last executing test programs: 16m0.07696169s ago: executing program 4 (id=3321): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x2000000000000}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc4, 0x0, &(0x7f0000001080)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000e40)={@ptr={0x70742a85, 0x1, &(0x7f0000000cc0)=""/129, 0x81, 0x0, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000000d80)=""/184, 0xb8, 0x2, 0x4}, @fda={0x66646185, 0x2, 0x2, 0x26}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}, 0x40}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x7, 0x2, 0x34}}, &(0x7f0000000fc0)={0x0, 0x18, 0x30}}, 0x40}, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @enter_looper, @request_death={0x400c630e, 0x2}], 0x0, 0x200000000000000, 0x0}) 15m59.613691084s ago: executing program 4 (id=3324): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100000000000002000000000000", @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 15m58.00988948s ago: executing program 4 (id=3333): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r4 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000003000000030000000000000000000000000000000000000017b04966ca387d45931415d02010cc8461fa3ecfdefbe5c870902e91fb50e8346122ef5e36a0eccf43836828aed63ca2a8761c9493fd4eb8e348ad2cbe6947"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000020"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040040) r5 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil) fstatfs(r5, &(0x7f00000003c0)=""/146) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524"], 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 15m54.32201162s ago: executing program 4 (id=3341): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x30}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x800, 0xfffffffe, {}, {0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x800000, 0x0, {0x77359400}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}, 0xfffffffd}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES8=r5, @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = semget$private(0x0, 0x7, 0x191) semop(r7, &(0x7f0000000140)=[{0x2, 0xce97, 0x800}], 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2842, 0x0) close(0x3) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0xe, 0x0, &(0x7f0000000040)=0x60ff0ef8f8ee5d2b) 15m53.392891704s ago: executing program 4 (id=3344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x85, &(0x7f0000000740)={0x0, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc58041310b18d364b87808f8a7494c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e725d000000000000007b2858f76d3c773b57"}, &(0x7f0000000040)=0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000000000f01e5310304fcfffffffbdbdf25", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000000000f01e5310304fcfffffffbdbdf25", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 15m52.849256544s ago: executing program 4 (id=3349): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) 15m52.103980644s ago: executing program 32 (id=3349): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) 14m11.175798215s ago: executing program 0 (id=3764): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ffd, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 14m8.404931782s ago: executing program 0 (id=3774): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x109f, &(0x7f0000000040)={0x0, 0x80085ba, 0x400, 0x107, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000740)=""/252, &(0x7f0000000180)=0xfc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r8, 0x3, r7, 0x5}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, r10, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x40486, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030304683658cef0a4fb6257962a5974c4af093aaf5337690973f16a92b9ff76fae4a19f99479681aa19ec8bbe4abc7c2158c5b54", @ANYRES8=r11, @ANYBLOB='L\n', @ANYRESDEC=0x0, @ANYBLOB=',\x00', @ANYRES16=r4], 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010004000000000002000300", @ANYRESOCT=r5, @ANYBLOB="0229d2", @ANYRES32=r3, @ANYBLOB="040000000000000008000700", @ANYBLOB="08db0400", @ANYRES32=0x0, @ANYBLOB='\x00', @ANYRESHEX=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="ec972bb3", @ANYRESHEX=r4, @ANYRESHEX=r9, @ANYRESHEX=r0, @ANYBLOB="faff040000200c0020000000"], 0x4, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) 14m5.181284775s ago: executing program 0 (id=3784): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x20004000) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20008011) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fcffffff80000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 14m4.705312699s ago: executing program 0 (id=3787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000100)='./file0\x00', 0x220) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x24040800) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) 14m1.666054767s ago: executing program 0 (id=3794): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x2f, 0x80, 0x8, 0x80000000, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x40, 0x17, 0x62, 0x2}}) r3 = accept(r0, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40081}, 0x4800) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000300)) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000340)={0x3, 0x9}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000380)={"3221d1e89f03096329fce7a4e7a70b753484b5b5f913b00ea1eb586d6819b81e", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000003c0)={"a2b4ddd83edee1ef8d20f6f8ffcd03e4", 0x0, 0x0, {0x0, 0xfffff36d}, {0x41e, 0x7}, 0x7, [0x1, 0xfffffffffffffff5, 0xffff, 0x1, 0xfffffffffffffffc, 0x9, 0x80, 0x5, 0x6, 0x7fffffffffffffff, 0x1, 0x9, 0x0, 0x2, 0x7, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000004c0)=r5) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000500)=0x80000) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f00000005c0)={0xe, 0x0, 0x1, {0x77359400}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0xc, 0x1, 0x0, 0x0, "7e70f3740865c40ec5da6f58d2aaf79950cf881bb2b7d424f2cd6285a8df9bc0a09f05436b70b8da4292616f3a78d0eabc23ca8c5b6be5cf9eeb72c1031c78d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) fcntl$setsig(r6, 0xa, 0x1e) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x40001) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x12000, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r9, 0x3b64) io_uring_enter(r8, 0x4463, 0xa591, 0x40, &(0x7f0000000800)={[0x9]}, 0x8) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r10, &(0x7f0000000840)="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", 0x1000, 0x404, &(0x7f0000001840)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000001880), &(0x7f00000018c0)=0x4) syz_io_uring_setup(0x26f8, &(0x7f0000001900)={0x0, 0x8f5f, 0x800, 0x3, 0x22d}, &(0x7f0000001980)=0x0, &(0x7f00000019c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x10c, &(0x7f0000001a00)=0x2, 0x0, 0x4) write$nci(r7, &(0x7f0000001a40)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x3}, 0x4) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r13 = openat$panthor(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r13, 0xc0106446, &(0x7f0000001ac0)) 14m0.639277052s ago: executing program 33 (id=3798): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x2f, 0x80, 0x8, 0x80000000, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x40, 0x17, 0x62, 0x2}}) r3 = accept(r0, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40081}, 0x4800) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000300)) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000340)={0x3, 0x9}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000380)={"3221d1e89f03096329fce7a4e7a70b753484b5b5f913b00ea1eb586d6819b81e", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000003c0)={"a2b4ddd83edee1ef8d20f6f8ffcd03e4", 0x0, 0x0, {0x0, 0xfffff36d}, {0x41e, 0x7}, 0x7, [0x1, 0xfffffffffffffff5, 0xffff, 0x1, 0xfffffffffffffffc, 0x9, 0x80, 0x5, 0x6, 0x7fffffffffffffff, 0x1, 0x9, 0x0, 0x2, 0x7, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000004c0)=r5) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000500)=0x80000) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f00000005c0)={0xe, 0x0, 0x1, {0x77359400}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0xc, 0x1, 0x0, 0x0, "7e70f3740865c40ec5da6f58d2aaf79950cf881bb2b7d424f2cd6285a8df9bc0a09f05436b70b8da4292616f3a78d0eabc23ca8c5b6be5cf9eeb72c1031c78d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) fcntl$setsig(r6, 0xa, 0x1e) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x40001) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x12000, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r9, 0x3b64) io_uring_enter(r8, 0x4463, 0xa591, 0x40, &(0x7f0000000800)={[0x9]}, 0x8) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r10, &(0x7f0000000840)="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", 0x1000, 0x404, &(0x7f0000001840)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000001880), &(0x7f00000018c0)=0x4) syz_io_uring_setup(0x26f8, &(0x7f0000001900)={0x0, 0x8f5f, 0x800, 0x3, 0x22d}, &(0x7f0000001980)=0x0, &(0x7f00000019c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x10c, &(0x7f0000001a00)=0x2, 0x0, 0x4) write$nci(r7, &(0x7f0000001a40)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x3}, 0x4) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r13 = openat$panthor(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r13, 0xc0106446, &(0x7f0000001ac0)) 7.131017551s ago: executing program 5 (id=7758): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4, 0x5}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$inet(0x2, 0x6, 0x5) accept4(r2, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x80, 0x80000) 6.497077136s ago: executing program 5 (id=7761): socket$inet(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x11, 0x3, 0x1000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.191323251s ago: executing program 5 (id=7764): preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x15f, 0x3fffffc) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6260, 0x12000000, 0x0, 0x0) 4.938485725s ago: executing program 5 (id=7765): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d042fc500000000000109022400010000000109040000010300030009210000000122070009058103"], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000002140)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@routing={0x84, 0x0, 0x1}]}}}}}, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a38d", 0x2) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) (async) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000300)) (async, rerun: 64) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0x4112, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) (async) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) write$UHID_INPUT(r7, &(0x7f0000002300)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x41, 0x5, 0x80, 0x4, 0x3, 0x26, 0x40, 0x8, 0x80, 0x0, 0xf9, 0x8, 0x9, 0x40, 0x9, 0x8}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x5fffffffffa, 0x8000002000000006, 0x0, 0x41, 0xbc, 0x0, 0x2004cb, 0xa8c, 0xfffffffffffffffe, 0x68ff, 0x9, 0x40, 0x3, 0x0, 0x0, 0x800000], 0x1, 0x202}) (async, rerun: 64) ioctl$KVM_RUN(r11, 0xae80, 0x0) (rerun: 64) ioctl$HIDIOCGRDESCSIZE(r8, 0x80044801, &(0x7f0000000080)) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000107"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.617380692s ago: executing program 5 (id=7767): syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="40a283000000005d4d9068182354bd207388076e0f33d1060ee83858d5bf32ad94a3ea7dd2c87098ccf8852bd97f7fc72c6174dd802333e5270e97057a1dd16f79a87c23b70282c7b60620103182bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c40)={0x34, &(0x7f0000000a00)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x803, 0xfffffffe) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4011}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x275a, 0x0) io_uring_setup(0x7554, 0xfffffffffffffffc) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) unshare(0xa000400) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) 3.591315964s ago: executing program 6 (id=7771): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30401000000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) write$sndseq(r3, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="2023de3f1fabf667f6453976a447429d0500"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.520151641s ago: executing program 2 (id=7772): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x9) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682237b3663"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') write$6lowpan_enable(r5, &(0x7f0000000040)='0', 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x1, 0x5, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000500)={0x4, 0x0, r6}) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000003"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r2, 0xf6d99000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000844000030aefcdbeb00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r3, @ANYRES8=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000280), 0xfffffffffffffffc, 0x262c40) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0x80045700, &(0x7f00000002c0)) 3.23299521s ago: executing program 1 (id=7775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x20004000) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20008011) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc000000000000000000000080ffffff00000000000000000a0030"], 0xb8}}, 0x4000) 3.16917262s ago: executing program 2 (id=7777): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6f, 0x2, 0x97, 0xffffa415}, {0x8, 0x0, 0x98, 0x8}, {0xf, 0x8, 0x5, 0x66}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xffff}}}}}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) 3.061180302s ago: executing program 3 (id=7778): fsopen(0x0, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x4008c62) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x1}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}}, 0x880) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e5b, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000140)=0xfb7c, 0x4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x420, 0x0, 0xa8, 0xffffffff, 0x0, 0x0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x12, @rand_addr=0x64010100, @private=0xa010102, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@multicast2, @multicast2, 0xff, 0xffffffff, 'hsr0\x00', 'batadv_slave_1\x00', {}, {}, 0x8, 0x1}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xe, 0xffffffff], 0x1}}, @common=@icmp={{0x28}, {0xd, "e029"}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xed8a4e8df5ae939b, @multicast1, @empty, @port=0x8, @icmp_id=0x66}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffffff, 0xffffffff, 'ip6gretap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2, 0x1, 0x49}, 0x1a8, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x14, @ipv6=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @port=0x4e24, @port=0x4e21}}}, {{@ip={@private=0xa010100, @multicast2, 0xff000000, 0xff, 'team0\x00', 'geneve1\x00', {0xff}, {}, 0x5c, 0x0, 0x28}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x0, 0x1}}, @common=@ah={{0x30}, {[0x3ff, 0xc05], 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @multicast1, @broadcast, @icmp_id=0x65, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = dup(r5) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffb, 0x200000, 0x4, r2, 0x8}) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000740)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x3, 0xa2, 0xffffffff, 0xb4, 0x10, 0xd45}, {0xff, 0x101, 0x8, 0xffffffffffff8001, 0xb6, 0x8}], ['\x00', '\x00', '\x00', '\x00']}) 3.060857067s ago: executing program 1 (id=7779): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c0100001600010000000000010000000a01010000000000000000000000000000000000000000000a00ffff000000004e240000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414aa0000000033000000ffffffff000000000000000000000000200000000000000000000000000000000000000000000000050000000000000068482c4500000000f1ffffffffffffff03000000000000000000000000000000000000000000004000000000000000000100000000004000feffffffffffffff000000000000000096070000000800000000000000000000030000000000000000000000b1a001000c001c00", @ANYRES32=0x0, @ANYBLOB="0100000008"], 0x10c}}, 0x0) 3.048629798s ago: executing program 2 (id=7780): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x200000802, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001280)={0x1, @pix_mp={0x10000, 0x802, 0x34325258, 0x4, 0x5, [{0xff, 0x3}, {0x40004944, 0x8bbc043}, {0x8, 0xc}, {0xe, 0x7fffffff}, {0x1, 0xfffffffd}, {0x39, 0x1}, {0x9, 0x2}, {0x400, 0x500}], 0x2, 0x3, 0x8, 0x1, 0x1}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x80}, {0xefff, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0xc7c}, {0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x7, 0x3, 0xb7, 0x80, 0x0, 0x9}}, 0xe8) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x7) r2 = syz_open_dev$vim2m(&(0x7f0000003800), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x1, 0x1, 0x386, "000000000009b8d8fe1c0a4c88ae00", 0x494e4f4b}) 2.920896832s ago: executing program 1 (id=7781): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x8c) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) (async) close(r3) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086466670"], 0xffdd) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.86165942s ago: executing program 2 (id=7782): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x420, 0x0, 0xa8, 0xffffffff, 0x0, 0x0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x12, @rand_addr=0x64010100, @private=0xa010102, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@multicast2, @multicast2, 0xff, 0xffffffff, 'hsr0\x00', 'batadv_slave_1\x00', {}, {}, 0x8, 0x1}, 0x0, 0xc8, 0x129, 0x0, {}, [@common=@ah={{0x30}, {[0xe, 0xffffffff], 0x1}}, @common=@icmp={{0x28}, {0xd, "e029"}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xed8a4e8df5ae939b, @multicast1, @empty, @port=0x8, @icmp_id=0x66}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffffff, 