1 has an invalid length. [ 408.626397][T11132] netlink: 'syz.0.1450': attribute type 8 has an invalid length. [ 408.666673][ T5924] usb 2-1: USB disconnect, device number 59 [ 408.677354][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 408.985950][T11143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1452'. [ 409.007260][T11143] libceph: resolve '0..' (ret=-3): failed [ 409.078686][T11129] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 409.557405][ T5924] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 409.958826][ T5924] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 409.975259][ T5924] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 409.994042][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 410.007821][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 410.034947][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 410.081094][ T5924] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 410.090687][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 410.101078][ T5924] usb 5-1: Product: syz [ 410.105447][ T5924] usb 5-1: Manufacturer: syz [ 410.637448][ T5924] cdc_wdm 5-1:1.0: skipping garbage [ 410.647250][ T5924] cdc_wdm 5-1:1.0: skipping garbage [ 410.660709][ T5924] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 410.687340][ T5924] cdc_wdm 5-1:1.0: Unknown control protocol [ 410.926433][ T9] usb 5-1: USB disconnect, device number 66 [ 411.318090][T11161] netlink: 'syz.5.1457': attribute type 7 has an invalid length. [ 411.378373][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 411.537837][T11176] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1461'. [ 411.557278][ T5883] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 411.597988][T11176] FAULT_INJECTION: forcing a failure. [ 411.597988][T11176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.618967][T11176] CPU: 1 UID: 0 PID: 11176 Comm: syz.5.1461 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.618995][T11176] Tainted: [L]=SOFTLOCKUP [ 411.619000][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 411.619009][T11176] Call Trace: [ 411.619015][T11176] [ 411.619023][T11176] dump_stack_lvl+0xe8/0x150 [ 411.619048][T11176] should_fail_ex+0x412/0x560 [ 411.619070][T11176] _copy_from_iter+0x1d3/0x1670 [ 411.619098][T11176] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 411.619123][T11176] ? __pfx__copy_from_iter+0x10/0x10 [ 411.619142][T11176] ? __build_skb_around+0x22d/0x3c0 [ 411.619164][T11176] ? __alloc_skb+0x193/0x390 [ 411.619181][T11176] ? netlink_sendmsg+0x650/0xb40 [ 411.619197][T11176] ? skb_put+0x11b/0x210 [ 411.619217][T11176] netlink_sendmsg+0x6c0/0xb40 [ 411.619243][T11176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.619264][T11176] ? aa_sock_msg_perm+0xf1/0x1b0 [ 411.619283][T11176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.619302][T11176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.619317][T11176] ____sys_sendmsg+0xa68/0xad0 [ 411.619338][T11176] ? __might_fault+0xaf/0x130 [ 411.619363][T11176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.619389][T11176] ? import_iovec+0x73/0xa0 [ 411.619413][T11176] ___sys_sendmsg+0x2a5/0x360 [ 411.619433][T11176] ? __lock_acquire+0x6b5/0x2cf0 [ 411.619456][T11176] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.619531][T11176] ? __fget_files+0x2a/0x420 [ 411.619547][T11176] ? __fget_files+0x3a0/0x420 [ 411.619573][T11176] __x64_sys_sendmsg+0x1bd/0x2a0 [ 411.619594][T11176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.619620][T11176] ? __pfx_ksys_write+0x10/0x10 [ 411.619643][T11176] ? __secure_computing+0xe1/0x2a0 [ 411.619670][T11176] do_syscall_64+0xe2/0xf80 [ 411.619687][T11176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.619702][T11176] ? trace_irq_disable+0x37/0x100 [ 411.619716][T11176] ? clear_bhb_loop+0x60/0xb0 [ 411.619735][T11176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.619749][T11176] RIP: 0033:0x7f577b79aeb9 [ 411.619764][T11176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.619777][T11176] RSP: 002b:00007f577c743028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.619794][T11176] RAX: ffffffffffffffda RBX: 00007f577ba15fa0 RCX: 00007f577b79aeb9 [ 411.619807][T11176] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 411.619818][T11176] RBP: 00007f577c743090 R08: 0000000000000000 R09: 0000000000000000 [ 411.619829][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.619839][T11176] R13: 00007f577ba16038 R14: 00007f577ba15fa0 R15: 00007f577bb3fa48 [ 411.619867][T11176] [ 412.029275][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 412.039402][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 412.053012][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 412.073427][ T5883] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 412.184965][ T5924] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 412.206624][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.247164][ T5883] usb 2-1: Product: syz [ 412.304482][ T5883] usb 2-1: Manufacturer: syz [ 412.311112][ T5883] usb 2-1: SerialNumber: syz [ 412.341392][ T5883] usb 2-1: config 0 descriptor?? [ 412.378954][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.403761][ T5924] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.444774][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.464397][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.477242][ T5924] usb 5-1: Product: syz [ 412.481611][ T5924] usb 5-1: Manufacturer: syz [ 412.486282][ T5924] usb 5-1: SerialNumber: syz [ 412.523561][ T5924] cdc_ncm 5-1:1.0: skipping garbage [ 412.529400][ T5924] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 412.558652][ T5924] cdc_ncm 5-1:1.0: bind() failure [ 412.567028][ T5905] usb 2-1: USB disconnect, device number 60 [ 412.573634][ T5890] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 412.580162][ T5924] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 412.600297][T11189] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1466'. [ 412.613553][ T5924] cdc_ncm 5-1:1.1: bind() failure [ 412.648134][T11191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1467'. [ 412.662021][T11191] tipc: Enabled bearer , priority 0 [ 412.670607][T11190] tipc: Resetting bearer [ 412.695166][T11190] tipc: Disabling bearer [ 412.717332][ T5890] usb 1-1: device descriptor read/64, error -71 [ 412.742275][T11179] geneve0: Caught tx_queue_len zero misconfig [ 412.754496][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 412.779597][ T5924] usb 5-1: USB disconnect, device number 67 [ 412.924764][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1470'. [ 412.957460][ T5890] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 413.087257][ T5890] usb 1-1: device descriptor read/64, error -71 [ 413.198212][ T5890] usb usb1-port1: attempt power cycle [ 413.548252][ T5890] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 413.587290][ T5905] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 413.601295][ T5890] usb 1-1: device descriptor read/8, error -71 [ 413.758770][ T5905] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 413.767918][ T5905] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 413.778502][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 413.787868][ T5905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 413.807625][ T5905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 413.820750][ T5905] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 413.837236][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 413.845477][ T5905] usb 5-1: Product: syz [ 413.849711][ T5905] usb 5-1: Manufacturer: syz [ 413.867210][ T5883] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 413.879416][ T5890] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 413.892279][ T5905] cdc_wdm 5-1:1.0: skipping garbage [ 413.898465][ T5905] cdc_wdm 5-1:1.0: skipping garbage [ 413.905465][ T5905] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 413.911654][ T5905] cdc_wdm 5-1:1.0: Unknown control protocol [ 413.918580][ T5890] usb 1-1: device descriptor read/8, error -71 [ 414.037380][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 414.038125][ T5890] usb usb1-port1: unable to enumerate USB device [ 414.053199][ T5883] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 414.062965][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.074538][ T5883] usb 6-1: Product: syz [ 414.079203][ T5883] usb 6-1: Manufacturer: syz [ 414.084036][ T5883] usb 6-1: SerialNumber: syz [ 414.093137][ T5883] usb 6-1: config 0 descriptor?? [ 414.302727][ T5883] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 415.280132][ T5883] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 415.328685][ T5883] usb 6-1: USB disconnect, device number 14 [ 415.812320][ T5890] usb 5-1: USB disconnect, device number 68 [ 416.017242][ T5883] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 416.089126][ T5924] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 416.179101][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 416.209378][ T5883] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 416.237220][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.254298][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 416.286290][T11241] xt_CT: No such helper "netbios-ns" [ 416.303740][ T5924] usb 1-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 416.314582][ T5883] usb 2-1: Product: syz [ 416.336275][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.345261][ T5883] usb 2-1: Manufacturer: syz [ 416.350143][ T5883] usb 2-1: SerialNumber: syz [ 416.355390][ T5924] usb 1-1: Product: syz [ 416.362714][ T5924] usb 1-1: Manufacturer: syz [ 416.367889][ T5924] usb 1-1: SerialNumber: syz [ 416.373597][ T5883] usb 2-1: config 0 descriptor?? [ 416.401349][ T5924] usb 1-1: config 0 descriptor?? [ 416.420886][ T5924] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 416.600994][ T5883] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 061 [ 416.836533][T11258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.855550][T11258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.657745][ T5924] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 417.890080][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 417.922839][ T5924] usb 5-1: config 0 has no interfaces? [ 417.973690][ T5924] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 418.001372][ T5924] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 418.023819][ T5924] usb 5-1: Manufacturer: syz [ 418.059557][ T5924] usb 5-1: config 0 descriptor?? [ 418.551828][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.567583][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.246903][ T5890] usb 1-1: USB disconnect, device number 84 [ 419.320763][ T5897] usb 2-1: USB disconnect, device number 61 [ 420.002637][ T5897] usb 5-1: USB disconnect, device number 69 [ 420.177292][ T5924] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 420.382016][ T5924] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 420.398989][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.407257][ T5897] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 420.435650][ T5924] usb 6-1: Product: syz [ 420.442280][ T5924] usb 6-1: Manufacturer: syz [ 420.447175][ T5924] usb 6-1: SerialNumber: syz [ 420.586024][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 420.642697][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 420.827184][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 420.880364][ T5897] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.932051][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.951447][ T5897] usb 2-1: Product: syz [ 420.961591][ T5897] usb 2-1: Manufacturer: syz [ 421.053193][ T5897] usb 2-1: SerialNumber: syz [ 421.077268][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 421.105343][ T5897] usb 2-1: config 0 descriptor?? [ 421.145178][T11294] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 421.159896][ T5924] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 421.192453][ T5924] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 421.405738][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 421.414702][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.431801][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 421.444600][T11293] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 421.558127][ T5924] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 421.571847][ T9] usb 5-1: config 160 has an invalid interface number: 218 but max is 0 [ 421.597002][ T5924] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 421.606435][ T9] usb 5-1: config 160 has no interface number 0 [ 421.778582][ T9] usb 5-1: config 160 interface 218 has no altsetting 0 [ 421.785978][ T5924] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 421.802636][ T9] usb 5-1: string descriptor 0 read error: -22 [ 421.888055][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=3b.da [ 421.917498][ T5924] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 421.929143][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.184693][T11306] openvswitch: netlink: Invalid VLAN frame [ 422.195746][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.206162][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.314666][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.347665][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.372429][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.395104][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.175058][ T5890] usb 2-1: USB disconnect, device number 62 [ 423.496053][T11329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.508190][T11329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.727217][ T5897] usb 6-1: USB disconnect, device number 15 [ 424.940062][ T9] f81534a_ctrl 5-1:160.218: probe with driver f81534a_ctrl failed with error -71 [ 425.041692][ T9] usb 5-1: USB disconnect, device number 70 [ 426.269035][T11382] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1522'. [ 426.460573][T11326] syz.0.1507 (11326): drop_caches: 2 [ 426.646284][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.664577][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.737193][ T5897] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 426.739706][T11407] usb usb8: usbfs: process 11407 (syz.4.1530) did not claim interface 0 before use [ 426.759440][T11407] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1530' resets device [ 426.794472][ T5876] hid_parser_main: 91 callbacks suppressed [ 426.794492][ T5876] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 426.825015][ T5876] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 426.897328][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 426.904003][T11410] fido_id[11410]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 426.906770][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.938104][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.971128][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 426.980546][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.020432][ T5897] usb 6-1: config 0 descriptor?? [ 427.056508][ T5897] hub 6-1:0.0: USB hub found [ 427.231897][ T5897] hub 6-1:0.0: 1 port detected [ 427.290301][T11428] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 427.324217][T11428] ip6gre1: entered promiscuous mode [ 427.330396][T11428] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 427.330466][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1537'. [ 427.340942][T11428] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 427.352751][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1537'. [ 427.363326][T11428] bond2: (slave ip6gre1): making interface the new active one [ 