last executing test programs: 3m7.377821804s ago: executing program 0 (id=67): socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e65772064654861756c74207573040000fc787a20303030303030303030303030303030303430393300a98362560d922b79fe23f2fba2f52ab4b23a190bcbb69098fbe1b4a3838ea9c094be6e07895dc60fb3dfa3424d64b773073cb6a495ba63e4e325b47cc8ca0c9b87c9010000004d19f44bc1668076"], 0x2a, 0x0) r3 = add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) io_uring_setup(0x1195, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xae02, 0x16, 0x0, 0x58) socket$inet(0x2, 0x1, 0x10004) r4 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') readv(r4, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0x20000}, {0x0, 0xffb6}], 0x2) 3m5.390630379s ago: executing program 0 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0xeab, 0x7fffffff, 0xffff, 0x0, 0x5, 0x40, 0xfffffff8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0x8, 0xfffa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m5.088440146s ago: executing program 0 (id=81): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3m4.92955496s ago: executing program 0 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 3m4.714592092s ago: executing program 0 (id=87): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) 3m4.387945425s ago: executing program 0 (id=89): socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 3m3.958524604s ago: executing program 32 (id=89): socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 9.090282784s ago: executing program 2 (id=1102): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8884}, @void, @arp=@generic={0x321, 0x9100, 0x6, 0x0, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, "", @broadcast, "ef90afce2638c48ae3"}}, 0x21) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a44000010203010902"], 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 8.618054147s ago: executing program 5 (id=1104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0x9, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0xde, 0x5c, 0x10, 0xbda, 0x140, 0x4bf8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x8, 0x0, 0x6, "", [{{0x9, 0x4, 0x68, 0x0, 0x1, 0xed, 0x91, 0x9a, 0xab, [], [{{0x9, 0x5, 0x1, 0x3, 0x20, 0xbe, 0x6, 0x1}}]}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0x8ec0}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xd, 0x4, 0x4, 0x8001, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = semget$private(0x0, 0x207, 0x0) semctl$SEM_STAT_ANY(r3, 0x3, 0x14, &(0x7f0000000140)=""/119) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000400)=""/97) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e002e0010000000ba80013ffa85f59a0000005a", 0x34}], 0x1}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x74bd2a, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0xffff, 0xa}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000}, {0x0, 0x0, 0x41000000000}, {0x0, 0x0, 0xffffffff}, 0x0, 0x1020, 0x2, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x4840}, 0x40082) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0903, 0x0, '\x00', @string=0x0}}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000000), 0x9d89, 0x20100) 8.060109053s ago: executing program 2 (id=1106): socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e65772064654861756c74207573040000fc787a20303030303030303030303030303030303430393300a98362560d922b79fe23f2fba2f52ab4b23a190bcbb69098fbe1b4a3838ea9c094be6e07895dc60fb3dfa3424d64b773073cb6a495ba63e4e325b47cc8ca0c9b87c9010000004d19f44bc1668076"], 0x2a, 0x0) r2 = add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xae02, 0x16, 0x0, 0x58) socket$inet(0x2, 0x1, 0x10004) r3 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') readv(r3, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0x20000}, {0x0, 0xffb6}], 0x2) 7.104235045s ago: executing program 5 (id=1111): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = fsopen(0x0, 0x1) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000002c0)="0f07c4c12cc2c02ac4c3557e1c52008fc868ec5a35810f50d6060f01ca66b816010f00d8c4c20190149a0f21ec", 0x2d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.269946384s ago: executing program 2 (id=1114): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014c"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def01"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000002c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000004c0)={0x20, 0x1, 0x2, "2fc7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffdffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0f21f60f3566b842000f00d8b805000000b9a00000003ef30f093e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000400)={0x1, {{0xa, 0x2, 0xfffffe00, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @local, 0xc71}}}, 0x108) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5, 0x6}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r5}, r8, 0x10, @inherit={0x58, &(0x7f0000000ac0)={0x1, 0x2, 0x8, 0x846, {0x10, 0xfffffffffffffff8, 0x4, 0x3, 0x5}, [0xfffffffffffffff8, 0x2]}}, @devid=r9}) r10 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000740)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x0, 0x20013, 0xb4, 0x9, 0x1000, 0xcf, 0x3, 0x865e, 0x7ffffffffffffffc, 0x3, 0xfffffffffffffffd, 0x3, 0x5, 0x5], 0x0, 0x1019c4}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x19, 0x2, "8018"}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xc2}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1a}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 5.931800017s ago: executing program 5 (id=1116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) r2 = dup(r0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x5b23, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x86, 0x0, 0x0, 0x0, 0x40) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2d}}, 0x6fcd, 0x1, 0xf06, 0x3, 0x95, 0x7c, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) recvmmsg(r1, &(0x7f00000035c0)=[{{&(0x7f00000004c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/149, 0x95}], 0x1, &(0x7f0000000640)=""/209, 0xd1}, 0x3}, {{0x0, 0x0, &(0x7f0000000740)}, 0x90}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/130, 0x82}], 0x1, &(0x7f0000000940)=""/110, 0x6e}, 0x120}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/143, 0x8f}], 0x2, &(0x7f0000001ac0)=""/237, 0xed}, 0x8}, {{0x0, 0x0, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001cc0)=""/120, 0x78}, 0x9}, {{&(0x7f0000001d40)=@qipcrtr, 0x80, &(0x7f00000032c0)=[{&(0x7f0000001dc0)=""/216, 