0xffffffff, 'ip6gretap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2, 0x1, 0x49}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x14, @ipv6=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @port=0x4e24, @port=0x4e21}}}, {{@ip={@private=0xa010100, @multicast2, 0xff000000, 0xff, 'team0\x00', 'geneve1\x00', {0xff}, {}, 0x5c, 0x0, 0x28}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x0, 0x1}}, @common=@ah={{0x30}, {[0x3ff, 0xc05], 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @multicast1, @broadcast, @icmp_id=0x65, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x0, 0x2900}}, {0x28}}}}, 0x480) 2.763037172s ago: executing program 2 (id=7783): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffff8}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x49c, &(0x7f00000000c0)={0x0, 0x79ae, 0x3100, 0x8000, 0x3, 0x0, r7}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r7, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x30) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000080ff0000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.69233219s ago: executing program 1 (id=7784): socket$inet(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x11, 0x3, 0x1000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.593808249s ago: executing program 3 (id=7785): syz_io_uring_setup(0x205e, &(0x7f00000011c0)={0x0, 0x0, 0x11100, 0x3, 0x10}, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x2, 0x4}, 0x20) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0xfffffffffffffffd) ioctl$TCSBRKP(r1, 0x5425, 0x80000000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x2}}, 0x1c}}, 0x20024090) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x95}}}}}}}, 0x0) syz_clone(0x11800, &(0x7f0000000100)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001100)="e8337b40ba1e2cb6ee97cfe37db343e8c55759211a123013f091d62a77a32f390590c17037ea1d27b43adac986e9499663ed7abcdb5201753a1aa38e452bbd5100f687b3a944a9ff6d9df6c0d66ac221091ff5ec2d1efc62ad209e44d71466271482fcbfe2267fff6c3fe6e154f2338170be5715df5ee7bbbef552e298929a5330de3177e19a032fd7e2d8b387b858cd00495c4076832061633a1b24f00742cffc39b101c51800f2915ba1157ddc86f505b7c3") 2.322432137s ago: executing program 1 (id=7786): preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x15f, 0x3fffffc) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6297, 0x12000000, 0x0, 0x0) 2.194758393s ago: executing program 3 (id=7787): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 2.112984682s ago: executing program 1 (id=7788): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io$printer(r0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, &(0x7f0000000080)='E', 0x1, 0x8000}]) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b959193b6c8a1d29087ff5b17fd8780e6f2b0074814378ec959603350441942cbb4f8e0099a580f20a9c04086917a107e31e6c685c6fefdb9c48b1e5e90cc8ce17d33de8ead2e5e33373126dfdf29f5238c97fc8317d5dc024cb5172815ad82458bafb16c3df4067c15988da212e9ded98fa722f0b31fa33ad6b5cbe3d564373614e4d83182bbf444d335c6e67fdbf3dc8e94521f473e958208bbf289a7ce1e9d6a28d8aa630e327b71c25abdfcd77abad166d8231ce6872442bf4a9f2d45e94af5d90eb4697445a1395fc8f2df7080e77ebddd7cad7"], 0x80}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') write$binfmt_elf32(r8, 0x0, 0x0) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x400}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r9, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x609, 0xc}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x200000d4) ioctl$TCXONC(r7, 0x5608, 0x0) shutdown(r6, 0x1) recvfrom(r6, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xffffff35) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x16, 0x3a, 0xd, 0x1e, 0xc, 0x18000, 0x1, 0x8000000, 0xe755a3d832dace16}}) r10 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r10, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0x9, 0x5, 0x80, 0x0, 0x4008, 0x6, 0x1, 0xdb, 0x5, 0x20000, 0x66, 0x8000000, 0x17, 0x9, 0xffffffff, 0x100, 0x1, 0xfffffff8, 0x1, 0x1, 0xfff, 0x129, 0x1, 0x3, 0x3, 0xb9, 0x6fc5, 0x1, 0x400, 0x0, 0x7, 0x200]}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.030647679s ago: executing program 3 (id=7789): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004080057"], 0x10c2) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f0000000500)={0x6, 0x800, 0x401, 0xd, 0x43be44f7, 0x8, 0x2, 0xfe2f}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = dup(r5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x0, 0x9}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5, 0x0, 0xb, 0x8, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) 1.834959923s ago: executing program 3 (id=7790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x6, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410021001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.78918193s ago: executing program 2 (id=7791): r0 = socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0b26814fbf2a0af3c2afada3bc719f06208520437142a458fd2e578e0634d4254d37f59ab707dd6b", @ANYBLOB="010829bd7000fbdbdf25140000"], 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect(0x4, 0x9a2, &(0x7f0000000100)=ANY=[], 0x0) r4 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={0x0}) r5 = syz_open_dev$sg(0x0, 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000114000/0x1000)=nil) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000011c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r7, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x218, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x8, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0xff84}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x21, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) 1.617763221s ago: executing program 6 (id=7792): preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x15f, 0x3fffffc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') readv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/242, 0xf2}], 0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2f0300000000200000001300000024000980080002000001"], 0x38}}, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001780)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1.235198195s ago: executing program 3 (id=7793): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ffd, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x5, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) socket$inet(0x2, 0x2, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f00000001c0)={0x79, 0xa, r6, 0x0, r7}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) 1.093186255s ago: executing program 6 (id=7794): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="000000000002000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x54f680) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/65, 0x41}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munlock(&(0x7f0000418000/0x3000)=nil, 0x3000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="318325bd70000000000019000000200001801400020067656e6576653100000000000000000008000100", @ANYRES32=r8, @ANYBLOB="d0ba87c0b99c542988325a4c7cb3e1d386a33e1565f5bab822fe5360128ba57a10c5b943862930f9c93adf35d7db033f568eb8166fa4c47a7ff3541f7e01d8bfd5554f47f8238d0ac6ed3a4888824f364bae91e26822620d131a44878dd5"], 0x34}, 0x1, 0x0, 0x0, 0x2001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlinkprop={0xb8, 0x6c, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x20080, 0x1800}, [@IFLA_NET_NS_FD={0x8, 0x1c, r9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'lo\x00'}, @IFLA_VF_PORTS={0x4}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x59715226eaf243c6}]}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x1, &(0x7f0000002900)="9e", 0x1, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) semctl$GETZCNT(0x0, 0x1, 0x20, 0x0) 926.835029ms ago: executing program 6 (id=7795): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x1b0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0xd, 0x0, 0x9]}, {0x0, [0x2, 0x188, 0x0, 0x6, 0x2], 0x3}}}}, {{@ip={@loopback, @multicast1, 0xff000000, 0xffffffff, 'geneve1\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x9}, 0x0, 0x98, 0xb8, 0x0, {0x1b0}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 679.417637ms ago: executing program 6 (id=7796): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x5, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd611, 0x0, 0x0, 0x0, 0x1ff, 0x8eff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}) 475.255733ms ago: executing program 6 (id=7797): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000500)=0xc) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x0) epoll_create1(0x80000) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x60}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x8e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010103, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1b, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x5}, @timestamp={0x8, 0xa, 0x6, 0x4}, @window={0x3, 0x3, 0xd7}, @timestamp={0x8, 0xa, 0x8, 0x3}, @exp_fastopen={0xfe, 0x12, 0xf989, "dbf57334f9b969d503ec74c6988b"}, @mptcp=@synack={0x1e, 0x10, 0x4, 0x2, 0x7, 0x80000000, 0x3}, @fastopen={0x22, 0x5, "e282db"}, @mptcp=@add_addr={0x1e, 0xd, 0x0, 0xd, 0x6, @broadcast, 0x3, "2c98a0"}]}}}}}}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r5, r4, 0x0) recvmmsg$unix(r7, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003100)=""/4106, 0x101d0}], 0x1}}], 0x1, 0x58ca22a0, 0x0) 0s ago: executing program 5 (id=7798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1c) (async, rerun: 64) shutdown(r2, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) kernel console output (not intermixed with test programs): [T30707] R13: 00007f361c816038 R14: 00007f361c815fa0 R15: 00007f361c93fa48 [ 1845.834010][T30707] [ 1846.081089][ T9994] holtek_mouse 0003:04D9:A067.004F: unknown main item tag 0x0 [ 1846.088792][ T9994] holtek_mouse 0003:04D9:A067.004F: unknown main item tag 0x0 [ 1846.096491][ T9994] holtek_mouse 0003:04D9:A067.004F: unknown main item tag 0x0 [ 1846.104099][ T9994] holtek_mouse 0003:04D9:A067.004F: unknown main item tag 0x0 [ 1846.111785][ T9994] holtek_mouse 0003:04D9:A067.004F: unknown main item tag 0x0 [ 1846.119351][ T9994] holtek_mouse 0003:04D9:A067.004F: unknown main item tag 0x0 [ 1846.126948][ T9994] holtek_mouse 0003:04D9:A067.004F: unknown main item tag 0x0 [ 1846.134565][ T9994] holtek_mouse 0003:04D9:A067.004F: unknown main item tag 0x0 [ 1846.170811][ T9994] holtek_mouse 0003:04D9:A067.004F: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.3-1/input1 [ 1846.279823][ T5941] nzxt-smart2 0003:1E71:2009.0050: unknown main item tag 0x0 [ 1846.287359][ T5941] nzxt-smart2 0003:1E71:2009.0050: unknown main item tag 0x0 [ 1846.306643][ T5941] nzxt-smart2 0003:1E71:2009.0050: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1846.348188][T29320] usb 4-1: USB disconnect, device number 127 [ 1846.431399][T30709] fido_id[30709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1846.483260][ T1209] usb 7-1: USB disconnect, device number 116 [ 1846.614605][T30712] fido_id[30712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1847.176612][T30733] syzkaller0: entered promiscuous mode [ 1847.195997][T30733] syzkaller0: entered allmulticast mode [ 1847.219969][T30733] tipc: Started in network mode [ 1847.225091][T30733] tipc: Node identity 0ec42a9d2f2b, cluster identity 4711 [ 1847.233974][T30733] tipc: Enabled bearer , priority 0 [ 1847.242673][T30732] tipc: Resetting bearer [ 1847.314860][T30732] tipc: Disabling bearer [ 1847.452889][T30735] dvmrp0: entered allmulticast mode [ 1847.538925][ T24] cdc_mbim 2-1:1.0: bind() failure [ 1847.569900][ T24] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1847.593802][ T24] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1847.642061][ T24] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1847.664908][ T24] usb 2-1: USB disconnect, device number 116 [ 1847.939812][T29320] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1848.119212][T29320] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1848.139642][T29320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.205840][T29320] usb 6-1: Product: syz [ 1848.205869][T29320] usb 6-1: Manufacturer: syz [ 1848.205888][T29320] usb 6-1: SerialNumber: syz [ 1848.209121][T29320] usb 6-1: config 0 descriptor?? [ 1848.552578][ T24] usb 6-1: USB disconnect, device number 85 [ 1848.983940][T30783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7034'. [ 1849.005885][T30786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7036'. [ 1849.016018][ T5941] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1849.704819][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1849.736465][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1849.820127][ T5941] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1849.839990][ T5941] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1849.931937][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1849.986289][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.007022][ T5941] usb 4-1: Product: syz [ 1850.011404][ T5941] usb 4-1: Manufacturer: syz [ 1850.016313][ T5941] usb 4-1: SerialNumber: syz [ 1850.027363][T30780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1850.040122][ T5941] cdc_mbim 4-1:1.0: skipping garbage [ 1850.241797][T30780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1850.270076][T30780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1850.495742][ T30] audit: type=1326 audit(1772382367.711:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30779 comm="syz.3.7035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5d6b9c799 code=0x0 [ 1851.666658][T30801] sctp: [Deprecated]: syz.5.7041 (pid 30801) Use of int in maxseg socket option. [ 1851.666658][T30801] Use struct sctp_assoc_value instead [ 1851.729897][ T30] audit: type=1326 audit(1772382368.931:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30800 comm="syz.5.7041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab2759c799 code=0x0 [ 1851.793905][ T5941] cdc_mbim 4-1:1.0: bind() failure [ 1851.807920][ T5941] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1851.921119][ T5941] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1851.947587][ T5941] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1852.000895][T30812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7044'. [ 1852.029905][ T5941] usb 4-1: USB disconnect, device number 2 [ 1852.039916][T30812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7044'. [ 1852.107498][T30812] dummy0: entered promiscuous mode [ 1852.250765][T30818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1852.308707][T30812] dummy0: left promiscuous mode [ 1852.753121][T30830] loop2: detected capacity change from 0 to 7 [ 1852.788283][T25941] Dev loop2: unable to read RDB block 7 [ 1852.814567][T25941] loop2: unable to read partition table [ 1852.820503][T25941] loop2: partition table beyond EOD, truncated [ 1852.970249][T30830] Dev loop2: unable to read RDB block 7 [ 1852.976025][T30830] loop2: unable to read partition table [ 1852.997166][T30830] loop2: partition table beyond EOD, truncated [ 1853.023937][T30830] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– þ¨â·û) failed (rc=-5) [ 1853.292220][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.298899][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.259581][T30852] vlan2: entered promiscuous mode [ 1854.308434][T30847] can: request_module (can-proto-0) failed. [ 1854.467248][T30714] Set syz1 is full, maxelem 65536 reached [ 1854.490630][T30857] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7058'. [ 1854.951249][T30885] loop2: detected capacity change from 0 to 7 [ 1854.961235][T30885] loop2: p1 [ 1854.964585][T30885] loop2: partition table partially beyond EOD, truncated [ 1854.972939][T30885] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1855.019945][ T1209] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1855.208857][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1855.433486][ T1209] usb 6-1: Using ep0 maxpacket: 16 [ 1855.455787][ T1209] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1855.491570][ T1209] usb 6-1: config 0 has no interface number 0 [ 1855.527677][ T1209] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.612798][ T1209] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.625188][T30900] syzkaller0: entered promiscuous mode [ 1855.639311][ T1209] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1855.650423][T30900] syzkaller0: entered allmulticast mode [ 1855.660601][T30900] tipc: Enabled bearer , priority 0 [ 1855.670214][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.681818][T30899] tipc: Resetting bearer [ 1855.780846][T30899] tipc: Disabling bearer [ 1855.838678][ T1209] usb 6-1: config 0 descriptor?? [ 1856.184572][T30904] trusted_key: encrypted_key: insufficient parameters specified [ 1856.434473][ T1209] hid (null): invalid report_size 12130 [ 1856.443539][ T1209] hid (null): invalid report_size 28261 [ 1857.177788][T30912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7075'. [ 1857.187721][T30912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7075'. [ 1857.494997][T30915] netlink: 'syz.3.7076': attribute type 1 has an invalid length. [ 1857.553305][T30915] bond7: entered promiscuous mode [ 1857.560446][T30915] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1857.728807][T30915] bond7: (slave bridge4): making interface the new active one [ 1857.753450][T30915] bridge4: entered promiscuous mode [ 1857.776374][T30915] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 1858.205275][T30928] netlink: 'syz.3.7079': attribute type 1 has an invalid length. [ 1858.226683][T30929] netlink: 'syz.3.7079': attribute type 1 has an invalid length. [ 1858.319860][T17829] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1858.584605][T17829] usb 7-1: config 0 has no interfaces? [ 1858.642125][T17829] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1858.669915][T17829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.690617][T17829] usb 7-1: Product: syz [ 1858.694850][T17829] usb 7-1: Manufacturer: syz [ 1858.735362][T17829] usb 