427.379627][T11428] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 427.477220][ T5876] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 427.631157][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.642599][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.654921][ T5876] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 427.664228][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.674397][ T5876] usb 1-1: config 0 descriptor?? [ 427.853291][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1526'. [ 428.059271][T11425] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 428.068546][T11436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.094050][ T5876] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 428.095827][T11436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.118764][ T5876] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 428.147903][ T5897] hub 6-1:0.0: activate --> -90 [ 428.292369][ T5876] cp2112 0003:10C4:EA90.0016: Part Number: 0x1A Device Version: 0xC4 [ 428.350829][ T9] usb 6-1: USB disconnect, device number 16 [ 428.595167][T11466] kvm: kvm [11465]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x2 [ 428.607035][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 428.631812][T11466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 428.683273][T11471] binder: 11470:11471 ioctl 40084503 200000000580 returned -22 [ 428.879985][ T5897] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 428.895805][ T5876] cp2112 0003:10C4:EA90.0016: error reading lock byte: -71 [ 429.029698][ T5876] usb 1-1: USB disconnect, device number 85 [ 429.049268][ T5897] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 429.181802][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 429.205484][ T5897] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.216827][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.248275][ T5897] usb 5-1: config 0 descriptor?? [ 429.270420][ T5897] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 429.350012][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 429.617247][ T5897] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 429.676042][T11495] fuse: Bad value for 'fd' [ 429.781934][ T5897] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 429.801103][ T5897] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 429.830591][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 429.854393][T11497] loop2: detected capacity change from 0 to 7 [ 429.873118][ T5897] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 429.898560][T11497] Dev loop2: unable to read RDB block 7 [ 429.908648][ T5897] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 429.927425][T11497] loop2: unable to read partition table [ 429.941589][T11497] loop2: partition table beyond EOD, truncated [ 429.957718][T11497] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 429.969857][ T5897] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 429.993188][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.008497][ T5897] usb 6-1: Product: syz [ 430.012683][ T5897] usb 6-1: Manufacturer: syz [ 430.035673][ T5897] cdc_wdm 6-1:1.0: skipping garbage [ 430.041963][ T5897] cdc_wdm 6-1:1.0: skipping garbage [ 430.061736][ T5897] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 430.076686][ T5897] cdc_wdm 6-1:1.0: Unknown control protocol [ 430.212238][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1562'. [ 430.418682][T11512] xt_cgroup: path and classid specified [ 431.458551][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 431.682190][ T5876] usb 5-1: USB disconnect, device number 71 [ 431.690293][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1574'. [ 432.316658][T11551] libceph: resolve '0..' (ret=-3): failed [ 432.551938][ T5890] usb 6-1: USB disconnect, device number 17 [ 432.624127][T11556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1578'. [ 432.624335][T11559] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1576'. [ 433.237331][T11568] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 435.222182][ T5902] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 435.278349][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 435.440538][ T5902] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 435.458925][ T5902] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 435.597230][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 435.679170][ T5902] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 435.717205][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 435.736633][ T5902] usb 6-1: Product: syz [ 435.745804][ T5902] usb 6-1: Manufacturer: syz [ 435.771547][ T5902] usb 6-1: SerialNumber: syz [ 435.790345][ T5902] usb 6-1: config 0 descriptor?? [ 435.811629][ T5902] usb 6-1: selecting invalid altsetting 0 [ 436.437186][ T9] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 436.587483][ T5876] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 436.619866][ T9] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 436.637343][ T9] usb 1-1: config 0 has no interface number 0 [ 436.643629][ T9] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 436.677144][ T9] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.697217][ T9] usb 1-1: config 0 interface 113 has no