0xd8}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/32, 0x20}, {&(0x7f0000002f40)=""/239, 0xef}, {&(0x7f0000003040)=""/214, 0xd6}, {&(0x7f0000003140)=""/255, 0xff}, {&(0x7f0000003240)=""/88, 0x58}], 0x8, &(0x7f0000003340)=""/19, 0x13}, 0x7}, {{&(0x7f0000003380)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003400)=""/56, 0x38}, {&(0x7f0000003440)=""/109, 0x6d}, {&(0x7f00000034c0)=""/16, 0x10}], 0x3, &(0x7f0000003540)=""/70, 0x46}, 0x3}], 0x7, 0x0, &(0x7f0000003780)={0x0, 0x989680}) 5.729014999s ago: executing program 1 (id=1118): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344a2e3c35c2758f590ddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x65, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x63, 0x30, 0x30, 0x36, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x35, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 5.539695237s ago: executing program 1 (id=1119): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x2b, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x59a}}]}, 0x50}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) stat(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) r3 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x17, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0xca460fbeb54f06a, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000a00)={0x0, 0x5, 0x4, "e3409437"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r2, r2, 0x0, 0x100000000) r4 = syz_open_dev$vivid(&(0x7f0000000f40), 0x2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000f80)={0x7, 0x9, 0x1, "36c4f829a1c203fe7420f34c6319e57bd112a1f1a7b3c1b8c4cc0e17f81ca3ff", 0x35315258}) 4.212075257s ago: executing program 4 (id=1121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 4.130981986s ago: executing program 4 (id=1122): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x7, 0x1, 0x4}}, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "95cadd852ae6dd3949ca46dc13432b45125fc75ad498f3ed6b6aef96d843adad896df3eb886ec2e19a33d367116aeb7c781e3d0d18aafa5bad6b36fbb585c36b"}}}}, &(0x7f00000016c0)={0x0, 0x2, [0xb16, 0xc5e, 0xa7d, 0x397]}) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x11700}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d010}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r10}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000006c0)={{r3}, "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.214046597s ago: executing program 4 (id=1123): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x65, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x63, 0x30, 0x30, 0x36, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3.151940284s ago: executing program 4 (id=1124): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r3) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x1000000, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x58, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x43, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b755e02f990bdfc3da898257de5b8996dbc932b5009df63b75f105c53"]}]}, 0x58}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.09896085s ago: executing program 2 (id=1125): socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e65772064654861756c74207573040000fc787a20303030303030303030303030303030303430393300a98362560d922b79fe23f2fba2f52ab4b23a190bcbb69098fbe1b4a3838ea9c094be6e07895dc60fb3dfa3424d64b773073cb6a495ba63e4e325b47cc8ca0c9b87c9010000004d19f44bc1668076"], 0x2a, 0x0) r2 = add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xae02, 0x16, 0x0, 0x58) socket$inet(0x2, 0x1, 0x10004) r3 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') readv(r3, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0x20000}, {0x0, 0xffb6}], 0x2) 2.844317062s ago: executing program 5 (id=1126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x222203, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70b92d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xffd8) 2.354610708s ago: executing program 1 (id=1127): r0 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) pipe2(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r3, 0x0, 0x40010082) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000b4e4000000000a0000000500010006000000050004000000000011000300686173683a69702c706f727400000000050005000a0000000900020073797a310000"], 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r2, &(0x7f0000000140)=""/87, 0x57) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.226038894s ago: executing program 3 (id=1128): r0 = syz_ublk_setup_io_uring(0x25ef, &(0x7f0000000040)={0x0, 0xfdf9, 0x10, 0x3, 0x1cb}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x4d71, &(0x7f0000000180)={0x0, 0xd912, 0x0, 0x1, 0x354, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) pread64(r1, &(0x7f0000000480)=""/154, 0x9a, 0xd5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000005000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000340)) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000300)={0x7, 0x4}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e320a01"], 0x3d) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000540)) 2.176162788s ago: executing program 5 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x31, 0x0, &(0x7f0000003a40)) syz_open_dev$video(0x0, 0x7, 0x80) socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x1010, 0xffffffffffffffff, 0x86918000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "aa767f9ef89b4bea", "e08eb32c9057b045927ec23b8ef3caaaef806cfa0a1781418dec0136d592b0de", "f8b4d958", "d5aa49eddfe7f463"}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) 2.092470962s ago: executing program 1 (id=1130): socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x4, 0x101002) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) 1.283656275s ago: executing program 2 (id=1131): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@any, 0x80000000}, 0xfffffffd, 0x80000000}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r6, 0x1}}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x2}, 0x90) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ptrace(0x10, r1) ptrace$peek(0x2, r1, 0x0) tgkill(r1, r1, 0x30) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x942) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, &(0x7f00000000c0)={0x8001, 0x5, 0x1}) write$P9_RSTATu(r0, &(0x7f0000000200)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x1d, '\xcf\xc2\x00\x10\x00\x00\xf0\xff\xff\xff\x00\x00b\xbc\xe0\xe6\"\xbe&f\xfa\xc8G\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23d) 1.220965976s ago: executing program 3 (id=1132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000010301010000000000000000030000000c0002"], 0x20}}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x8, 0x7ff, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0xfffffffd, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r7, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x2, 0x5, 0x1800}], 0x1, &(0x7f0000000040)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x18c) socket$netlink(0x10, 0x3, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESDEC=r8, @ANYRES8=r8]) read$FUSE(r8, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f00000002c0)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f0000000080)={r11, r12, 0x0, 0x0, 0x4}) close(r10) 1.048217362s ago: executing program 1 (id=1133): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x6126, &(0x7f00000007c0)={0x0, 0x95f3, 0x1000, 0x0, 0x302}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x91b47000) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1e, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r3], 0x270}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.047015672s ago: executing program 4 (id=1134): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000582000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000acc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00009a4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$dupfd(r3, 0x0, r5) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) 865.108009ms ago: executing program 5 (id=1135): r0 = syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300), 0x2440, 0x0) ptrace$setregs(0xd, r0, 0x80000001, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c1fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=""/200, 0xc8}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) getsockopt$inet_int(r2, 0x0, 0xe, 0x0, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, 0x0, &(0x7f00000010c0)) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x1a5080) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xf1, 0x6b, 0xe6, 0x20, 0x6a3, 0xf921, 0x8969, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x2, 0x9, 0x5, 0x60, 0x4, "", [{{0x9, 0x4, 0xb2, 0x2, 0x0, 0xff, 0x5d, 0x1, 0x3}}, {{0x9, 0x4, 0xac, 0x0, 0x2, 0xc9, 0xa6, 0xec, 0x3, [], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0x33, 0x5, 0x48}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x8, 0x3, 0x57, [@generic={0x2, 0x6}]}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x49, &(0x7f0000000180)=ANY=[]}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @auto=[0x37, 0x61, 0x39, 0x38, 0x66, 0x63, 0x66, 0x36, 0x33, 0x38, 0x65, 0x34, 0x33, 0x61, 0x62, 0x64]}, &(0x7f0000000f00)={0x0, "d7d8d7e5754355fad31fcc392ec6cad16ed067f9c803dfff0f97e00cc5d93e72315e63c4087d18a4a31a4cbda910781dd5aaa62ad87c2a6d00", 0x10}, 0x48, r7) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) keyctl$set_timeout(0xf, r8, 0x7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000040)={0x80008000000, r9, r9}) ioctl$BLKCRYPTOGENERATEKEY(r4, 0xc030128a, &(0x7f0000000080)={&(0x7f0000000040)=""/16, 0x10}) 860.590698ms ago: executing program 3 (id=1136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 714.662796ms ago: executing program 2 (id=1137): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b7ed4f7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a7890814529440000004e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8046d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x1, 0x7fffffffffffffff, 0x0, 0x1000, 0x11, 0xfffffffffffffffd, 0x1009ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x1000) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x3, 0x4}}, 0x28) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r6 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc561, 0x0, 0x0, 0x0, 0xff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f00000000c0)={0x20071026, r6}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) 553.119434ms ago: executing program 3 (id=1138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000940)={0x60, 0xdc, 0x10000000, 0x30, 0x0, 0xfffffffb, 0x0, 0x0, {}, {}, {0x1}, {0x2}, 0x0, 0x40, 0x5, 0x0, 0x0, 0x4ed22847, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x8, 0x0, 0x4000000, 0x7}) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x18, 0xfffffffffffffffd) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) close_range(r5, 0xffffffffffffffff, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @remote}) 419.868399ms ago: executing program 1 (id=1139): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x94, 0x2) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000280), 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x40, 0x49, 0x17, 0x20, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xc, 0x20, 0x8, "", [{{0x9, 0x4, 0x87, 0x9, 0x0, 0x86, 0xc0, 0xd3}}]}}]}}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000140)={0x1, 0x803, 0x2}) socket(0x2b, 0x80801, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x3, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}]}}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast2}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c9"], 0x7) r6 = syz_io_uring_complete(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_delrule={0xac, 0x21, 0x800, 0x70bd2d, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x7a, 0x5, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x14, 0x2, @private1}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x14, 0x1, @private2}, @FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x4}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x10f, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0xab, 0xaa, 'c', "c1f9cf", 0x809b, "39256356abf7f557e35ecc35942d289079cd70d4399869a482ce2104b7e7af30e05e17cb5788d8c416b1fb7e875d802ff53948c1d89b02d07a108a9464cc61569b90717edb51eebc844d27f65b93e10ecbc040b7dcf9f462c6232fe88132df0348a87e62cc773937fc1e8918ec52e7ca2677f237965f1fedc5a3bab288d58b29eb356e4941417502d8758d223c8174f7fbabeadc09014d411ad924b855dba9cc25a948b8ab969ba1c5cb57fda2e1be028e9e0f37522f1c8b03022f421019717c911173f267ae2659c124c1baa7be20d1abe0fd8a805d7144e14894d878a3042aed750dc3c5b76789ed225082059bf00bb353d03a8d"}}}}}, &(0x7f0000000340)={0x0, 0x3, [0x310, 0xa38, 0x919, 0x4ba]}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) listen(r0, 0x8) accept(r0, &(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x0) 379.823542ms ago: executing program 3 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x2, 0x2, 0x3, 0x9, 0x800, 0x1, 0x0, 