7-1: SerialNumber: syz [ 1858.745716][ T24] usb 6-1: USB disconnect, device number 86 [ 1858.801566][T17829] usb 7-1: config 0 descriptor?? [ 1858.825224][T30937] loop2: detected capacity change from 0 to 7 [ 1858.840164][T30937] Dev loop2: unable to read RDB block 7 [ 1858.846723][T30937] loop2: unable to read partition table [ 1858.853282][T30937] loop2: partition table beyond EOD, truncated [ 1858.882584][T30937] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1859.028792][T30944] netlink: 'syz.1.7083': attribute type 1 has an invalid length. [ 1859.071473][T30924] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.131766][ T24] usb 7-1: USB disconnect, device number 117 [ 1859.212237][T30944] bond4: entered promiscuous mode [ 1859.217698][T30944] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1859.240168][T30943] syzkaller0: entered promiscuous mode [ 1859.246943][T30943] syzkaller0: entered allmulticast mode [ 1859.258146][T30950] tipc: Enabled bearer , priority 0 [ 1859.277941][T30954] bond4: (slave bridge4): making interface the new active one [ 1859.285781][T30954] bridge4: entered promiscuous mode [ 1859.301267][T30954] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1859.344220][T30942] tipc: Resetting bearer [ 1859.410594][T30942] tipc: Disabling bearer [ 1860.417007][T30985] netlink: 'syz.1.7094': attribute type 1 has an invalid length. [ 1860.790299][T30994] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7096'. [ 1861.012469][T31006] loop5: detected capacity change from 0 to 4095 [ 1861.039510][T31006] Invalid logical block size (2051) [ 1861.865368][T31021] vlan2: entered promiscuous mode [ 1862.209478][T31028] netlink: 'syz.5.7104': attribute type 1 has an invalid length. [ 1862.312530][T31028] bond3: entered promiscuous mode [ 1862.329816][T29320] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1862.401046][T31028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1862.498856][T29320] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1862.523756][T31028] bond3: (slave bridge0): making interface the new active one [ 1862.531698][T31028] bridge0: entered promiscuous mode [ 1862.547766][T31028] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 1862.561848][T29320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1862.615580][T29320] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1862.678913][T29320] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1862.712844][T29320] usb 4-1: Manufacturer: syz [ 1862.780742][T29320] usb 4-1: config 0 descriptor?? [ 1862.831038][T31035] 8021q: VLANs not supported on caif0 [ 1862.981718][T29320] rc_core: IR keymap rc-hauppauge not found [ 1862.998071][T29320] Registered IR keymap rc-empty [ 1863.028480][T31025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.053277][T31025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1863.417122][ T1209] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1863.489788][ T5941] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1863.688493][T29320] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1863.734595][ T5941] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1863.766361][ T1209] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 1863.767019][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.810235][T29320] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input146 [ 1863.844574][ T1209] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1863.857123][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.858033][ T5941] usb 7-1: Product: syz [ 1863.882106][ T5941] usb 7-1: Manufacturer: syz [ 1863.898010][ T5941] usb 7-1: SerialNumber: syz [ 1863.948137][ T1209] usb 6-1: Product: syz [ 1863.955011][ T1209] usb 6-1: Manufacturer: syz [ 1864.009279][ T1209] usb 6-1: SerialNumber: syz [ 1864.057863][T31043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1864.107400][ T5941] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1864.147564][ T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1864.369511][ T1209] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 87 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 1864.519621][ T1209] usb 6-1: USB disconnect, device number 87 [ 1864.611204][ T1209] usblp0: removed [ 1864.753509][ C1] usb 7-1: ath9k_htc: over RX MAX_PKT_NUM [ 1864.799940][ T5941] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1864.959020][T31041] netlink: 88 bytes leftover after parsing attributes in process `syz.6.7107'. [ 1865.010824][ T9994] usb 4-1: USB disconnect, device number 3 [ 1865.083487][T31041] binder: BINDER_SET_CONTEXT_MGR already set [ 1865.110620][ T5941] usb 2-1: config 0 has no interfaces? [ 1865.185980][T31041] binder: 31039:31041 ioctl 4018620d 200000004a80 returned -16 [ 1865.261155][T16971] usb 7-1: USB disconnect, device number 118 [ 1865.332062][ T5941] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1865.371240][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.395421][ T5941] usb 2-1: Product: syz [ 1865.429572][ T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1865.437679][ T5941] usb 2-1: Manufacturer: syz [ 1865.457137][ T5941] usb 2-1: SerialNumber: syz [ 1865.467615][ T24] ath9k_htc: Failed to initialize the device [ 1865.535427][T16971] usb 7-1: ath9k_htc: USB layer deinitialized [ 1865.543423][ T5941] usb 2-1: config 0 descriptor?? [ 1865.773073][ T5941] usb 2-1: USB disconnect, device number 117 [ 1865.781632][T31064] loop2: detected capacity change from 0 to 7 [ 1865.828671][T31064] loop2: p1 [ 1865.859970][T31064] loop2: partition table partially beyond EOD, truncated [ 1865.867369][T31064] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1866.015704][T31067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7115'. [ 1866.026683][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1866.587945][T31074] veth0_to_bridge: entered promiscuous mode [ 1866.594672][T31074] macvtap1: entered promiscuous mode [ 1866.617844][T31074] macvtap1: entered allmulticast mode [ 1866.623757][T31074] veth0_to_bridge: entered allmulticast mode [ 1866.681656][T31074] veth0_to_bridge: left allmulticast mode [ 1866.692738][T31074] veth0_to_bridge: left promiscuous mode [ 1867.034616][T31100] bond5: Removing last ns target with arp_interval on [ 1867.173450][T31105] netlink: 'syz.6.7127': attribute type 1 has an invalid length. [ 1867.878222][T31110] veth3: entered promiscuous mode [ 1867.896210][T31110] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1868.058961][T31105] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1868.097918][T31114] bond1: entered promiscuous mode [ 1868.109991][T31114] bond1: entered allmulticast mode [ 1868.128283][T31114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1868.899832][ T1209] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1868.996628][T31145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7140'. [ 1869.039824][T31145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7140'. [ 1869.091515][ T1209] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1869.111143][ T1209] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1869.120637][T16971] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1869.171756][ T1209] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1869.191904][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.210187][ T1209] usb 6-1: Product: syz [ 1869.214541][ T1209] usb 6-1: Manufacturer: syz [ 1869.219184][ T1209] usb 6-1: SerialNumber: syz [ 1869.250512][ T1209] usb 6-1: config 0 descriptor?? [ 1869.300001][T16971] usb 3-1: device descriptor read/64, error -71 [ 1869.327789][T31156] binder: 31155:31156 ioctl 40046104 0 returned -22 [ 1869.548395][ T5941] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1869.549637][T16971] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1869.565998][ T24] usb 6-1: USB disconnect, device number 88 [ 1869.739811][T16971] usb 3-1: device descriptor read/64, error -71 [ 1869.740902][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 1869.774698][ T5941] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1869.807642][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 1869.828144][ T5941] usb 4-1: SerialNumber: syz [ 1869.854546][ T5941] usb 4-1: config 0 descriptor?? [ 1869.860070][T16971] usb usb3-port1: attempt power cycle [ 1869.879616][ T5941] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1869.895237][ T5941] usb 4-1: Detected FT232A [ 1869.907917][ T5941] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1870.003345][T31169] syzkaller0: entered promiscuous mode [ 1870.009231][T31169] syzkaller0: entered allmulticast mode [ 1870.018958][T31169] tipc: Enabled bearer , priority 0 [ 1870.029344][T31168] tipc: Resetting bearer [ 1870.082806][ T24] usb 4-1: USB disconnect, device number 4 [ 1870.102791][T31168] tipc: Disabling bearer [ 1870.114640][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1870.144491][ T24] ftdi_sio 4-1:0.0: device disconnected [ 1870.180711][T31171] netlink: 'syz.1.7150': attribute type 1 has an invalid length. [ 1870.220000][T16971] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1870.290000][T31171] bond6: entered promiscuous mode [ 1870.295478][T31171] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1870.302615][T16971] usb 3-1: device descriptor read/8, error -71 [ 1870.357586][T31171] bond6: (slave bridge5): making interface the new active one [ 1870.365382][T31171] bridge5: entered promiscuous mode [ 1870.373829][T31171] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1870.559844][T16971] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1870.581480][T16971] usb 3-1: device descriptor read/8, error -71 [ 1870.648811][T31185] syzkaller0: entered promiscuous mode [ 1870.656578][T31185] syzkaller0: entered allmulticast mode [ 1870.710249][T16971] usb usb3-port1: unable to enumerate USB device [ 1870.720119][T31188] fuse: Unknown parameter 'fä' [ 1872.315507][T31202] kvm: pic: non byte write [ 1872.365276][T31204] syzkaller0: entered promiscuous mode [ 1872.371009][T31204] syzkaller0: entered allmulticast mode [ 1872.616148][T31211] bond7: Removing last ns target with arp_interval on [ 1872.641994][T31215] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 1872.655358][T31215] usb usb8: usbfs: process 31215 (syz.6.7162) did not claim interface 0 before use [ 1874.150834][ T5941] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1874.322837][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 1874.385346][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1874.447809][ T5941] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1874.519943][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.616345][ T5941] usb 6-1: config 0 descriptor?? [ 1874.688848][T31237] syzkaller0: entered promiscuous mode [ 1874.718080][T31237] syzkaller0: entered allmulticast mode [ 1874.767522][T31240] tipc: Enabled bearer , priority 0 [ 1874.815046][T31236] tipc: Resetting bearer [ 1875.069987][T31246] binder: 31242:31246 ioctl c0306201 0 returned -14 [ 1875.105275][T31236] tipc: Disabling bearer [ 1876.900123][ T5941] usbhid 6-1:0.0: can't add hid device: -71 [ 1876.907327][ T5941] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1876.969308][ T5941] usb 6-1: USB disconnect, device number 89 [ 1877.520579][T31264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7176'. [ 1877.876750][T31273] loop2: detected capacity change from 0 to 7 [ 1877.905558][T31273] Dev loop2: unable to read RDB block 7 [ 1877.919973][T31273] loop2: unable to read partition table [ 1877.925868][T31273] loop2: partition table beyond EOD, truncated [ 1877.996464][T31273] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1878.062431][T29320] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1878.249835][T29320] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.287600][T29320] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1878.327348][T29320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.422566][T29320] usb 7-1: config 0 descriptor?? [ 1878.444132][T29320] pwc: Askey VC010 type 2 USB webcam detected. [ 1878.846469][T29320] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1878.854016][T29320] pwc: recv_control_msg error -32 req 02 val 2700 [ 1878.863798][T29320] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1878.871281][T29320] pwc: recv_control_msg error -32 req 04 val 1000 [ 1878.879386][T29320] pwc: recv_control_msg error -32 req 04 val 1300 [ 1878.893097][T29320] pwc: recv_control_msg error -32 req 04 val 1400 [ 1878.928554][T29320] pwc: recv_control_msg error -32 req 02 val 2000 [ 1878.975919][T29320] pwc: recv_control_msg error -32 req 02 val 2100 [ 1879.204877][T31291] xt_nat: multiple ranges no longer supported [ 1879.513916][T29320] pwc: recv_control_msg error -71 req 02 val 2400 [ 1879.522623][T29320] pwc: recv_control_msg error -71 req 02 val 2600 [ 1879.620871][T29320] pwc: recv_control_msg error -71 req 02 val 2900 [ 1879.629833][T29320] pwc: recv_control_msg error -71 req 02 val 2800 [ 1879.652510][T29320] pwc: recv_control_msg error -71 req 04 val 1100 [ 1879.675278][T29320] pwc: recv_control_msg error -71 req 04 val 1200 [ 1879.720087][ T5941] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1879.729142][T29320] pwc: Registered as video103. [ 1879.816775][T29320] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input147 [ 1879.900508][T29320] usb 7-1: USB disconnect, device number 119 [ 1879.912314][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 1879.969029][ T5941] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1879.992431][T31304] xt_hashlimit: overflow, try lower: 3/0 [ 1880.006803][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.028244][ T5941] usb 6-1: Product: syz [ 1880.038746][ T5941] usb 6-1: Manufacturer: syz [ 1880.050940][ T5941] usb 6-1: SerialNumber: syz [ 1880.076753][ T5941] usb 6-1: config 0 descriptor?? [ 1880.329903][ T5918] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1880.503303][ T5918] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1880.511815][ T5918] usb 2-1: config 0 has no interface number 0 [ 1880.518074][ T5918] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1880.543849][ T5918] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1880.564614][ T5941] airspy 6-1:0.0: Board ID: 00 [ 1880.569567][ T5941] airspy 6-1:0.0: Firmware version: [ 1880.584854][ T5918] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1880.615780][ T5918] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1880.641814][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.689650][ T5918] usb 2-1: config 0 descriptor?? [ 1880.719766][T31304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1880.741146][ T5918] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input148 [ 1880.797051][ C0] usbtouchscreen 2-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1880.962882][ T5918] usb 2-1: USB disconnect, device number 118 [ 1881.002312][T31319] fuse: Unknown parameter 'ÿÿ00000000000000000009000000000000000000000050x0000000000000006' [ 1881.470900][T31324] loop8: detected capacity change from 0 to 8 [ 1881.479577][T25941] Dev loop8: unable to read RDB block 8 [ 1881.487933][T25941] loop8: unable to read partition table [ 1881.495257][T25941] loop8: partition table beyond EOD, truncated [ 1881.515548][T31324] Dev loop8: unable to read RDB block 8 [ 1881.526574][T31324] loop8: unable to read partition table [ 1881.542339][T31324] loop8: partition table beyond EOD, truncated [ 1881.562237][T31324] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1881.649809][ T5918] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1881.660617][ T5941] airspy 6-1:0.0: usb_control_msg() failed -110 request 11 [ 1881.701585][ T5941] airspy 6-1:0.0: Registered as swradio24 [ 1881.722639][ T5941] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1881.879364][T31331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1881.910177][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 1881.965531][ T5918] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1881.968749][ T5918] usb 3-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice= 0.40 [ 1881.968786][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.968809][ T5918] usb 3-1: Product: syz [ 1881.968826][ T5918] usb 3-1: Manufacturer: syz [ 1881.968844][ T5918] usb 3-1: SerialNumber: syz [ 1882.066227][T31334] overlayfs: missing 'lowerdir' [ 1882.209909][ T1209] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1882.375560][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.403281][ T1209] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1882.598664][ T1209] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1882.609921][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.659741][ T1209] usb 2-1: Product: syz [ 1882.721047][ T1209] usb 2-1: Manufacturer: syz [ 1882.736221][ T1209] usb 2-1: SerialNumber: syz [ 1882.752527][ T1209] usb 2-1: config 0 descriptor?? [ 1882.777079][ T5918] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 1882.808229][ T5918] usb 3-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 1882.847186][ T5941] usb 6-1: USB disconnect, device number 90 [ 1883.022755][ T1209] usb 2-1: USB disconnect, device number 119 [ 1883.035892][ T5918] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1883.052361][ T5918] usb 3-1: can't set first interface for hiFace device. [ 1883.080108][ T5918] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1883.148216][ T5918] usb 3-1: can't set first interface for hiFace device. [ 1883.169835][ T5918] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1883.201359][ T5918] usb 3-1: USB disconnect, device number 80 [ 1883.276652][T25941] udevd[25941]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1883.814536][T31361] fuse: Invalid rootmode [ 1883.857492][T31358] bridge_slave_1: left allmulticast mode [ 1883.865996][T31362] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7208'. [ 1883.879443][T31358] bridge_slave_1: left promiscuous mode [ 1883.939017][T31358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.220045][T31358] bridge_slave_0: left allmulticast mode [ 1884.226190][T31358] bridge_slave_0: left promiscuous mode [ 1884.290336][T31358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.482762][ T5918] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1884.588199][T31356] batadv0: entered allmulticast mode [ 1884.605084][T31356] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1884.694877][ T5918] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1884.741076][ T5918] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.779179][ T5918] usb 2-1: config 220 has no interface number 2 [ 1884.798957][ T5918] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1884.829376][ T5918] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1884.848631][ T5918] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1884.865680][ T5918] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1884.919949][ T5918] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1884.946086][ T5918] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1884.960831][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.982043][ T5918] usb 2-1: Product: syz [ 1884.996372][ T5918] usb 2-1: Manufacturer: syz [ 1885.001687][ T5918] usb 2-1: SerialNumber: syz [ 1885.094405][T31379] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 1885.112995][T29320] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1885.293753][T29320] usb 7-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 1885.344848][T29320] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1885.357987][ T5918] usb 2-1: selecting invalid altsetting 0 [ 1885.386073][ T5918] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1885.399824][T29320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.408071][ T5918] uvcvideo 2-1:220.0: No valid video chain found. [ 1885.421295][T29320] usb 7-1: config 0 descriptor?? [ 1885.441442][ T5918] usb 2-1: selecting invalid altsetting 0 [ 1885.447275][ T5918] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1885.471875][T29320] usb 7-1: bad CDC descriptors [ 1885.520530][ T5918] usb 2-1: USB disconnect, device number 120 [ 1885.634800][T29320] usb 7-1: USB disconnect, device number 120 [ 1885.778804][T31398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7222'. [ 1885.789475][T31398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7222'. [ 1885.881350][ T5918] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1886.339837][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 1886.377902][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1886.810463][ T5918] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1886.821398][ T5918] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1886.832318][ T5918] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1886.844118][ T5918] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1886.855484][ T5918] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1886.863714][ T5918] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1886.873501][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.953867][ T5918] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1887.289261][ T5918] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1887.380799][ T5918] usb 6-1: USB disconnect, device number 91 [ 1887.463800][ T5941] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 1887.637550][T31426] openvswitch: netlink: IP tunnel dst address not specified [ 1887.649911][T31426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7228'. [ 1887.670565][ T5941] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1887.712539][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.721302][ T5941] usb 7-1: Product: syz [ 1887.725604][ T5941] usb 7-1: Manufacturer: syz [ 1887.805666][ T5941] usb 7-1: SerialNumber: syz [ 1887.846648][ T5941] usb 7-1: config 0 descriptor?? [ 1888.060575][ T5941] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1888.381042][T31437] binder: BINDER_SET_CONTEXT_MGR already set [ 1888.387110][T31437] binder: 31436:31437 ioctl 4018620d 2000000002c0 returned -16 [ 1889.277863][T31420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.289118][T31420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.326935][ T5941] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1889.339107][ T5941] usb 7-1: USB disconnect, device number 121 [ 1889.532272][T31454] loop2: detected capacity change from 0 to 7 [ 1889.556345][T25941] loop2: p1 [ 1889.564275][T25941] loop2: partition table partially beyond EOD, truncated [ 1889.642082][T25941] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1889.682441][T31454] loop2: p1 [ 1889.692351][T31454] loop2: partition table partially beyond EOD, truncated [ 1889.741851][T31454] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1889.926240][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1890.125033][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1890.143750][T31461] loop4: detected capacity change from 0 to 1 [ 1890.200791][T31461] Dev loop4: unable to read RDB block 1 [ 1890.217842][T31461] loop4: unable to read partition table [ 1890.265544][T31461] loop4: partition table beyond EOD, truncated [ 1890.294352][T31461] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 1890.388031][T31470] input: syz0 as /devices/virtual/input/input149 [ 1890.964086][T31486] fuse: Invalid rootmode [ 1891.210894][T31475] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1891.228908][T31475] bond4: option arp_ip_target: invalid value (0) [ 1891.254722][T31475] bond4 (unregistering): Released all slaves [ 1891.921458][T31494] binder: BINDER_SET_CONTEXT_MGR already set [ 1891.927523][T31494] binder: 31491:31494 ioctl 4018620d 2000000002c0 returned -16 [ 1892.437176][T31505] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1892.768245][T31514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7258'. [ 1892.780026][ T5941] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1893.009899][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 1893.037136][ T5941] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1893.055553][ T5941] usb 3-1: config 0 has no interface number 0 [ 1893.094154][ T5941] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1893.119140][ T5941] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1893.157198][ T5941] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1893.234126][ T5941] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1893.279787][ T5941] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1893.299823][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.337427][ T5941] usb 3-1: config 0 descriptor?? [ 1893.361344][ T5941] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1893.461779][T31526] vlan2: entered promiscuous mode [ 1893.506035][T31529] binder: 31527:31529 ioctl 4c82 0 returned -22 [ 1893.642507][ T5941] usb 3-1: USB disconnect, device number 81 [ 1893.652071][ T5941] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1894.102614][T31539] binder: 31532:31539 ioctl 4018620d 0 returned -22 [ 1894.610711][ T5918] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1894.663676][T31552] bond9: Removing last ns target with arp_interval on [ 1894.773878][T31556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7270'. [ 1894.833469][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 1894.902805][ T5918] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1894.912031][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.921552][ T5918] usb 7-1: Product: syz [ 1894.925841][ T5918] usb 7-1: Manufacturer: syz [ 1894.933904][ T5918] usb 7-1: SerialNumber: syz [ 1894.942839][ T5918] usb 7-1: config 0 descriptor?? [ 1894.951786][ T5918] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1895.168681][T31545] netlink: 'syz.6.7268': attribute type 9 has an invalid length. [ 1895.205809][ T5918] ssu100 7-1:0.0: probe with driver ssu100 failed with error -5 [ 1895.794450][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.800123][ T9994] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1895.806047][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.855349][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.877090][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.895701][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.920769][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.949245][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.985629][ T9994] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1895.993085][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.016206][ T9994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.039862][ T9994] usb 3-1: Product: syz [ 1896.046277][ T9994] usb 3-1: Manufacturer: syz [ 1896.061470][ T9994] usb 3-1: SerialNumber: syz [ 1896.099031][ T9994] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1896.125544][ T5941] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1896.232587][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.254403][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.314148][T31579] input: syz0 as /devices/virtual/input/input151 [ 1896.565914][ T5918] usb 3-1: USB disconnect, device number 82 [ 1897.223967][ T5941] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1897.264709][ T5941] ath9k_htc: Failed to initialize the device [ 1897.289812][ T5918] usb 3-1: ath9k_htc: USB layer deinitialized [ 1897.336720][ T9994] usb 7-1: USB disconnect, device number 122 [ 1897.417000][T31586] vlan2: entered promiscuous mode [ 1897.476304][T31588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7279'. [ 1897.699823][ T5918] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1897.885395][ T5918] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1897.894736][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.903163][ T5918] usb 3-1: Product: syz [ 1897.907451][ T5918] usb 3-1: Manufacturer: syz [ 1897.914987][ T5918] usb 3-1: SerialNumber: syz [ 1897.924517][ T5918] usb 3-1: config 0 descriptor?? [ 1897.986874][T31594] vlan2: entered promiscuous mode [ 1898.010138][T29320] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 1898.062476][T17829] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1898.132200][ T5918] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1898.162877][T29320] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.182240][T29320] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1898.191885][T29320] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1898.201423][T29320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.221615][T29320] usb 6-1: config 0 descriptor?? [ 1898.229787][T17829] usb 7-1: Using ep0 maxpacket: 32 [ 1898.238227][T29320] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1898.246004][T29320] dvb-usb: bulk message failed: -22 (3/0) [ 1898.252891][T17829] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1898.268866][T29320] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1898.289928][T17829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.294170][T29320] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1898.307060][T29320] usb 6-1: media controller created [ 1898.315418][T17829] usb 7-1: Product: syz [ 1898.318469][T29320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1898.319683][T17829] usb 7-1: Manufacturer: syz [ 1898.332908][T17829] usb 7-1: SerialNumber: syz [ 1898.358747][T17829] usb 7-1: config 0 descriptor?? [ 1898.364103][T29320] dvb-usb: bulk message failed: -22 (6/0) [ 1898.364238][T29320] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1898.396065][T29320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input152 [ 1898.414029][T17829] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1898.447406][T31590] dvb-usb: bulk message failed: -22 (2/0) [ 1898.491216][T29320] dvb-usb: schedule remote query interval to 150 msecs. [ 1898.528658][T29320] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1898.537080][ T5918] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1898.575126][ T5918] usb 3-1: USB disconnect, device number 83 [ 1898.592123][T29320] usb 6-1: USB disconnect, device number 92 [ 1898.706212][T31611] netlink: 'syz.3.7287': attribute type 1 has an invalid length. [ 1898.720445][T29320] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1898.802049][T31611] bond10: entered promiscuous mode [ 1898.807877][T31611] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1898.855028][T31611] bond10: (slave bridge5): making interface the new active one [ 1898.867291][T31611] bridge5: entered promiscuous mode [ 1898.875621][T31611] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 1898.919559][T17829] gspca_ov534_9: reg_w failed -71 [ 1898.989883][ T5918] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1899.017965][T31618] loop2: detected capacity change from 0 to 7 [ 1899.032979][T25941] Dev loop2: unable to read RDB block 7 [ 1899.038641][T25941] loop2: unable to read partition table [ 1899.045241][T25941] loop2: partition table beyond EOD, truncated [ 1899.055924][T31618] Dev loop2: unable to read RDB block 7 [ 1899.066119][T31618] loop2: unable to read partition table [ 1899.073601][T31618] loop2: partition table beyond EOD, truncated [ 1899.081206][T31618] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ¾Ú¨â·û) failed (rc=-5) [ 1899.108676][ T5195] Dev loop2: unable to read RDB block 7 [ 1899.116076][ T5195] loop2: unable to read partition table [ 1899.122343][ T5195] loop2: partition table beyond EOD, truncated [ 1899.184488][ T5918] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1899.219885][ T5918] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1899.228877][ T5918] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.241161][T17829] gspca_ov534_9: Unknown sensor 0000 [ 1899.241267][T17829] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1899.285397][T17829] usb 7-1: USB disconnect, device number 123 [ 1899.299883][ T5918] usb 3-1: config 220 has no interface number 2 [ 1899.338507][ T5918] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1899.387478][ T5918] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1899.417025][ T5918] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1899.440376][ T5918] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1899.470218][ T5918] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1899.494807][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.534730][ T5918] usb 3-1: Product: syz [ 1899.538954][ T5918] usb 3-1: Manufacturer: syz [ 1899.558862][ T5918] usb 3-1: SerialNumber: syz [ 1899.816903][ T5918] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1899.827749][ T5918] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1899.857212][ T5918] uvcvideo 3-1:220.0: No valid video chain found. [ 1899.875618][ T5918] usb 3-1: selecting invalid altsetting 0 [ 1899.938396][ T5918] usb 3-1: selecting invalid altsetting 0 [ 1899.951306][ T5918] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1900.009977][T17829] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1900.089869][ T5918] usb 3-1: USB disconnect, device number 84 [ 1900.199870][T17829] usb 7-1: Using ep0 maxpacket: 32 [ 1900.213368][T17829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.228692][T17829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.249590][T17829] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1900.272511][T17829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.297094][T17829] usb 7-1: config 0 descriptor?? [ 1900.336575][T17829] hub 7-1:0.0: USB hub found [ 1900.359924][ T5941] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1900.532152][ T5941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.546365][ T5941] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1900.560590][ T5941] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1900.579650][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.598846][ T5941] usb 6-1: Product: syz [ 1900.609572][ T5941] usb 6-1: Manufacturer: syz [ 1900.618929][ T5941] usb 6-1: SerialNumber: syz [ 1900.645100][ T5941] usb 6-1: config 0 descriptor?? [ 1900.751465][T17829] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1901.126558][ T5918] usb 6-1: USB disconnect, device number 93 [ 1901.512446][T31659] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7301'. [ 1902.468559][T31673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7306'. [ 1902.878598][T31681] input: syz0 as /devices/virtual/input/input153 [ 1903.456277][T17829] usbhid 7-1:0.0: can't add hid device: -71 [ 1903.477934][T17829] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1903.550840][T17829] usb 7-1: USB disconnect, device number 124 [ 1903.714766][T31690] loop2: detected capacity change from 0 to 7 [ 1903.731070][T25884] loop2: p1 [ 1903.734852][T25884] loop2: partition table partially beyond EOD, truncated [ 1903.756187][T25884] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1903.769147][T31690] loop2: p1 [ 1903.772778][T31690] loop2: partition table partially beyond EOD, truncated [ 1903.785239][T31690] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1903.821258][T31691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7314'. [ 1903.839770][T31691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7314'. [ 1904.004796][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1904.081168][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1904.310440][T31698] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7317'. [ 1904.372605][T31698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7317'. [ 1904.436935][T31704] openvswitch: netlink: IP tunnel dst address not specified [ 1904.451082][T31704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7318'. [ 1904.541714][T31703] loop5: detected capacity change from 0 to 4095 [ 1904.586854][T31703] Invalid logical block size (2051) [ 1904.702591][T31698] syzkaller0: entered promiscuous mode [ 1904.708444][T31698] syzkaller0: entered allmulticast mode [ 1905.314700][T31710] loop8: detected capacity change from 0 to 8 [ 1905.358444][T31710] Dev loop8: unable to read RDB block 8 [ 1905.375016][T31710] loop8: unable to read partition table [ 1905.375242][T31710] loop8: partition table beyond EOD, truncated [ 1905.375266][T31710] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1906.183071][T31731] FAULT_INJECTION: forcing a failure. [ 1906.183071][T31731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1906.223793][T31731] CPU: 0 UID: 0 PID: 31731 Comm: syz.5.7327 Tainted: G L syzkaller #0 PREEMPT(full) [ 1906.223830][T31731] Tainted: [L]=SOFTLOCKUP [ 1906.223839][T31731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1906.223853][T31731] Call Trace: [ 1906.223862][T31731] [ 1906.223872][T31731] dump_stack_lvl+0xe8/0x150 [ 1906.223921][T31731] should_fail_ex+0x412/0x560 [ 1906.223954][T31731] _copy_from_user+0x2d/0xb0 [ 1906.223977][T31731] ___sys_sendmsg+0x1c6/0x360 [ 1906.224027][T31731] ? __pfx____sys_sendmsg+0x10/0x10 [ 1906.224075][T31731] ? __fget_files+0x2a/0x420 [ 1906.224098][T31731] ? __fget_files+0x3a0/0x420 [ 1906.224125][T31731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1906.224151][T31731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1906.224186][T31731] ? __pfx_ksys_write+0x10/0x10 [ 1906.224210][T31731] do_syscall_64+0x14d/0xf80 [ 1906.224245][T31731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.224261][T31731] ? clear_bhb_loop+0x40/0x90 [ 1906.224280][T31731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.224296][T31731] RIP: 0033:0x7fab2759c799 [ 1906.224311][T31731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.224324][T31731] RSP: 002b:00007fab257f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1906.224341][T31731] RAX: ffffffffffffffda RBX: 00007fab27816180 RCX: 00007fab2759c799 [ 1906.224352][T31731] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1906.224362][T31731] RBP: 00007fab257f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.224372][T31731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.224381][T31731] R13: 00007fab27816218 R14: 00007fab27816180 R15: 00007fab2793fa48 [ 1906.224404][T31731] [ 1906.994619][T31741] openvswitch: netlink: IP tunnel dst address not specified [ 1907.007401][T31741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7328'. [ 1907.825644][ T5918] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1907.980240][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 1908.001634][ T5918] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1908.012111][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.040335][ T5918] usb 2-1: config 0 descriptor?? [ 1908.059472][ T5918] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1908.259619][ T5918] gspca_sunplus: reg_w_riv err -71 [ 1908.271654][ T5918] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1908.288623][ T5918] usb 2-1: USB disconnect, device number 121 [ 1909.591207][T31763] fuse: Invalid rootmode [ 1911.558562][T31784] loop2: detected capacity change from 0 to 7 [ 1911.574685][T31784] loop2: p1 [ 1911.578180][T31784] loop2: partition table partially beyond EOD, truncated [ 1911.591667][T31784] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1911.989393][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1912.200231][T17829] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1912.341499][T17829] usb 2-1: device descriptor read/64, error -71 [ 1912.510349][T31804] loop2: detected capacity change from 0 to 7 [ 1912.517878][T31804] Dev loop2: unable to read RDB block 7 [ 1912.526537][T31804] loop2: unable to read partition table [ 1912.533155][T31804] loop2: partition table beyond EOD, truncated [ 1912.540386][T31804] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– þ¨â·û) failed (rc=-5) [ 1912.582204][T17829] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1912.693054][T31812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7354'. [ 1912.739996][T17829] usb 2-1: device descriptor read/64, error -71 [ 1912.746514][ T5941] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1912.870170][T17829] usb usb2-port1: attempt power cycle [ 1912.891082][ T9994] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1912.910121][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 1912.917279][ T5941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.927874][ T5941] usb 6-1: config 0 has no interfaces? [ 1912.933537][ T5941] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1912.947805][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.963619][ T5941] usb 6-1: config 0 descriptor?? [ 1913.029767][ T9994] usb 4-1: device descriptor read/64, error -71 [ 1913.072913][T31824] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7359'. [ 1913.119966][ T5941] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1913.206673][ T29] usb 6-1: USB disconnect, device number 94 [ 1913.213083][T17829] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1913.259167][T17829] usb 2-1: device descriptor read/8, error -71 [ 1913.279861][ T9994] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1913.289997][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 1913.321273][ T5941] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.340483][ T5941] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1913.347212][ T5941] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1913.370984][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.385937][ T5941] usb 7-1: config 0 descriptor?? [ 1913.420348][ T9994] usb 4-1: device descriptor read/64, error -71 [ 1913.509873][T17829] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1913.530331][ T9994] usb usb4-port1: attempt power cycle [ 1913.537169][T17829] usb 2-1: device descriptor read/8, error -71 [ 1913.660375][T17829] usb usb2-port1: unable to enumerate USB device [ 1913.689908][ T29] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1913.851701][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.862241][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1913.875459][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1913.884944][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.893390][ T9994] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1913.905154][ T29] usb 6-1: config 0 descriptor?? [ 1913.916874][ T29] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1913.933008][ T9994] usb 4-1: device descriptor read/8, error -71 [ 1914.190060][ T9994] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1914.211990][ T9994] usb 4-1: device descriptor read/8, error -71 [ 1914.232369][ T5941] usbhid 7-1:0.0: can't add hid device: -71 [ 1914.238633][ T5941] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1914.270181][ T5941] usb 7-1: USB disconnect, device number 125 [ 1914.340152][ T9994] usb usb4-port1: unable to enumerate USB device [ 1914.519909][T29320] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1914.669968][T29320] usb 3-1: Using ep0 maxpacket: 32 [ 1914.677395][T29320] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1914.686609][T29320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.697824][T29320] usb 3-1: config 0 descriptor?? [ 1914.709600][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.709719][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.930053][T29320] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1914.944735][T29320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1914.955764][T29320] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1914.963205][T29320] usb 3-1: media controller created [ 1914.985399][T29320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1915.122347][T29320] DVB: Unable to find symbol dib7000p_attach() [ 1915.129162][T29320] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1915.146460][T31851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1915.185933][T31851] netlink: 'syz.1.7365': attribute type 29 has an invalid length. [ 1915.214603][T31851] netlink: 'syz.1.7365': attribute type 29 has an invalid length. [ 1915.234815][T31851] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7365'. [ 1915.260570][T29320] rc_core: IR keymap rc-dib0700-rc5 not found [ 1915.272717][T29320] Registered IR keymap rc-empty [ 1915.287065][T29320] dvb-usb: could not initialize remote control. [ 1915.309846][T29320] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1915.439819][T29320] usb 3-1: USB disconnect, device number 85 [ 1915.518389][T29320] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1915.695433][T31860] netlink: 'syz.6.7368': attribute type 9 has an invalid length. [ 1915.865120][T31867] fuse: Invalid rootmode [ 1916.350598][ T1209] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1916.371344][ T5829] usb 6-1: USB disconnect, device number 95 [ 1916.539857][ T5918] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1916.560558][ T1209] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1916.579458][ T1209] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1916.599447][ T1209] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1916.658504][ T1209] usb 3-1: config 220 has no interface number 2 [ 1916.673414][ T1209] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1916.729896][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 1916.762087][ T5918] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.779928][ T1209] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1916.786894][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1916.871898][T31881] netlink: 'syz.6.7372': attribute type 1 has an invalid length. [ 1916.879891][T31881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7372'. [ 1916.915577][ T1209] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1916.923336][ T5918] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1917.001721][ T1209] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1917.008880][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.022766][ T1209] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1917.032198][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.041860][ T5918] usb 4-1: config 0 descriptor?? [ 1917.050116][ T1209] usb 3-1: Product: syz [ 1917.055059][ T1209] usb 3-1: Manufacturer: syz [ 1917.070088][ T1209] usb 3-1: SerialNumber: syz [ 1917.154713][T31889] netlink: 'syz.5.7376': attribute type 1 has an invalid length. [ 1917.281997][T31889] bond4: entered promiscuous mode [ 1917.298067][T31889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1917.368933][T31889] bond4: (slave bridge3): making interface the new active one [ 1917.387613][T31889] bridge3: entered promiscuous mode [ 1917.414707][T31889] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1918.094847][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 1918.101154][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1918.117618][ T5918] usb 4-1: USB disconnect, device number 9 [ 1918.653302][T31911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1918.668275][T31911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1918.742116][T31911] dummy0: entered promiscuous mode [ 1918.790414][T31911] dummy0: left promiscuous mode [ 1919.078664][T31917] loop8: detected capacity change from 0 to 8 [ 1919.088467][T25884] Dev loop8: unable to read RDB block 8 [ 1919.190993][ T1209] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1919.223346][T25884] loop8: unable to read partition table [ 1919.229041][ T1209] uvcvideo 3-1:220.0: No valid video chain found. [ 1919.241385][T25884] loop8: partition table beyond EOD, truncated [ 1919.255071][ T1209] usb 3-1: selecting invalid altsetting 0 [ 1919.313406][T31917] Dev loop8: unable to read RDB block 8 [ 1919.333916][T31917] loop8: unable to read partition table [ 1919.352708][ T1209] usb 3-1: selecting invalid altsetting 0 [ 1919.359646][T31917] loop8: partition table beyond EOD, [ 1919.359851][T29320] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1919.373913][T31917] truncated [ 1919.378640][T31917] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1919.396824][ T1209] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1919.415799][ T1209] usb 3-1: USB disconnect, device number 86 [ 1919.558661][T29320] usb 2-1: Using ep0 maxpacket: 32 [ 1919.578418][T29320] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1919.610024][T29320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.673207][T29320] usb 2-1: config 0 descriptor?? [ 1919.902384][T29320] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1919.914592][T31927] syzkaller0: entered promiscuous mode [ 1919.930884][T31927] syzkaller0: entered allmulticast mode [ 1919.953905][T29320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1920.008629][T29320] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1920.016157][T31927] tipc: Bearer : already 2 bearers with priority 0 [ 1920.016179][T31927] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1920.103150][T29320] usb 2-1: media controller created [ 1920.144124][T29320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1920.247799][T31932] loop5: detected capacity change from 0 to 4095 [ 1920.281166][T31932] Invalid logical block size (2051) [ 1920.358582][T29320] DVB: Unable to find symbol dib7000p_attach() [ 1920.382398][T29320] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1920.554032][T31942] vlan0: entered promiscuous mode [ 1920.569761][T29320] rc_core: IR keymap rc-dib0700-rc5 not found [ 1920.576062][T29320] Registered IR keymap rc-empty [ 1920.585023][T29320] dvb-usb: could not initialize remote control. [ 1920.600567][T29320] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1920.611811][T29320] usb 2-1: USB disconnect, device number 126 [ 1920.662288][T31946] netlink: 'syz.5.7394': attribute type 1 has an invalid length. [ 1920.727961][T29320] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1921.514145][T31967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7399'. [ 1921.710055][T31967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7399'. [ 1921.900004][T26897] Bluetooth: hci1: command 0x0406 tx timeout [ 1922.077789][T31979] netlink: 'syz.6.7403': attribute type 1 has an invalid length. [ 1922.132454][T31981] erspan1: entered allmulticast mode [ 1922.401572][T31979] bond2: entered promiscuous mode [ 1922.481744][T31979] bond2: entered allmulticast mode [ 1922.499380][T31979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1922.913821][T32004] netlink: 'syz.6.7409': attribute type 4 has an invalid length. [ 1923.067446][ T1209] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1923.254837][ T1209] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 1923.318730][ T1209] usb 3-1: config 0 has no interface number 0 [ 1923.355143][ T1209] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1923.442666][ T1209] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1923.465296][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.480654][ T1209] usb 3-1: Product: syz [ 1923.488353][ T1209] usb 3-1: Manufacturer: syz [ 1923.496502][ T1209] usb 3-1: SerialNumber: syz [ 1923.518883][ T1209] usb 3-1: config 0 descriptor?? [ 1923.540328][T31992] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1923.569353][ T1209] ums-karma 3-1:0.46: USB Mass Storage device detected [ 1923.712260][ T1209] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 1923.783741][ T1209] usb 3-1: USB disconnect, device number 87 [ 1923.962280][T32017] syzkaller0: entered promiscuous mode [ 1923.967932][T32017] syzkaller0: entered allmulticast mode [ 1923.978396][T32017] tipc: Bearer : already 2 bearers with priority 0 [ 1923.986970][T32017] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1924.191778][T32023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1924.205128][T32023] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1924.432167][T32027] tipc: Cannot configure node identity twice [ 1924.438567][T32027] tipc: Cannot configure node identity twice [ 1924.692602][ T5941] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1924.889868][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 1924.898162][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1924.942452][ T5941] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 1924.959592][ T5941] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.969955][ T1209] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1924.995078][ T5941] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1925.021679][T32038] loop2: detected capacity change from 0 to 7 [ 1925.029847][ T5941] usb 2-1: config 128 has no interface number 0 [ 1925.041326][T32038] Dev loop2: unable to read RDB block 7 [ 1925.056009][T32038] loop2: unable to read partition table [ 1925.064953][ T5941] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 139, changing to 11 [ 1925.084144][T32038] loop2: partition table beyond EOD, truncated [ 1925.101468][ T5941] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 18351, setting to 1024 [ 1925.102143][T32038] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ïÿ¨â·û) failed (rc=-5) [ 1925.123521][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 1925.153950][ T1209] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1925.162025][ T5941] usb 2-1: config 128 interface 127 has no altsetting 0 [ 1925.177817][ T5941] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1925.187550][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.195950][ T5941] usb 2-1: Product: syz [ 1925.200823][ T5941] usb 2-1: Manufacturer: syz [ 1925.205487][ T5941] usb 2-1: SerialNumber: syz [ 1925.223041][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.232723][T32027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1925.260828][ T1209] usb 4-1: config 0 descriptor?? [ 1925.271401][ T5195] Dev loop2: unable to read RDB block 7 [ 1925.287445][ T5195] loop2: unable to read partition table [ 1925.323166][ T5195] loop2: partition table beyond EOD, truncated [ 1925.518780][ T1209] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1925.594884][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1925.668955][T32047] binder: BINDER_SET_CONTEXT_MGR already set [ 1925.681410][ T1209] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1925.719600][ T1209] usb 4-1: media controller created [ 1925.735532][T32047] binder: 32046:32047 ioctl 4018620d 2000000002c0 returned -16 [ 1925.810229][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1926.079352][ T5941] usb 2-1: USB disconnect, device number 127 [ 1926.128408][T32056] fuse: Unknown parameter 'nd' [ 1926.158224][ T1209] DVB: Unable to find symbol dib7000p_attach() [ 1926.166789][T25941] udevd[25941]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1926.182275][ T1209] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1926.240098][T32056] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7427'. [ 1926.249138][T32056] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7427'. [ 1926.317466][T32056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7427'. [ 1926.411121][ T1209] rc_core: IR keymap rc-dib0700-rc5 not found [ 1926.425631][ T1209] Registered IR keymap rc-empty [ 1926.445587][ T1209] dvb-usb: could not initialize remote control. [ 1926.478072][T32064] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7430'. [ 1926.531782][ T1209] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1926.562491][ T1209] usb 4-1: USB disconnect, device number 10 [ 1926.681749][ T1209] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1927.421348][T32085] vlan0: entered promiscuous mode [ 1929.144748][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7441'. [ 1930.515089][ T30] audit: type=1326 audit(1772382447.731:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1930.613719][ T30] audit: type=1326 audit(1772382447.731:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1930.636817][ T30] audit: type=1326 audit(1772382447.761:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1930.709840][ T30] audit: type=1326 audit(1772382447.771:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1930.732874][ T30] audit: type=1326 audit(1772382447.771:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1930.857451][ T30] audit: type=1326 audit(1772382447.771:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1930.881968][ T30] audit: type=1326 audit(1772382447.771:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1930.986707][ T30] audit: type=1326 audit(1772382447.771:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1931.011267][ T30] audit: type=1326 audit(1772382447.781:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1931.034432][ T30] audit: type=1326 audit(1772382447.791:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32137 comm="syz.3.