altsetting 0 [ 436.718723][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 436.737453][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.745496][ T9] usb 1-1: Product: syz [ 436.757331][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 436.762601][ T9] usb 1-1: Manufacturer: syz [ 436.777475][ T9] usb 1-1: SerialNumber: syz [ 436.783883][ T5876] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 436.794210][ T9] usb 1-1: config 0 descriptor?? [ 436.807275][ T5876] usb 5-1: config 0 has no interface number 0 [ 436.813415][ T5876] usb 5-1: config 0 interface 209 has no altsetting 0 [ 436.828516][ T9] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 436.852227][ T5876] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 436.867501][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.875546][ T5876] usb 5-1: Product: syz [ 436.892077][ T5876] usb 5-1: Manufacturer: syz [ 436.896797][ T5876] usb 5-1: SerialNumber: syz [ 436.920053][ T5876] usb 5-1: config 0 descriptor?? [ 437.077181][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 437.139245][T11600] sctp: [Deprecated]: syz.4.1589 (pid 11600) Use of int in max_burst socket option. [ 437.139245][T11600] Use struct sctp_assoc_value instead [ 437.163223][T11600] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 437.188747][ T5876] usb 5-1: USB disconnect, device number 72 [ 437.247286][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 437.269957][ T24] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 437.287358][ T24] usb 2-1: config 0 has no interface number 0 [ 437.299073][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 437.317517][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.325542][ T24] usb 2-1: Product: syz [ 437.347420][ T24] usb 2-1: Manufacturer: syz [ 437.352070][ T24] usb 2-1: SerialNumber: syz [ 437.371308][ T24] usb 2-1: config 0 descriptor?? [ 437.388844][ T24] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 437.402523][T11575] syz.3.1581 (11575): drop_caches: 3 [ 437.583762][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 437.610625][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 437.789373][T11613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.829655][T11613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.834120][ T5876] usb 6-1: USB disconnect, device number 18 [ 437.997183][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 438.006052][ T24] usb 2-1: USB disconnect, device number 63 [ 438.031228][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 438.072460][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 438.084707][T11619] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1594'. [ 438.095372][ T24] quatech2 2-1:0.51: device disconnected [ 438.150018][ T5902] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 438.327246][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 438.333936][ T5902] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 438.342493][ T5902] usb 5-1: config 0 has no interface number 0 [ 438.350514][ T5902] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 438.361267][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.369546][ T5902] usb 5-1: Product: syz [ 438.373728][ T5902] usb 5-1: Manufacturer: syz [ 438.378581][ T5902] usb 5-1: SerialNumber: syz [ 438.386038][ T5902] usb 5-1: config 0 descriptor?? [ 438.399944][ T5902] smsc95xx v2.0.0 [ 438.437470][ T5876] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 438.543565][T11626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.557307][T11626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.597295][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 438.607912][ T5876] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 438.620226][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 438.630086][ T5876] usb 6-1: Product: syz [ 438.634571][ T5876] usb 6-1: SerialNumber: syz [ 438.660159][ T5876] usb 6-1: config 0 descriptor?? [ 438.679790][ T5876] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 438.688891][ T5876] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 438.699983][ T5876] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 438.706506][ T5876] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 438.810814][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 438.828667][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 438.843729][ T5902] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 438.867476][ T5902] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 438.885230][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.896550][ T5902] usb 5-1: USB disconnect, device number 73 [ 438.905429][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.938833][ T5876] usb 6-1: USB disconnect, device number 19 [ 439.044017][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1600'. [ 439.068167][T11642] libceph: resolve '0..' (ret=-3): failed [ 439.227454][ T5890] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 439.342342][ T9] usb 1-1: USB disconnect, device number 86 [ 439.377501][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 439.388127][ T5890] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 439.472322][ T5890] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 