0x86c}}}}]}, 0x58}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 98.582719ms ago: executing program 4 (id=1141): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x8, 0x0, 0xffffffffffffffff}, {0x0, 0xf2, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000000080)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x12, 0x6, 0x1, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x11d, 0x1b, 0x0, 0x0) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e23000000030000000000000000020000000000000002000000200002"], 0x6c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) 0s ago: executing program 3 (id=1142): unshare(0x6a040000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0xc315, 0x200, 0x3, 0x1f6}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8238, 0x10, 0x1, 0x1a2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe964, 0x1, 0x2, 0x2eb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9088, 0x80000, 0x3, 0x4b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x22e4, 0x0, 0x2, 0x24a}}], 0x4, &(0x7f0000001880)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x100}, 0x0, 0x0, '\x00', {0x2, 0x384, 0x0, 0x0}}, 0x0) syz_usb_connect$lan78xx(0x4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000300)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x101, 0x1, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) kernel console output (not intermixed with test programs): yz [ 182.706689][ T5629] usb 4-1: Manufacturer: syz [ 182.713039][ T5629] usb 4-1: SerialNumber: syz [ 182.745517][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 182.751381][ T29] usb 3-1: USB disconnect, device number 18 [ 182.772147][ T5629] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input27 [ 182.828813][ T7759] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 182.837686][ T7759] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 182.928437][ T6131] legousbtower 6-1:14.57: interrupt endpoints not found [ 182.955669][ T5629] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 182.964197][ T5629] (id 0x00) [ 183.026020][ T5629] rc_core: IR keymap rc-imon-pad not found [ 183.031937][ T5629] Registered IR keymap rc-empty [ 183.038087][ T5629] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 183.048505][ T5629] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 183.058336][ T188] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 183.167841][ T5629] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 183.180120][ T5629] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input28 [ 183.195537][ T5629] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:15> initialized [ 183.248499][ T29] net_ratelimit: 3 callbacks suppressed [ 183.248513][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.329207][ T6131] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 183.339565][ T6131] legousbtower 6-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 183.805950][ T29] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 183.888321][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.897229][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.912001][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.929187][ T7783] imon:display_open: display port is already open [ 183.965667][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 183.978084][ T29] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 183.995582][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.003624][ T29] usb 3-1: Product: syz [ 184.007893][ T29] usb 3-1: Manufacturer: syz [ 184.012506][ T29] usb 3-1: SerialNumber: syz [ 184.020444][ T29] usb 3-1: config 0 descriptor?? [ 184.285945][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.367699][ T7789] loop5: detected capacity change from 0 to 7 [ 184.374927][ T7789] Dev loop5: unable to read RDB block 7 [ 184.380837][ T7789] loop5: AHDI p2 [ 184.384578][ T7789] loop5: partition table partially beyond EOD, truncated [ 184.434969][ T29] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 184.459293][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.471822][ T29] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 184.480754][ T29] usb 3-1: media controller created [ 184.500132][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.511788][ T7790] imon:send_packet: packet tx failed (-71) [ 184.513072][ T6131] usb 4-1: USB disconnect, device number 15 [ 184.555693][ T7790] imon:vfd_write: send packet #3 failed [ 184.649481][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 184.656726][ T29] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 184.664718][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 184.680904][ T29] usb 3-1: USB disconnect, device number 19 [ 184.726472][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 184.892335][ T188] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 184.905009][ T188] asix 5-1:0.34: probe with driver asix failed with error -71 [ 184.919009][ T188] usb 5-1: USB disconnect, device number 19 [ 184.972243][ T29] usb 6-1: USB disconnect, device number 15 [ 184.992945][ T4994] Dev loop5: unable to read RDB block 7 [ 184.994448][ T29] legousbtower 6-1:14.228: LEGO USB Tower #-159 now disconnected [ 185.006930][ T4994] loop5: AHDI p2 [ 185.015358][ T4994] loop5: partition table partially beyond EOD, truncated [ 185.119391][ T4994] Dev loop5: unable to read RDB block 7 [ 185.125043][ T4994] loop5: AHDI p2 [ 185.132266][ T4994] loop5: partition table partially beyond EOD, truncated [ 185.285444][ T7798] syzkaller0: entered promiscuous mode [ 185.291633][ T7798] syzkaller0: entered allmulticast mode [ 185.313930][ T7798] tipc: Enabled bearer , priority 0 [ 185.327911][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.373676][ T7797] tipc: Resetting bearer [ 185.404273][ T7797] tipc: Disabling bearer [ 185.478002][ T7806] syzkaller0: entered promiscuous mode [ 185.483892][ T7806] syzkaller0: entered allmulticast mode [ 185.608079][ T6131] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 185.780811][ T6131] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.807605][ T1186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.816529][ T6131] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.818680][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.835808][ T7816] syzkaller0: entered promiscuous mode [ 185.837316][ T6131] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.855926][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.870776][ T6131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.880961][ T7816] syzkaller0: entered