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa5d6b9c799 code=0x7ffc0000 [ 1931.209834][ T5941] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1931.379920][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 1931.388228][ T5941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1932.029957][ T5941] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1932.062300][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.097188][ T5941] usb 2-1: Product: syz [ 1932.109824][ T5941] usb 2-1: Manufacturer: syz [ 1932.124732][ T5941] usb 2-1: SerialNumber: syz [ 1932.196446][T32159] openvswitch: netlink: IP tunnel dst address not specified [ 1932.261047][ T5941] usb 2-1: config 0 descriptor?? [ 1932.369212][ T5941] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1932.396737][ T5941] usb 2-1: Detected FT232R [ 1932.599818][ T5941] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1932.696178][ T5941] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1932.853992][T32166] netlink: 'syz.2.7459': attribute type 9 has an invalid length. [ 1932.868002][ T5941] usb 2-1: USB disconnect, device number 2 [ 1932.893389][ T5941] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1932.949609][ T5941] ftdi_sio 2-1:0.0: device disconnected [ 1933.780936][T32175] vlan2: entered promiscuous mode [ 1934.453282][T32197] bond3: Removing last ns target with arp_interval on [ 1935.314675][T32214] x_tables: duplicate underflow at hook 1 [ 1936.329782][ T5918] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1936.501508][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 1936.511161][ T5918] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1936.523720][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.590846][ T5918] usb 3-1: config 0 descriptor?? [ 1936.810708][ T5918] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1936.893784][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1936.947842][ T5918] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1936.978818][ T5918] usb 3-1: media controller created [ 1937.063441][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1937.410311][ T5918] DVB: Unable to find symbol dib7000p_attach() [ 1937.410332][ T5918] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1937.559980][ T5918] rc_core: IR keymap rc-dib0700-rc5 not found [ 1937.566354][ T5918] Registered IR keymap rc-empty [ 1937.581858][ T5918] dvb-usb: could not initialize remote control. [ 1937.588193][ T5918] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1937.632507][ T5918] usb 3-1: USB disconnect, device number 88 [ 1937.777373][ T5918] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1937.870545][T32288] vlan2: entered promiscuous mode [ 1937.889912][ T5941] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1938.056976][T32295] loop8: detected capacity change from 0 to 8 [ 1938.072465][T32295] Dev loop8: unable to read RDB block 8 [ 1938.081147][T32295] loop8: unable to read partition table [ 1938.094481][T32295] loop8: partition table beyond EOD, truncated [ 1938.119294][T32295] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1938.139907][ T5941] usb 2-1: device descriptor read/64, error -71 [ 1938.411831][ T5941] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1938.560797][ T5941] usb 2-1: device descriptor read/64, error -71 [ 1938.670655][ T5941] usb usb2-port1: attempt power cycle [ 1939.015829][ T5941] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1939.060663][ T5941] usb 2-1: device descriptor read/8, error -71 [ 1939.259714][T32317] veth0_to_bridge: entered promiscuous mode [ 1939.279347][T32317] macvtap1: entered promiscuous mode [ 1939.297250][T32317] macvtap1: entered allmulticast mode [ 1939.313289][T32317] veth0_to_bridge: entered allmulticast mode [ 1939.329900][ T5941] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1939.346046][T32317] veth0_to_bridge: left allmulticast mode [ 1939.368848][T32317] veth0_to_bridge: left promiscuous mode [ 1939.400507][ T5941] usb 2-1: device descriptor read/8, error -71 [ 1939.515170][ T5941] usb usb2-port1: unable to enumerate USB device [ 1939.583804][T32328] netlink: 'syz.3.7509': attribute type 1 has an invalid length. [ 1939.604908][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7510'. [ 1939.679887][T32334] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1939.696769][T32334] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 1939.716576][T32335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7511'. [ 1940.212121][T32344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1941.124584][T32354] loop2: detected capacity change from 0 to 7 [ 1941.131832][T32354] loop2: p1 [ 1941.135119][T32354] loop2: partition table partially beyond EOD, truncated [ 1941.142715][T32354] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1941.257576][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1941.517622][T32358] netlink: 'syz.2.7519': attribute type 9 has an invalid length. [ 1941.708772][T32364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7522'. [ 1942.111099][T32368] loop2: detected capacity change from 0 to 7 [ 1942.134456][T25941] Dev loop2: unable to read RDB block 7 [ 1942.140210][T25941] loop2: unable to read partition table [ 1942.150649][T25941] loop2: partition table beyond EOD, truncated [ 1942.177876][T32368] Dev loop2: unable to read RDB block 7 [ 1942.187100][T32368] loop2: unable to read partition table [ 1942.193986][T32373] netlink: 'syz.6.7525': attribute type 27 has an invalid length. [ 1942.202905][T32368] loop2: partition table beyond EOD, truncated [ 1942.209349][T32368] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1942.227291][T32375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7526'. [ 1942.236830][T32375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7526'. [ 1942.616444][T32383] bond5: Removing last ns target with arp_interval on [ 1942.644239][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 1942.644254][ T30] audit: type=1326 audit(1772382459.861:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32385 comm="syz.1.7529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f057bd9c799 code=0x0 [ 1943.840308][T32401] fuse: Invalid rootmode [ 1943.961119][T32403] openvswitch: netlink: IP tunnel dst address not specified [ 1943.972659][T32403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7532'. [ 1944.037704][T32405] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7533'. [ 1944.604599][T32416] loop5: detected capacity change from 0 to 4095 [ 1944.695337][T32417] Invalid logical block size (2051) [ 1945.519848][T16971] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1945.600713][ T30] audit: type=1326 audit(1772382462.811:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32426 comm="syz.6.7541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b8c99c799 code=0x0 [ 1945.669768][T16971] usb 6-1: Using ep0 maxpacket: 16 [ 1945.681335][T16971] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1945.704123][T16971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.722264][T16971] usb 6-1: Product: syz [ 1945.731216][T16971] usb 6-1: Manufacturer: syz [ 1945.741729][T16971] usb 6-1: SerialNumber: syz [ 1945.758249][T16971] usb 6-1: config 0 descriptor?? [ 1945.779820][T16971] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1945.807959][T32432] netlink: 'syz.3.7543': attribute type 9 has an invalid length. [ 1945.932549][T32439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7546'. [ 1945.959267][T32441] netlink: 'syz.1.7545': attribute type 1 has an invalid length. [ 1945.986962][T16971] usb 6-1: clie_3_5_startup: get config number bad return length: 0 [ 1946.011490][T16971] visor 6-1:0.0: probe with driver visor failed with error -5 [ 1946.081353][T32441] bond8: entered promiscuous mode [ 1946.092429][T32441] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1946.101946][T32447] loop2: detected capacity change from 0 to 7 [ 1946.110072][T32447] Dev loop2: unable to read RDB block 7 [ 1946.119972][T32447] loop2: unable to read partition table [ 1946.126117][T32447] loop2: partition table beyond EOD, truncated [ 1946.138872][T32441] bond8: (slave bridge0): making interface the new active one [ 1946.147849][T32447] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1946.172484][T32441] bridge0: entered promiscuous mode [ 1946.178941][T32441] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 1946.194498][T17829] usb 6-1: USB disconnect, device number 96 [ 1946.329957][ T5941] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1946.355185][T32452] vlan2: entered promiscuous mode [ 1946.440322][T32456] Cannot find del_set index 0 as target [ 1946.480125][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 1946.512193][ T5941] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1946.532088][ T5941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1946.546238][ T5941] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1946.557362][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.577079][ T5941] usb 3-1: config 0 descriptor?? [ 1946.654488][T32462] macvtap1: entered promiscuous mode [ 1946.660414][T32462] veth0_to_bridge: entered promiscuous mode [ 1946.666891][T32462] macvtap1: entered allmulticast mode [ 1946.672686][T32462] veth0_to_bridge: entered allmulticast mode [ 1946.680881][T32462] veth0_to_bridge: left allmulticast mode [ 1946.686654][T32462] veth0_to_bridge: left promiscuous mode [ 1946.831758][ T5918] usb 7-1: new full-speed USB device number 126 using dummy_hcd [ 1946.845856][T32469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1946.924139][T32469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.993323][ T5918] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1947.010702][ T5918] usb 7-1: not running at top speed; connect to a high speed hub [ 1947.027110][ T5941] hid_parser_main: 3 callbacks suppressed [ 1947.027136][ T5941] nzxt-smart2 0003:1E71:2009.0052: unknown main item tag 0x0 [ 1947.061582][ T5918] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1947.070070][T17829] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1947.071175][ T5918] usb 7-1: can't read configurations, error -61 [ 1947.120692][ T5941] nzxt-smart2 0003:1E71:2009.0052: unknown main item tag 0x0 [ 1947.141637][ T5941] nzxt-smart2 0003:1E71:2009.0052: unknown main item tag 0x0 [ 1947.163250][ T5941] nzxt-smart2 0003:1E71:2009.0052: unknown main item tag 0x0 [ 1947.250478][ T5941] nzxt-smart2 0003:1E71:2009.0052: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1947.252669][ T5918] usb 7-1: new full-speed USB device number 127 using dummy_hcd [ 1947.322547][ C1] usb 3-1: input irq status -75 received [ 1947.344250][T32479] syzkaller0: entered promiscuous mode [ 1947.350983][T32479] syzkaller0: entered allmulticast mode [ 1947.440138][ T5918] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1947.448575][ T5941] usb 3-1: USB disconnect, device number 89 [ 1947.455233][ T5918] usb 7-1: not running at top speed; connect to a high speed hub [ 1947.475115][ T5918] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1947.513019][ T5918] usb 7-1: can't read configurations, error -61 [ 1947.534404][ T5918] usb usb7-port1: attempt power cycle [ 1947.564404][T32477] fido_id[32477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1947.889821][ T5918] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1947.924715][ T5918] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1947.934657][ T5918] usb 7-1: not running at top speed; connect to a high speed hub [ 1947.965509][ T5918] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1947.984863][ T5918] usb 7-1: can't read configurations, error -61 [ 1948.146917][ T5918] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1948.189949][ T5918] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1948.210671][ T5918] usb 7-1: not running at top speed; connect to a high speed hub [ 1948.221230][ T30] audit: type=1326 audit(1772382465.431:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32486 comm="syz.5.7562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab2759c799 code=0x0 [ 1948.257508][ T5918] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1948.270633][ T5918] usb 7-1: can't read configurations, error -61 [ 1948.283149][ T5918] usb usb7-port1: unable to enumerate USB device [ 1948.867468][ T5941] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1948.876654][T32510] loop2: detected capacity change from 0 to 7 [ 1948.884954][T32510] Dev loop2: unable to read RDB block 7 [ 1948.891583][T32510] loop2: unable to read partition table [ 1948.897687][T32510] loop2: partition table beyond EOD, truncated [ 1948.904835][T32510] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1949.027817][T32512] netlink: 'syz.2.7571': attribute type 1 has an invalid length. [ 1949.040286][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 1949.125053][T32512] bond2: entered promiscuous mode [ 1949.131231][ T5941] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1949.140735][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.158642][T32512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1949.197245][ T5941] usb 2-1: config 0 descriptor?? [ 1949.245680][T32514] bond2: (slave bridge2): making interface the new active one [ 1949.266110][T32514] bridge2: entered promiscuous mode [ 1949.286247][T32514] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1949.458682][ T5941] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1949.495783][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1949.528420][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1949.537748][ T5941] usb 2-1: media controller created [ 1949.679420][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1949.757710][T32523] loop2: detected capacity change from 0 to 7 [ 1949.765077][T32523] loop2: p1 [ 1949.768320][T32523] loop2: partition table partially beyond EOD, truncated [ 1949.777513][T32523] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1949.833451][T32529] vlan0: entered promiscuous mode [ 1949.938588][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1949.984078][ T5941] DVB: Unable to find symbol dib7000p_attach() [ 1949.999012][ T5941] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1950.161366][ T5941] rc_core: IR keymap rc-dib0700-rc5 not found [ 1950.175965][ T5941] Registered IR keymap rc-empty [ 1950.188012][ T5941] dvb-usb: could not initialize remote control. [ 1950.202341][ T5941] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1950.255309][ T5941] usb 2-1: USB disconnect, device number 7 [ 1950.313878][T32538] veth0_to_bridge: entered promiscuous mode [ 1950.335981][T32538] macvtap1: entered promiscuous mode [ 1950.358658][ T5941] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1950.368518][T32538] macvtap1: entered allmulticast mode [ 1950.381717][T32541] ptrace attach of "./syz-executor exec"[29818] was attempted by "./syz-executor exec"[32541] [ 1950.394056][T32538] veth0_to_bridge: entered allmulticast mode [ 1950.413453][T32538] veth0_to_bridge: left allmulticast mode [ 1950.419898][T32538] veth0_to_bridge: left promiscuous mode [ 1950.769865][ T5941] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1951.071350][ T5941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1951.121585][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1951.205262][ T5941] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1951.217720][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1951.239838][T16971] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1951.393822][T32559] tipc: Enabled bearer , priority 0 [ 1951.439094][T32559] syzkaller0: entered promiscuous mode [ 1951.478458][T32559] syzkaller0: entered allmulticast mode [ 1951.495962][T32559] tipc: Resetting bearer [ 1951.512643][ T5941] usb 3-1: SerialNumber: syz [ 1951.518083][T32558] tipc: Resetting bearer [ 1951.603171][T16971] usb 2-1: Using ep0 maxpacket: 8 [ 1951.644643][T16971] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1951.671942][T32558] tipc: Disabling bearer [ 1951.680751][T16971] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1951.696066][T16971] usb 2-1: string descriptor 0 read error: -22 [ 1951.710485][T16971] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1951.745718][T16971] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1951.837425][T32546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1951.850839][T32546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1951.925646][T16971] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1951.941602][T16971] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1951.967147][T16971] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1952.034884][T16971] usb 