439.483507][T11648] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 439.493857][ T5890] usb 2-1: config 1 has no interface number 1 [ 439.521204][T11648] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 439.522533][ T5890] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 439.566469][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1605'. [ 439.582716][ T5890] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.618193][ T5890] usb 2-1: config 1 interface 105 has no altsetting 0 [ 439.662849][ T5890] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 439.681701][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.705121][T11648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1604'. [ 439.711283][ T5890] usb 2-1: Product: syz [ 439.725134][ T5890] usb 2-1: Manufacturer: syz [ 439.739577][ T5890] usb 2-1: SerialNumber: syz [ 439.802059][T11640] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 440.034696][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1610'. [ 440.040257][T11639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1601'. [ 440.045604][ T5890] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 440.053281][T11639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1601'. [ 440.070541][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1610'. [ 440.107221][T11639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1601'. [ 440.142152][T11639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1601'. [ 440.228711][ T31] INFO: task kworker/0:3:5865 blocked for more than 143 seconds. [ 440.233310][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.236622][ T31] Tainted: G L syzkaller #0 [ 440.243228][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.288704][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.318776][ T5890] usb 2-1: USB disconnect, device number 64 [ 440.334317][ T31] task:kworker/0:3 state:D stack:22016 pid:5865 tgid:5865 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 440.377186][ T31] Workqueue: usb_hub_wq hub_event [ 440.386622][ T31] Call Trace: [ 440.394399][ T31] [ 440.400487][ T31] __schedule+0x14ea/0x5050 [ 440.410601][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 440.420566][ T31] ? __pfx___schedule+0x10/0x10 [ 440.425490][ T31] ? schedule+0x90/0x360 [ 440.436746][ T31] schedule+0x164/0x360 [ 440.449504][ T31] schedule_timeout+0xc3/0x2c0 [ 440.454303][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 440.460532][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 440.465584][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 440.471430][ T31] ? wait_for_completion+0x274/0x5e0 [ 440.476885][ T31] wait_for_completion+0x2cc/0x5e0 [ 440.482999][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 440.488987][ T31] i2c_del_adapter+0x5c0/0x790 [ 440.493886][ T31] ? up_write+0x1ab/0x410 [ 440.498804][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 440.504196][ T31] ? __pfx_ft260_remove+0x10/0x10 [ 440.509892][ T31] ? kernfs_put+0x40e/0x470 [ 440.514798][ T31] ? sysfs_remove_group+0x23d/0x2e0 [ 440.521283][ T31] ? __pfx_ft260_remove+0x10/0x10 [ 440.526428][ T31] ft260_remove+0x5d/0x80 [ 440.531066][ T31] hid_device_remove+0x228/0x370 [ 440.536153][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 440.542460][ T31] device_release_driver_internal+0x46f/0x860 [ 440.549012][ T31] bus_remove_device+0x34d/0x440 [ 440.554109][ T31] device_del+0x527/0x8f0 [ 440.558937][ T31] ? __pfx_device_del+0x10/0x10 [ 440.564057][ T31] hid_destroy_device+0x6b/0x1b0 [ 440.569552][ T31] usbhid_disconnect+0x9f/0xc0 [ 440.574879][ T31] usb_unbind_interface+0x26e/0x910 [ 440.580792][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 440.586602][ T31] device_release_driver_internal+0x4d9/0x860 [ 440.593366][ T31] bus_remove_device+0x34d/0x440 [ 440.598721][ T31] device_del+0x527/0x8f0 [ 440.603216][ T31] ? __pfx_device_del+0x10/0x10 [ 440.608486][ T31] ? kobject_put+0x51d/0x560 [ 440.613107][ T31] usb_disable_device+0x3d4/0x8d0 [ 440.627208][ T31] usb_disconnect+0x32f/0x990 [ 440.636212][ T31] hub_event+0x1cc9/0x4f30 [ 440.641093][ T31] ? __pfx_hub_event+0x10/0x10 [ 440.645948][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 440.651929][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 440.657983][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 440.663720][ T31] process_scheduled_works+0xaec/0x17a0 [ 440.669385][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 440.675518][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 440.680699][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 440.686175][ T31] ? schedule+0x90/0x360 [ 440.690487][ T31] worker_thread+0xda6/0x1360 [ 440.695296][ T31] ? __kthread_parkme+0x19c/0x1f0 [ 440.700470][ T31] kthread+0x726/0x8b0 [ 440.704692][ T31] ? __pfx_worker_thread+0x10/0x10 [ 440.710055][ T31] ? __pfx_kthread+0x10/0x10 [ 440.714792][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 440.720223][ T31] ? __pfx_kthread+0x10/0x10 [ 440.725046][ T31] ret_from_fork+0x51b/0xa40 [ 440.729707][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 440.734830][ T31] ? __switch_to+0xc82/0x1410 [ 440.739746][ T31] ? __pfx_kthread+0x10/0x10 [ 440.744351][ T31] ret_from_fork_asm+0x1a/0x30 [ 440.749209][ T31] [ 440.752430][ T31] [ 