allmulticast mode [ 185.892863][ T7804] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 185.922035][ T6131] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.158379][ T29] usb 4-1: USB disconnect, device number 16 [ 186.367011][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.267093][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 188.446088][ T29] net_ratelimit: 2 callbacks suppressed [ 188.446106][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.709405][ T7809] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 189.436783][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 189.486422][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.586140][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 189.597534][ T97] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.616294][ T97] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.635406][ T97] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.656982][ T97] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.965892][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.158082][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 190.180538][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.181365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.317136][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.350736][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.364345][ T29] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.364363][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.364376][ T29] usb 6-1: SerialNumber: syz [ 190.530016][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.579228][ T29] usb 6-1: 0:2 : does not exist [ 190.708322][ T29] usb 6-1: USB disconnect, device number 16 [ 190.841165][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 190.859949][ T7684] udevd[7684]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.566850][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.575605][ T97] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.585607][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.595266][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.755666][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 191.915687][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 191.940218][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 110, changing to 10 [ 191.993860][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26466, setting to 1024 [ 192.025664][ T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.057246][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.100835][ T29] usb 6-1: config 0 descriptor?? [ 192.117003][ T7923] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 192.195623][ T188] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 192.347458][ T7940] netlink: 48 bytes leftover after parsing attributes in process `syz.3.686'. [ 192.370636][ T188] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 192.375276][ T29] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.385619][ T188] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 192.401073][ T7944] netlink: 'syz.1.687': attribute type 2 has an invalid length. [ 192.420603][ T7944] netlink: 'syz.1.687': attribute type 2 has an invalid length. [ 192.433225][ T188] usb 5-1: config 220 has no interface number 2 [ 192.444272][ T188] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 192.462799][ T188] usb 5-1: config 220 interface 0 has no altsetting 0 [ 192.470009][ T188] usb 5-1: config 220 interface 76 has no altsetting 0 [ 192.501939][ T188] usb 5-1: config 220 interface 1 has no altsetting 0 [ 192.513514][ T188] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 192.524606][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.535892][ T188] usb 5-1: Product: syz [ 192.540250][ T188] usb 5-1: Manufacturer: syz [ 192.563538][ T188] usb 5-1: SerialNumber: syz [ 192.624691][ T6131] usb 6-1: USB disconnect, device number 17 [ 192.630854][ C0] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 192.820866][ T188] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 192.842592][ T188] uvcvideo 5-1:220.0: No valid video chain found. [ 192.860548][ T188] usb 5-1: selecting invalid altsetting 0 [ 192.898589][ T188] usb 5-1: selecting invalid altsetting 0 [ 192.905520][ T7948] syzkaller0: entered promiscuous mode [ 192.913659][ T188] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 192.924931][ T7948] syzkaller0: entered allmulticast mode [ 192.947160][ T188] usb 5-1: USB disconnect, device number 20 [ 193.174809][ T7950] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 193.337552][ T7950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.433763][ T7950] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 193.556175][ T188] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 193.602096][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 193.646456][ T29] net_ratelimit: 2 callbacks suppressed [ 193.646471][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.735664][ T188] usb 2-1: Using ep0 maxpacket: 16 [ 193.743942][ T188] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.758805][ T188] usb 2-1: config 0 has no interface number 0 [ 193.771028][ T188] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 193.788538][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.804871][ T188] usb 2-1: Product: syz [ 193.819100][ T188] usb 2-1: Manufacturer: syz [ 193.833595][ T188] usb 2-1: SerialNumber: syz [ 193.861948][ T188] usb 2-1: config 0 descriptor?? [ 193.876463][ T188] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 194.085646][ T29] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 194.127476][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.136812][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.245596][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 194.252556][ T29] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.264140][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 194.271078][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 194.280798][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.292821][ T29] usb 3-1: config 0 descriptor?? [ 194.604382][ T7982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.623380][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.699'. [ 194.685983][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.739461][ T29] mcp2221 0003:04D8:00DD.0005: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 194.876388][ T7991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.909150][ T7991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.922221][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.944295][ T7991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.954837][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.976335][ T7991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.997474][ T7991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.012323][ T7991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.075863][ T5697] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 195.225697][ T5697] usb 4-1: Using ep0 maxpacket: 32 [ 195.230959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.240659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.244372][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.252429][ T6131] usb 3-1: USB disconnect, device number 20 [ 195.271746][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.282583][ T5697] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 195.294210][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.313842][ T5697] usb 4-1: config 0 descriptor?? [ 195.325682][ T29] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 195.349278][ T8000] loop5: detected capacity change from 0 to 7 [ 195.357453][ T8000] Dev loop5: unable to read RDB block 7 [ 195.363130][ T8000] loop5: AHDI p2 [ 195.367884][ T8000] loop5: partition table partially beyond EOD, truncated [ 195.488630][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 195.499861][ T29] usb 5-1: config 3 has an invalid interface number: 249 but max is 0 [ 195.508627][ T29] usb 5-1: config 3 has no interface number 0 [ 195.515219][ T29] usb 5-1: config 3 interface 249 has no altsetting 0 [ 195.528590][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=bf.24 [ 195.538279][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.558182][ T29] usb 5-1: Product: syz [ 195.568241][ T29] usb 5-1: Manufacturer: syz [ 195.572917][ T29] usb 5-1: SerialNumber: syz [ 195.764187][ T5697] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 195.775637][ T5697] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 195.962696][ T5697] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 196.163548][ T5697] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 196.319100][ T188] usb 2-1: USB disconnect, device number 23 [ 196.364285][ T5697] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 196.487310][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 196.605051][ T7988] i2c i2c-1: adapter quirk: too many messages (addr 0x0003, size 0, write) [ 196.621205][ T5697] usb 4-1: USB disconnect, device number 17 [ 197.835740][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 197.941047][ T29] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 197.992500][ T29] usb 5-1: USB disconnect, device number 21 [ 198.008212][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 198.047674][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 198.091049][ T9] usb 3-1: config 220 has no interface number 2 [ 198.115736][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 198.167624][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 198.185306][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 198.207130][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 198.298402][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 198.323731][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.343188][ T9] usb 3-1: Product: syz [ 198.356415][ T9] usb 3-1: Manufacturer: syz [ 198.372664][ T9] usb 3-1: SerialNumber: syz [ 198.524482][ T8047] binder: 8046:8047 unknown command 0 [ 198.531259][ T8047] binder: 8046:8047 ioctl c0306201 2000000001c0 returned -22 [ 198.625065][ T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 198.651179][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 198.670908][ T8052] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 198.707157][ T9] usb 3-1: selecting invalid altsetting 0 [ 198.764000][ T8052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.773985][ T9] usb 3-1: selecting invalid altsetting 0 [ 198.816927][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 198.846444][ T5697] net_ratelimit: 13 callbacks suppressed [ 198.846458][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.878735][ T9] usb 3-1: USB disconnect, device number 21 [ 198.909787][ T8056] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 199.095831][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.252014][ T8065] syz_tun: entered allmulticast mode [ 199.325878][ T5629] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 199.346513][ T188] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 199.421663][ T8067] batman_adv: batadv0: Adding interface: dummy0 [ 199.432991][ T8067] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.475665][ T8067] batman_adv: batadv0: Interface activated: dummy0 [ 199.485851][ T5629] usb 5-1: Using ep0 maxpacket: 32 [ 199.495699][ T5629] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.510095][ T8068] batadv0: mtu less than device minimum [ 199.515694][ T188] usb 6-1: Using ep0 maxpacket: 16 [ 199.519397][ T188] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 199.525982][ T8068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.543786][ T8068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.555072][ T8068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.566368][ T8068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.577549][ T8068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.589243][ T8068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.600390][ T8068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.621641][ T5629] usb 5-1: config 0 has no interface number 0 [ 199.646610][ T188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.657778][ T5629] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 199.670046][ T5629] usb 5-1: config 0 interface 1 has no altsetting 0 [ 199.679905][ T5629] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 199.690443][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.702563][ T188] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 199.711828][ T5629] usb 5-1: Product: syz [ 199.716117][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.724331][ T5629] usb 5-1: Manufacturer: syz [ 199.729742][ T5629] usb 5-1: SerialNumber: syz [ 199.734637][ T188] usb 6-1: Product: syz [ 199.740876][ T188] usb 6-1: Manufacturer: syz [ 199.747713][ T5629] usb 5-1: config 0 descriptor?? [ 199.753865][ T188] usb 6-1: SerialNumber: syz [ 199.769394][ T188] usb 6-1: config 0 descriptor?? [ 199.789520][ T188] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 199.808830][ T188] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 199.973801][ T5629] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 199.984560][ T5629] cx231xx 5-1:0.1: Failed to read PCB config [ 199.995388][ T5629] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 200.014244][ T5629] usb 5-1: USB disconnect, device number 22 [ 200.025266][ T8063] syz_tun: left allmulticast mode [ 200.145679][ T5697] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 200.307714][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.330610][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.355149][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.384625][ T5697] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.408936][ T188] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 200.416554][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.420753][ T188] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 200.448007][ T5697] usb 2-1: config 0 descriptor?? [ 200.535756][ T5629] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 200.705864][ T5629] usb 5-1: Using ep0 maxpacket: 32 [ 200.721410][ T5629] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.740387][ T5629] usb 5-1: config 0 has no interface number 0 [ 200.756755][ T5629] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 200.781438][ T5629] usb 5-1: config 0 interface 1 has no altsetting 0 [ 200.796536][ T5629] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 200.805878][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.813922][ T5629] usb 5-1: Product: syz [ 200.826302][ T5629] usb 5-1: Manufacturer: syz [ 200.831210][ T5629] usb 5-1: SerialNumber: syz [ 200.843090][ T5629] usb 5-1: config 0 descriptor?? [ 200.916844][ T5697] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 201.054913][ T188] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 201.086957][ T5629] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 201.110067][ T5629] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 201.236337][ T5629] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 201.256348][ T5629] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 201.275416][ T5629] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 201.293339][ T5629] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 201.357626][ T5629] i2c i2c-2: Added multiplexed i2c bus 4 [ 201.389752][ T5629] i2c i2c-2: Added multiplexed i2c bus 5 [ 201.505886][ T5629] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-110]! [ 201.531140][ T5629] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-110]! [ 201.604530][ T5629] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -110 [ 201.635355][ T5629] usb 5-1: USB disconnect, device number 23 [ 201.731486][ T188] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 201.763107][ T188] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 201.799530][ T188] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 201.824521][ T188] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 201.864139][ T188] usb 6-1: USB disconnect, device number 18 [ 202.562827][ T8090] syzkaller0: entered promiscuous mode [ 202.601807][ T8090] syzkaller0: entered allmulticast mode [ 202.920264][ T8099] netlink: 'syz.3.740': attribute type 39 has an invalid length. [ 203.243543][ T29] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 203.363013][ T8110] syzkaller0: entered promiscuous mode [ 203.375684][ T8110] syzkaller0: entered allmulticast mode [ 203.467397][ T29] usb 2-1: device firmware changed [ 203.501629][ T188] usb 2-1: USB disconnect, device number 24 [ 203.594962][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.746'. [ 203.705668][ T188] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 203.734659][ T8122] syzkaller0: entered promiscuous mode [ 203.744353][ T8122] syzkaller0: entered allmulticast mode [ 203.756520][ T8122] tipc: Started in network mode [ 203.761551][ T8122] tipc: Node identity b6d711f62f09, cluster identity 4711 [ 203.770806][ T8122] tipc: Enabled bearer , priority 0 [ 203.779791][ T8121] tipc: Resetting bearer [ 203.796669][ T8121] tipc: Disabling bearer [ 203.867672][ T188] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.877422][ T188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.895091][ T188] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.917951][ T188] usb 2-1: config 1 interface 1 has no altsetting 0 [ 203.941899][ T188] usb 2-1: string descriptor 0 read error: -22 [ 203.954686][ T188] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 203.972911][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.975319][ T8125] syzkaller0: entered promiscuous mode [ 203.989257][ T8125] syzkaller0: entered allmulticast mode [ 204.056702][ T29] net_ratelimit: 18 callbacks suppressed [ 204.056717][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.085938][ T188] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 204.207833][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.226048][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.086033][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.165865][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.205058][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.753'. [ 205.260508][ T8143] netlink: 256 bytes leftover after parsing attributes in process `syz.3.754'. [ 205.271811][ T8143] unsupported nlmsg_type 40 [ 205.945713][ T5697] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 206.120318][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.135771][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.135935][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.357730][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.366323][ T29] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 206.378492][ T5697] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 206.387746][ T5697] usb 3-1: can't read configurations, error -71 [ 206.542110][ T8164] syzkaller0: entered promiscuous mode [ 206.547787][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 206.553206][ T8164] syzkaller0: entered allmulticast mode [ 206.561614][ T29] usb 6-1: config 0 has no interfaces? [ 206.569429][ T29] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 206.583979][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.593312][ T29] usb 6-1: Product: syz [ 206.597591][ T29] usb 6-1: Manufacturer: syz [ 206.602211][ T29] usb 6-1: SerialNumber: syz [ 206.621224][ T29] usb 6-1: config 0 descriptor?? [ 206.632380][ T8164] syzkaller0: tun_net_xmit 