2-1: media controller created [ 1952.088000][T16971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1952.113227][T32556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1952.130410][T32556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.186493][T32556] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7583'. [ 1952.269571][T32568] netlink: 'syz.5.7587': attribute type 9 has an invalid length. [ 1952.280162][T32569] loop2: detected capacity change from 0 to 7 [ 1952.287758][T32569] loop2: p1 [ 1952.296790][T32569] loop2: partition table partially beyond EOD, truncated [ 1952.327277][T32569] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1952.551274][T25884] udevd[25884]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1952.847447][T32578] netlink: 'syz.3.7592': attribute type 1 has an invalid length. [ 1953.018981][T32578] bond13: entered promiscuous mode [ 1953.053171][T32578] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1953.103297][T32578] bond13: (slave bridge6): making interface the new active one [ 1953.111446][T32578] bridge6: entered promiscuous mode [ 1953.118947][T32578] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 1953.133945][T32583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7593'. [ 1953.264451][T16971] zl10353_read_register: readreg error (reg=127, ret==0) [ 1953.379449][T32590] syzkaller0: entered promiscuous mode [ 1953.387782][T32590] syzkaller0: entered allmulticast mode [ 1953.415646][T32587] tipc: Enabled bearer , priority 0 [ 1953.448538][T32586] tipc: Resetting bearer [ 1953.476822][T16971] usb 2-1: USB disconnect, device number 8 [ 1953.583353][T32586] tipc: Disabling bearer [ 1953.803146][T32594] vlan2: entered promiscuous mode [ 1953.993218][ T5941] usb 3-1: 0:2 : does not exist [ 1954.133306][ T5941] usb 3-1: USB disconnect, device number 90 [ 1954.247309][T25941] udevd[25941]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1954.355370][T32616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7605'. [ 1954.374936][T32616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7605'. [ 1954.391504][T32622] fuse: Invalid rootmode [ 1954.498343][T32616] dummy0: entered promiscuous mode [ 1954.661854][T32616] dummy0: left promiscuous mode [ 1954.764827][T32614] loop5: detected capacity change from 0 to 4095 [ 1954.979925][ T5941] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1955.168603][ T5941] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1955.178978][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.217164][T32631] syzkaller0: entered promiscuous mode [ 1955.223633][ T5941] usb 3-1: Product: syz [ 1955.227851][ T5941] usb 3-1: Manufacturer: syz [ 1955.239777][T32631] syzkaller0: entered allmulticast mode [ 1955.259869][ T5941] usb 3-1: SerialNumber: syz [ 1955.297785][T32631] tipc: Enabled bearer , priority 0 [ 1955.306703][ T5941] usb 3-1: config 0 descriptor?? [ 1955.328605][T32634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7610'. [ 1955.339106][T32628] tipc: Resetting bearer [ 1955.369139][T32634] netlink: 'syz.6.7610': attribute type 5 has an invalid length. [ 1955.425844][T32634] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7610'. [ 1955.461551][T32628] tipc: Disabling bearer [ 1955.528037][ T5941] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1955.575278][T32640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7612'. [ 1955.584963][T32640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7612'. [ 1955.659029][T32642] netlink: 'syz.6.7613': attribute type 9 has an invalid length. [ 1955.907748][T32650] netlink: 'syz.1.7617': attribute type 1 has an invalid length. [ 1955.960167][T32655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7619'. [ 1955.988799][T32650] bond9: entered promiscuous mode [ 1956.054529][T32650] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1956.165319][T32650] bond9: (slave bridge6): making interface the new active one [ 1956.173107][T32650] bridge6: entered promiscuous mode [ 1956.181163][T32650] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 1956.197965][T32661] vlan2: entered promiscuous mode [ 1956.449507][T32672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.494577][T32672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.530225][T32672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.584058][T32672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.670384][T17829] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1956.810215][ T29] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1956.818090][T17829] usb 2-1: device descriptor read/64, error -71 [ 1956.830993][ T1209] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1956.969855][ T1209] usb 7-1: device descriptor read/64, error -71 [ 1956.975727][ T29] usb 6-1: config index 0 descriptor too short (expected 274, got 18) [ 1956.987419][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.998291][ T29] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1957.013026][ T29] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1957.022935][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.031944][ T29] usb 6-1: Product: syz [ 1957.036472][ T29] usb 6-1: Manufacturer: syz [ 1957.044465][ T29] usb 6-1: SerialNumber: syz [ 1957.059759][T17829] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1957.068059][ T29] usb 6-1: config 0 descriptor?? [ 1957.201507][T17829] usb 2-1: device descriptor read/64, error -71 [ 1957.219809][ T1209] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1957.318615][T17829] usb usb2-port1: attempt power cycle [ 1957.369789][ T1209] usb 7-1: device descriptor read/64, error -71 [ 1957.480119][ T1209] usb usb7-port1: attempt power cycle [ 1957.552746][T32625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1957.561886][T32625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1957.573724][ T5941] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1957.591795][ T5941] usb 3-1: USB disconnect, device number 91 [ 1957.659871][T17829] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1957.680496][T17829] usb 2-1: device descriptor read/8, error -71 [ 1957.729786][ T5918] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1957.830084][ T1209] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1957.850490][ T1209] usb 7-1: device descriptor read/8, error -71 [ 1957.879818][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 1957.891769][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.914017][ T5918] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1957.924761][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.930156][T17829] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1957.937093][ T5918] usb 4-1: Product: syz [ 1957.945016][ T5918] usb 4-1: Manufacturer: syz [ 1957.949893][ T5918] usb 4-1: SerialNumber: syz [ 1957.957465][ T5918] usb 4-1: config 0 descriptor?? [ 1957.970530][T17829] usb 2-1: device descriptor read/8, error -71 [ 1957.975692][ T5918] gs_usb 4-1:0.0: Required endpoints not found [ 1957.998593][ T5941] usb 6-1: USB disconnect, device number 98 [ 1958.080178][T17829] usb usb2-port1: unable to enumerate USB device [ 1958.090261][ T1209] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1958.120677][ T1209] usb 7-1: device descriptor read/8, error -71 [ 1958.172047][T17829] usb 4-1: USB disconnect, device number 11 [ 1958.216129][T32694] vlan0: entered promiscuous mode [ 1958.240090][ T1209] usb usb7-port1: unable to enumerate USB device [ 1958.427507][T32700] loop5: detected capacity change from 0 to 4095 [ 1958.450257][T32700] Invalid logical block size (2051) [ 1958.920649][ T1209] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1959.092695][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 1959.106215][ T1209] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1959.125752][ T1209] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 64 [ 1959.149080][ T1209] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1959.182436][ T1209] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1959.200792][ T1209] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1959.215721][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.234876][ T1209] usb 6-1: Product: syz [ 1959.245463][ T1209] usb 6-1: Manufacturer: á°¶ [ 1959.256936][ T1209] usb 6-1: SerialNumber: syz [ 1959.283324][T32703] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1959.303488][T32703] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1959.660573][ T1209] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1959.724615][ T1209] usb 6-1: USB disconnect, device number 99 [ 1959.973502][T32725] netlink: 'syz.1.7644': attribute type 1 has an invalid length. [ 1960.149099][T32725] bond10: entered promiscuous mode [ 1960.226722][T32725] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1960.422758][T32738] bond10: (slave bridge7): making interface the new active one [ 1960.469429][T32738] bridge7: entered promiscuous mode [ 1960.514678][T32738] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 1960.904076][T32744] vlan2: entered promiscuous mode [ 1960.947393][T32751] input: syz0 as /devices/virtual/input/input160 [ 1961.070275][ T5918] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1961.181093][ T1209] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1961.242273][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.265513][ T5918] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1961.284743][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.305363][ T5918] usb 4-1: config 0 descriptor?? [ 1961.339209][ T5918] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1961.425940][ T1209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.445713][T17829] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1961.469817][ T1209] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1961.483692][ T1209] usb 3-1: New USB device found, idVendor=0009, idProduct=2250, bcdDevice= 0.01 [ 1961.495291][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.506578][ T1209] usb 3-1: Product: syz [ 1961.519384][ T1209] usb 3-1: Manufacturer: syz [ 1961.527489][ T1209] usb 3-1: SerialNumber: syz [ 1961.540901][ T1209] usb 3-1: config 0 descriptor?? [ 1961.621585][T17829] usb 6-1: not running at top speed; connect to a high speed hub [ 1961.660356][T17829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.670968][T17829] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1961.687132][T17829] usb 6-1: config 1 has no interface number 1 [ 1961.699790][T17829] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1961.742761][T17829] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1961.788036][T17829] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1961.824835][T17829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.859880][T17829] usb 6-1: Product: syz [ 1961.864223][T17829] usb 6-1: Manufacturer: syz [ 1961.871579][T17829] usb 6-1: SerialNumber: syz [ 1961.919347][ T29] usb 4-1: USB disconnect, device number 12 [ 1962.116350][T17829] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1962.138370][T17829] usb 6-1: 2:1: invalid format type 0x1022 is detected, processed as PCM [ 1962.172988][T17829] usb 6-1: 2:1 : sample bitwidth 43 in over sample bytes 4 [ 1962.355817][T17829] usb 6-1: USB disconnect, device number 100 [ 1962.890300][T17829] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1963.069791][T17829] usb 4-1: Using ep0 maxpacket: 8 [ 1963.117818][T17829] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1963.261583][T17829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.272902][ T29] usb 3-1: USB disconnect, device number 92 [ 1963.382061][T17829] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1963.403987][T17829] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1963.413773][T17829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.425651][T17829] usb 4-1: Product: syz [ 1963.430536][T17829] usb 4-1: Manufacturer: syz [ 1963.435345][T17829] usb 4-1: SerialNumber: syz [ 1963.452004][T17829] usb 4-1: config 0 descriptor?? [ 1963.506401][ T320] loop8: detected capacity change from 0 to 8 [ 1963.516561][T25941] Dev loop8: unable to read RDB block 8 [ 1963.522784][T25941] loop8: unable to read partition table [ 1963.528863][T25941] loop8: partition table beyond EOD, truncated [ 1963.537572][ T320] Dev loop8: unable to read RDB block 8 [ 1963.545112][ T320] loop8: unable to read partition table [ 1963.553963][ T320] loop8: partition table beyond EOD, truncated [ 1963.561220][ T320] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1963.662942][ T310] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1963.740215][ T5918] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1963.920702][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 1963.927757][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1963.952356][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1963.980000][ T5918] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1964.015714][ T5918] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1964.040107][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.080860][ T5918] usb 7-1: config 0 descriptor?? [ 1964.191289][ T337] FAULT_INJECTION: forcing a failure. [ 1964.191289][ T337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1964.229956][ T337] CPU: 1 UID: 0 PID: 337 Comm: syz.2.7671 Tainted: G L syzkaller #0 PREEMPT(full) [ 1964.229988][ T337] Tainted: [L]=SOFTLOCKUP [ 1964.229997][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1964.230010][ T337] Call Trace: [ 1964.230019][ T337] [ 1964.230029][ T337] dump_stack_lvl+0xe8/0x150 [ 1964.230064][ T337] should_fail_ex+0x412/0x560 [ 1964.230097][ T337] _copy_from_user+0x2d/0xb0 [ 1964.230140][ T337] video_usercopy+0x36f/0x14b0 [ 1964.230175][ T337] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1964.230200][ T337] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 1964.230340][ T337] ? __pfx_video_usercopy+0x10/0x10 [ 1964.230376][ T337] ? __fget_files+0x2a/0x420 [ 1964.230410][ T337] ? __fget_files+0x2a/0x420 [ 1964.230439][ T337] ? __fget_files+0x3a0/0x420 [ 1964.230473][ T337] v4l2_ioctl+0x18d/0x1e0 [ 1964.230506][ T337] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1964.230530][ T337] __se_sys_ioctl+0xfc/0x170 [ 1964.230557][ T337] do_syscall_64+0x14d/0xf80 [ 1964.230577][ T337] ? trace_irq_disable+0x3b/0x150 [ 1964.230609][ T337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1964.230631][ T337] ? clear_bhb_loop+0x40/0x90 [ 1964.230656][ T337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1964.230678][ T337] RIP: 0033:0x7f361c59c799 [ 1964.230699][ T337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1964.230718][ T337] RSP: 002b:00007f361d4fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1964.230741][ T337] RAX: ffffffffffffffda RBX: 00007f361c815fa0 RCX: 00007f361c59c799 [ 1964.230756][ T337] RDX: 0000200000000380 RSI: 00000000c02c5625 RDI: 0000000000000003 [ 1964.230770][ T337] RBP: 00007f361d4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1964.230784][ T337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1964.230796][ T337] R13: 00007f361c816038 R14: 00007f361c815fa0 R15: 00007f361c93fa48 [ 1964.230830][ T337] [ 1964.555656][ T341] loop2: detected capacity change from 0 to 7 [ 1964.566999][T25941] loop2: p1 [ 1964.571490][T25941] loop2: partition table partially beyond EOD, truncated [ 1964.580713][T25941] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1964.599935][ T341] loop2: p1 [ 1964.603403][ T341] loop2: partition table partially beyond EOD, truncated [ 1964.610997][ T341] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1964.685525][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1964.723926][ T5918] HID 045e:07da: Invalid code 65791 type 1 [ 1964.786586][ T5918] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0053/input/input161 [ 1964.853001][ T5918] microsoft 0003:045E:07DA.0053: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1964.867444][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1965.026530][ T5918] usb 7-1: USB disconnect, device number 8 [ 1965.095446][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1965.265479][ T346] fido_id[346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1965.631563][T29320] usb 4-1: USB disconnect, device number 13 [ 1965.696371][ T353] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7676'. [ 1965.838737][ T356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7677'. [ 1965.849375][ T358] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7678'. [ 1965.869845][ T358] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7678'. [ 1965.893112][ T358] dummy0: entered promiscuous mode [ 1965.918088][ T358] debugfs: 'hsr1' already exists in 'hsr' [ 1965.929879][ T358] Cannot create hsr debugfs directory [ 1966.141981][ T29] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1966.190752][ T370] vlan2: entered promiscuous mode [ 1966.369220][ T376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1966.383507][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1966.395440][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 1966.406780][ T29] usb 4-1: config 197 has an invalid interface number: 211 but max is 0 [ 1966.421947][ T376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1966.432838][ T29] usb 4-1: config 197 has no interface number 0 [ 1966.439880][ T29] usb 4-1: config 197 interface 211 has no altsetting 0 [ 1966.495761][ T29] usb 4-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=3f.c6 [ 1966.505454][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.515819][ T29] usb 4-1: Product: syz [ 1966.520663][ T29] usb 4-1: Manufacturer: syz [ 1966.551443][ T29] usb 4-1: SerialNumber: syz [ 1966.825107][ T29] upd78f0730 4-1:197.211: upd78f0730 converter detected [ 1966.839090][ T29] usb 4-1: upd78f0730 converter now attached to ttyUSB0 [ 1966.870980][ T29] usb 4-1: USB disconnect, device number 14 [ 1966.951841][ T29] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1966.985425][ T29] upd78f0730 4-1:197.211: device disconnected [ 1967.979304][ T400] loop5: detected capacity change from 0 to 4095 [ 1968.029284][ T400] Invalid logical block size (2051) [ 1968.057155][ T403] veth0_to_bridge: entered promiscuous mode [ 1968.113814][ T403] macvtap1: entered promiscuous mode [ 1968.129604][ T403] macvtap1: entered allmulticast mode [ 1968.136969][ T403] veth0_to_bridge: entered allmulticast mode [ 1968.216065][ T403] veth0_to_bridge: left allmulticast mode [ 1968.235085][ T403] veth0_to_bridge: left promiscuous mode [ 1968.322437][ T409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7697'. [ 1968.549921][ T29] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1968.706619][ T421] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7702'. [ 1968.724241][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.743626][ T29] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1968.775103][ T425] loop2: detected capacity change from 0 to 7 [ 1968.783328][ T29] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1968.806297][T25941] Dev loop2: unable to read RDB block 7 [ 1968.808145][ T427] xt_hashlimit: size too large, truncated to 1048576 [ 1968.818890][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.820174][T25941] loop2: unable to read partition table [ 1968.840188][ T29] usb 6-1: Product: syz [ 1968.844605][ T29] usb 6-1: Manufacturer: syz [ 1968.849473][ T29] usb 6-1: SerialNumber: syz [ 1968.872677][T25941] loop2: partition table beyond EOD, truncated [ 1968.890120][ T425] Dev loop2: unable to read RDB block 7 [ 1968.899574][ T29] usb 6-1: config 0 descriptor?? [ 1968.917303][ T425] loop2: unable to read partition table [ 1968.929216][ T425] loop2: partition table beyond EOD, truncated [ 1968.950333][ T425] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1969.064967][ T433] macvtap1: entered promiscuous mode [ 1969.090106][ T433] veth0_to_bridge: entered promiscuous mode [ 1969.096679][ T433] macvtap1: entered allmulticast mode [ 1969.108493][ T433] veth0_to_bridge: entered allmulticast mode [ 1969.131875][ T434] usb usb8: usbfs: process 434 (syz.2.7703) did not claim interface 0 before use [ 1969.154529][ T433] veth0_to_bridge: left allmulticast mode [ 1969.171242][ T433] veth0_to_bridge: left promiscuous mode [ 1969.257148][ T5918] usb 6-1: USB disconnect, device number 101 [ 1969.309481][ T443] vlan2: entered promiscuous mode [ 1970.332639][ T466] loop2: detected capacity change from 0 to 7 [ 1970.340149][ T466] loop2: p1 [ 1970.343434][ T466] loop2: partition table partially beyond EOD, truncated [ 1970.356461][ T466] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1970.527054][T25941] udevd[25941]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1970.557228][ T474] binder: BINDER_SET_CONTEXT_MGR already set [ 1970.568862][ T474] binder: 473:474 ioctl 4018620d 2000000002c0 returned -16 [ 1971.842739][T17829] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1971.979955][ T5918] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1971.992473][T17829] usb 2-1: device descriptor read/64, error -71 [ 1972.154889][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1972.188265][ T5918] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1972.210091][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1972.228111][ T5918] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.40 [ 1972.241171][T17829] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1972.256286][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.276618][ T5918] usb 3-1: Product: syz [ 1972.294699][ T5918] usb 3-1: Manufacturer: syz [ 1972.314448][ T5918] usb 3-1: SerialNumber: syz [ 1972.369899][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1972.377924][ T508] vlan0: entered promiscuous mode [ 1972.391470][T17829] usb 2-1: device descriptor read/64, error -71 [ 1972.399203][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1972.417722][ T29] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 11 [ 1972.433229][ T29] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1972.443951][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.520080][T17829] usb usb2-port1: attempt power cycle [ 1972.555464][ T5918] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1972.581808][ T5918] usb 3-1: USB disconnect, device number 93 [ 1972.743227][ T29] usb 7-1: USB disconnect, device number 9 [ 1972.859813][T17829] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1972.880589][T17829] usb 2-1: device descriptor read/8, error -71 [ 1973.131076][T17829] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1973.139896][ T1209] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1973.243805][T17829] usb 2-1: device descriptor read/8, error -71 [ 1973.322310][ T529] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1973.335944][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 1973.357285][ T1209] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1973.375037][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1973.375754][T17829] usb usb2-port1: unable to enumerate USB device [ 1973.384187][ T1209] usb 4-1: Product: syz [ 1973.397626][ T1209] usb 4-1: Manufacturer: syz [ 1973.428637][ T1209] usb 4-1: SerialNumber: syz [ 1973.456323][ T1209] usb 4-1: config 0 descriptor?? [ 1973.625184][ T543] netlink: 'syz.6.7737': attribute type 27 has an invalid length. [ 1973.870239][ T29] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 1973.932405][ T1209] usb 4-1: USB disconnect, device number 15 [ 1974.025063][ T29] usb 3-1: Invalid ep0 maxpacket: 16 [ 1974.159933][ T29] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 1974.319790][ T29] usb 3-1: Invalid ep0 maxpacket: 16 [ 1974.326454][ T29] usb usb3-port1: attempt power cycle [ 1974.828728][ T29] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 1974.870629][ T29] usb 3-1: Invalid ep0 maxpacket: 16 [ 1975.019936][ T29] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 1975.041239][ T29] usb 3-1: Invalid ep0 maxpacket: 16 [ 1975.048295][ T29] usb usb3-port1: unable to enumerate USB device [ 1975.761352][ T578] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7748'. [ 1975.929587][ T580] vlan2: entered promiscuous mode [ 1976.143691][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.150365][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.422094][ T592] netlink: 'syz.1.7753': attribute type 1 has an invalid length. [ 1977.063247][T29320] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1977.261657][T29320] usb 3-1: Using ep0 maxpacket: 8 [ 1977.307965][T29320] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1977.342969][T29320] usb 3-1: config 179 has no interface number 0 [ 1977.349369][T29320] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1977.394391][T29320] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1977.407074][ T605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7759'. [ 1977.433667][T29320] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1977.482097][T29320] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1977.554333][T29320] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1977.596895][T29320] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1977.630672][T29320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.679218][ T598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1977.904502][ T614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1978.030895][ T589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1978.048949][ T589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1978.128665][ T616] vlan0: entered promiscuous mode [ 1978.254043][ T625] input: syz0 as /devices/virtual/input/input162 [ 1978.291128][ T29] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1978.308253][ T627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1978.317430][ T627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1978.556275][ T622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1978.610409][ T29] usb 4-1: device descriptor read/64, error -71 [ 1979.016214][ T29] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1979.229786][ T29] usb 4-1: device descriptor read/64, error -71 [ 1979.341025][ T29] usb usb4-port1: attempt power cycle [ 1980.320041][ T5941] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1980.480080][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 1980.519991][ T5941] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1980.529321][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.540148][ T5941] usb 6-1: Product: syz [ 1980.544383][ T5941] usb 6-1: Manufacturer: syz [ 1980.549156][ T5941] usb 6-1: SerialNumber: syz [ 1980.613441][ T5941] usb 6-1: config 0 descriptor?? [ 1980.773455][ T1209] usb 3-1: USB disconnect, device number 98 [ 1980.773517][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1980.787808][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1980.852945][ T5941] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1980.968593][ T652] netlink: 'syz.2.7772': attribute type 1 has an invalid length. [ 1981.060269][ T656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7772'. [ 1981.070888][ T652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1981.085191][ T652] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7772'. [ 1981.145476][T29320] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1981.311602][T29320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1981.348264][T29320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1981.360738][ T672] x_tables: duplicate underflow at hook 1 [ 1981.379832][T29320] usb 7-1: New USB device found, idVendor=04f3, idProduct=0001, bcdDevice= 0.00 [ 1981.425078][T29320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.490981][T29320] usb 7-1: config 0 descriptor?? [ 1981.767311][ T684] vlan2: entered promiscuous mode [ 1981.946546][ T690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7785'. [ 1981.976947][ T690] unsupported nlmsg_type 40 [ 1982.115671][T29320] usbhid 7-1:0.0: can't add hid device: -71 [ 1982.136945][T29320] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1982.176635][T29320] usb 7-1: USB disconnect, device number 10 [ 1982.254903][ T695] netlink: 'syz.3.7787': attribute type 9 has an invalid length. [ 1982.526373][T17829] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1982.593423][ T703] syzkaller0: entered promiscuous mode [ 1982.600089][ T703] syzkaller0: entered allmulticast mode [ 1982.609145][ T703] tipc: Bearer : already 2 bearers with priority 0 [ 1982.618032][ T703] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1982.656365][ T5941] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1982.679261][ T5941] dvbdev: DVB: registering new adapter (Terratec H7) [ 1982.686154][ T5941] usb 6-1: media controller created [ 1982.709844][T17829] usb 2-1: Using ep0 maxpacket: 32 [ 1982.717752][T17829] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1982.736239][T17829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.781056][ T706] No such timeout policy "syz0" [ 1982.966262][ T5941] usb 6-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 1982.976577][T17829] usb 2-1: config 0 descriptor?? [ 1983.003177][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1983.112981][ T708] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7792'. [ 1983.212885][T17829] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1983.251650][T17829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1983.263683][ T693] __vm_enough_memory: pid: 693, comm: syz.5.7767, bytes: 4503599627366400 not enough memory for the allocation [ 1983.289383][ T5941] DVB: Unable to find symbol drxk_attach() [ 1983.301238][T17829] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1983.336363][T17829] usb 2-1: media controller created [ 1983.415904][ T716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1983.432922][ T716] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1983.456461][ T697] az6007_i2c_xfer ERROR: -5 [ 1983.476948][T17829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1983.562105][ T718] Cannot find del_set index 0 as target [ 1983.687236][T17829] DVB: Unable to find symbol dib7000p_attach() [ 1983.705449][T17829] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1983.826368][T17829] rc_core: IR keymap rc-dib0700-rc5 not found [ 1983.837899][T17829] Registered IR keymap rc-empty [ 1983.851391][T17829] dvb-usb: could not initialize remote control. [ 1983.868327][T17829] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1984.340030][ T723] usb read operation failed. (-71) [ 1984.345754][ T723] ------------[ cut here ]------------ [ 1984.357067][ T723] UBSAN: array-index-out-of-bounds in drivers/media/usb/dvb-usb-v2/az6007.c:821:22 [ 1984.409807][ T723] index 4096 is out of range for type 'unsigned char[4096]' [ 1984.443824][ T723] CPU: 1 UID: 0 PID: 723 Comm: syz.1.7788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1984.443872][ T723] Tainted: [L]=SOFTLOCKUP [ 1984.443879][ T723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1984.443890][ T723] Call Trace: [ 1984.443897][ T723] [ 1984.443906][ T723] dump_stack_lvl+0xe8/0x150 [ 1984.443933][ T723] ubsan_epilogue+0xa/0x30 [ 1984.443948][ T723] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 1984.443979][ T723] az6007_i2c_xfer+0x48a/0xb90 [ 1984.444099][ T723] __i2c_transfer+0x79a/0x2020 [ 1984.444145][ T723] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1984.444171][ T723] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1984.444197][ T723] ? i2c_transfer+0xc8/0x2d0 [ 1984.444219][ T723] i2c_transfer+0x1cc/0x2d0 [ 1984.444242][ T723] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1984.444264][ T723] ? trace_kmalloc+0x2a/0x110 [ 1984.444282][ T723] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1984.444306][ T723] ? i2cdev_read+0xe8/0x250 [ 1984.444341][ T723] ? __kmalloc_noprof+0x1b8/0x760 [ 1984.444361][ T723] i2cdev_read+0x10d/0x250 [ 1984.444383][ T723] ? __pfx_i2cdev_read+0x10/0x10 [ 1984.444405][ T723] vfs_read+0x20c/0xa70 [ 1984.444428][ T723] ? __pfx_vfs_read+0x10/0x10 [ 1984.444445][ T723] ? __fget_files+0x2a/0x420 [ 1984.444470][ T723] ? __fget_files+0x2a/0x420 [ 1984.444517][ T723] ? __fget_files+0x3a0/0x420 [ 1984.444546][ T723] ? __fget_files+0x2a/0x420 [ 1984.444588][ T723] ksys_read+0x150/0x270 [ 1984.444614][ T723] ? __pfx_ksys_read+0x10/0x10 [ 1984.444641][ T723] ? __pfx_kcov_ioctl+0x10/0x10 [ 1984.444701][ T723] do_syscall_64+0x14d/0xf80 [ 1984.444723][ T723] ? trace_irq_disable+0x3b/0x150 [ 1984.444753][ T723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.444780][ T723] ? clear_bhb_loop+0x40/0x90 [ 1984.444799][ T723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.444816][ T723] RIP: 0033:0x7f057bd9c799 [ 1984.444830][ T723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1984.444844][ T723] RSP: 002b:00007f057cb8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1984.444861][ T723] RAX: ffffffffffffffda RBX: 00007f057c016090 RCX: 00007f057bd9c799 [ 1984.444880][ T723] RDX: 0000000000002058 RSI: 00002000000021c0 RDI: 0000000000000004 [ 1984.444890][ T723] RBP: 00007f057be32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1984.444900][ T723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1984.444924][ T723] R13: 00007f057c016128 R14: 00007f057c016090 R15: 00007f057c13fa48 [ 1984.444957][ T723] [ 1984.719924][ T723] ---[ end trace ]--- [ 1984.724075][ T723] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1984.731295][ T723] CPU: 0 UID: 0 PID: 723 Comm: syz.1.7788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1984.742073][ T723] Tainted: [L]=SOFTLOCKUP [ 1984.746408][ T723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1984.756507][ T723] Call Trace: [ 1984.759814][ T723] [ 1984.762773][ T723] vpanic+0x56c/0xa60 [ 1984.766809][ T723] ? __pfx_vpanic+0x10/0x10 [ 1984.771339][ T723] panic+0xc5/0xd0 [ 1984.775178][ T723] ? __pfx_panic+0x10/0x10 [ 1984.779676][ T723] ? __pfx__printk+0x10/0x10 [ 1984.784352][ T723] check_panic_on_warn+0x89/0xb0 [ 1984.789311][ T723] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 1984.795067][ T723] az6007_i2c_xfer+0x48a/0xb90 [ 1984.799967][ T723] __i2c_transfer+0x79a/0x2020 [ 1984.804748][ T723] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1984.810584][ T723] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1984.816423][ T723] ? i2c_transfer+0xc8/0x2d0 [ 1984.821043][ T723] i2c_transfer+0x1cc/0x2d0 [ 1984.825771][ T723] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1984.831437][ T723] ? trace_kmalloc+0x2a/0x110 [ 1984.836146][ T723] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1984.842777][ T723] ? i2cdev_read+0xe8/0x250 [ 1984.847383][ T723] ? __kmalloc_noprof+0x1b8/0x760 [ 1984.852509][ T723] i2cdev_read+0x10d/0x250 [ 1984.856951][ T723] ? __pfx_i2cdev_read+0x10/0x10 [ 1984.862174][ T723] vfs_read+0x20c/0xa70 [ 1984.866414][ T723] ? __pfx_vfs_read+0x10/0x10 [ 1984.871203][ T723] ? __fget_files+0x2a/0x420 [ 1984.875831][ T723] ? __fget_files+0x2a/0x420 [ 1984.880482][ T723] ? __fget_files+0x3a0/0x420 [ 1984.885190][ T723] ? __fget_files+0x2a/0x420 [ 1984.889826][ T723] ksys_read+0x150/0x270 [ 1984.894133][ T723] ? __pfx_ksys_read+0x10/0x10 [ 1984.899091][ T723] ? __pfx_kcov_ioctl+0x10/0x10 [ 1984.904151][ T723] do_syscall_64+0x14d/0xf80 [ 1984.908766][ T723] ? trace_irq_disable+0x3b/0x150 [ 1984.913898][ T723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.920168][ T723] ? clear_bhb_loop+0x40/0x90 [ 1984.924990][ T723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.930993][ T723] RIP: 0033:0x7f057bd9c799 [ 1984.935440][ T723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1984.955068][ T723] RSP: 002b:00007f057cb8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1984.963498][ T723] RAX: ffffffffffffffda RBX: 00007f057c016090 RCX: 00007f057bd9c799 [ 1984.971495][ T723] RDX: 0000000000002058 RSI: 00002000000021c0 RDI: 0000000000000004 [ 1984.979498][ T723] RBP: 00007f057be32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1984.987675][ T723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1984.995671][ T723] R13: 00007f057c016128 R14: 00007f057c016090 R15: 00007f057c13fa48 [ 1985.003766][ T723] [ 1985.007502][ T723] Kernel Offset: disabled [ 1985.011969][ T723] Rebooting in 86400 seconds..