440.752430][ T31] Showing all locks held in the system: [ 440.761097][ T31] 1 lock held by khungtaskd/31: [ 440.765951][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 440.775881][ T31] 2 locks held by getty/5586: [ 440.780630][ T31] #0: ffff888030db50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 440.799230][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 440.809471][ T31] 6 locks held by kworker/0:3/5865: [ 440.814686][ T31] #0: ffff88801dad7148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 440.826276][ T31] #1: ffffc9000435fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 440.858628][ T31] #2: ffff888028c96198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 440.869149][ T31] #3: ffff888030a6b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 440.878522][ T31] #4: ffff888035247160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 440.889260][ T31] #5: ffff888057d2da20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 440.900028][ T31] 1 lock held by syz.0.1611/11669: [ 440.905135][ T31] #0: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 440.915185][ T31] [ 440.917603][ T31] ============================================= [ 440.917603][ T31] [ 440.926032][ T31] NMI backtrace for cpu 1 [ 440.926047][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 440.926062][ T31] Tainted: [L]=SOFTLOCKUP [ 440.926066][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 440.926072][ T31] Call Trace: [ 440.926078][ T31] [ 440.926083][ T31] dump_stack_lvl+0xe8/0x150 [ 440.926100][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 440.926115][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 440.926132][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 440.926147][ T31] sys_info+0x135/0x170 [ 440.926158][ T31] watchdog+0xf90/0xfe0 [ 440.926172][ T31] ? watchdog+0x209/0xfe0 [ 440.926184][ T31] kthread+0x726/0x8b0 [ 440.926197][ T31] ? __pfx_watchdog+0x10/0x10 [ 440.926207][ T31] ? __pfx_kthread+0x10/0x10 [ 440.926219][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 440.926233][ T31] ? __pfx_kthread+0x10/0x10 [ 440.926244][ T31] ret_from_fork+0x51b/0xa40 [ 440.926261][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 440.926275][ T31] ? __switch_to+0xc82/0x1410 [ 440.926290][ T31] ? __pfx_kthread+0x10/0x10 [ 440.926301][ T31] ret_from_fork_asm+0x1a/0x30 [ 440.926321][ T31] [ 440.926325][ T31] Sending NMI from CPU 1 to CPUs 0: [ 441.052895][ C0] NMI backtrace for cpu 0 [ 441.052915][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.052936][ C0] Tainted: [L]=SOFTLOCKUP [ 441.052942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 441.052951][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 441.052971][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 441.052983][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242 [ 441.052997][ C0] RAX: 00000000009650cd RBX: ffffffff8199570d RCX: 0000000080000001 [ 441.053008][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc9170 RDI: ffffffff8c073a00 [ 441.053018][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 441.053029][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70 [ 441.053039][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 441.053049][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 441.053061][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.053071][ C0] CR2: 00007ff146be0ad8 CR3: 0000000076a00000 CR4: 00000000003526f0 [ 441.053084][ C0] Call Trace: [ 441.053093][ C0] [ 441.053099][ C0] default_idle+0x9/0x20 [ 441.053115][ C0] default_idle_call+0x72/0xb0 [ 441.053132][ C0] do_idle+0x1bd/0x500 [ 441.053145][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 441.053162][ C0] ? __pfx_do_idle+0x10/0x10 [ 441.053179][ C0] cpu_startup_entry+0x43/0x60 [ 441.053192][ C0] rest_init+0x2de/0x300 [ 441.053209][ C0] start_kernel+0x380/0x3d0 [ 441.053229][ C0] x86_64_start_reservations+0x24/0x30 [ 441.053245][ C0] x86_64_start_kernel+0x143/0x1c0 [ 441.053260][ C0] common_startup_64+0x13e/0x147 [ 441.053285][ C0] [ 441.245375][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 441.252265][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 441.262929][ T31] Tainted: [L]=SOFTLOCKUP [ 441.267286][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 441.277348][ T31] Call Trace: [ 441.280630][ T31] [ 441.283644][ T31] vpanic+0x1e0/0x670 [ 441.287714][ T31] panic+0xc5/0xd0 [ 441.291521][ T31] ? __pfx_panic+0x10/0x10 [ 441.295956][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 441.301428][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 441.307669][ T31] watchdog+0xfda/0xfe0 [ 441.311827][ T31] ? watchdog+0x209/0xfe0 [ 441.316165][ T31] kthread+0x726/0x8b0 [ 441.320229][ T31] ? __pfx_watchdog+0x10/0x10 [ 441.324930][ T31] ? __pfx_kthread+0x10/0x10 [ 441.329526][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.334758][ T31] ? __pfx_kthread+0x10/0x10 [ 441.339345][ T31] ret_from_fork+0x51b/0xa40 [ 441.343931][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 441.349159][ T31] ? __switch_to+0xc82/0x1410 [ 441.353873][ T31] ? __pfx_kthread+0x10/0x10 [ 441.358468][ T31] ret_from_fork_asm+0x1a/0x30 [ 441.363246][ T31] [ 441.366710][ T31] Kernel Offset: disabled [ 441.371047][ T31] Rebooting in 86400 seconds..