1500 [ 206.659605][ T29] usb 2-1: USB disconnect, device number 25 [ 207.048455][ T8174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.761'. [ 207.099717][ T5696] usb 6-1: USB disconnect, device number 19 [ 207.175838][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.295786][ T29] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 207.458668][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.471845][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.483446][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.496130][ T29] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 207.505438][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.514505][ T29] usb 2-1: Product: syz [ 207.518848][ T29] usb 2-1: Manufacturer: syz [ 207.523506][ T29] usb 2-1: SerialNumber: syz [ 207.531991][ T29] usb 2-1: config 0 descriptor?? [ 207.544086][ T29] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 207.758301][ T29] usb 2-1: USB disconnect, device number 26 [ 208.029762][ T8182] netlink: 388 bytes leftover after parsing attributes in process `syz.5.764'. [ 208.212159][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.220318][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.616089][ T29] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 208.762255][ T8197] syzkaller0: entered promiscuous mode [ 208.768465][ T8197] syzkaller0: entered allmulticast mode [ 208.806543][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 208.817153][ T29] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.825336][ T29] usb 2-1: config 0 has no interface number 0 [ 208.834533][ T29] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 208.844474][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.852771][ T29] usb 2-1: Product: syz [ 208.857321][ T29] usb 2-1: Manufacturer: syz [ 208.862823][ T29] usb 2-1: SerialNumber: syz [ 208.867828][ T5629] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 208.877857][ T29] usb 2-1: config 0 descriptor?? [ 208.889002][ T29] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 209.035654][ T5629] usb 3-1: Using ep0 maxpacket: 8 [ 209.069912][ T5629] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 209.079353][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 209.089538][ T5629] usb 3-1: Product: syz [ 209.093838][ T5629] usb 3-1: Manufacturer: syz [ 209.102675][ T5629] usb 3-1: SerialNumber: syz [ 209.111871][ T5629] usb 3-1: config 0 descriptor?? [ 209.127347][ T5629] gspca_main: sq905-2.14.0 probing 2770:9120 [ 209.245972][ T188] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 209.260274][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.420082][ T188] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 209.434917][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.464071][ T188] usb 6-1: config 0 descriptor?? [ 209.483543][ T188] cp210x 6-1:0.0: cp210x converter detected [ 209.496356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.531083][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.552432][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.902116][ T188] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 209.948564][ T188] usb 6-1: cp210x converter now attached to ttyUSB0 [ 210.122654][ T188] usb 6-1: USB disconnect, device number 20 [ 210.139902][ T188] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 210.153859][ T188] cp210x 6-1:0.0: device disconnected [ 210.160772][ T5629] gspca_sq905: bulk read fail (-22) len 0/4 [ 210.171403][ T5629] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 210.288512][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.372701][ T5697] usb 3-1: USB disconnect, device number 24 [ 210.756782][ T8201] syzkaller0: entered promiscuous mode [ 210.762417][ T8201] syzkaller0: entered allmulticast mode [ 210.839323][ T30] audit: type=1326 audit(1785628218.880:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.5.774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3c239e019 code=0x0 [ 210.892690][ T8213] xt_bpf: check failed: parse error [ 210.950636][ T29] gspca_spca1528: reg_r err -71 [ 210.955772][ T29] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 210.985747][ T29] usb 2-1: USB disconnect, device number 27 [ 211.072774][ T8218] syzkaller0: entered promiscuous mode [ 211.079681][ T8218] syzkaller0: entered allmulticast mode [ 211.141864][ T8220] syzkaller0: entered promiscuous mode [ 211.152131][ T8220] syzkaller0: entered allmulticast mode [ 211.170607][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.778'. [ 211.180355][ T8220] tipc: Enabled bearer , priority 0 [ 211.195221][ T8219] tipc: Resetting bearer [ 211.269540][ T8219] tipc: Disabling bearer [ 211.301524][ T8227] syzkaller0: entered promiscuous mode [ 211.316215][ T8227] syzkaller0: entered allmulticast mode [ 211.336346][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.635780][ T5697] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 211.735685][ T188] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 211.807999][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 211.827104][ T5697] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 211.849953][ T5697] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.885038][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.905061][ T188] usb 3-1: Using ep0 maxpacket: 16 [ 211.926229][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.947488][ T188] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.950017][ T5697] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.998420][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 212.021345][ T5697] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.030721][ T29] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 212.042743][ T188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 212.062089][ T188] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 212.072245][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.080111][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.099201][ T188] usb 3-1: config 0 descriptor?? [ 212.217786][ T29] usb 6-1: no configurations [ 212.226848][ T29] usb 6-1: can't read configurations, error -22 [ 212.346071][ T5697] usb 4-1: GET_CAPABILITIES returned 0 [ 212.358247][ T5697] usbtmc 4-1:16.0: can't read capabilities [ 212.378386][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.398257][ T8247] bridge0: port 3(macvlan3) entered blocking state [ 212.417414][ T8247] bridge0: port 3(macvlan3) entered disabled state [ 212.436432][ T8247] macvlan3: entered allmulticast mode [ 212.449286][ T8247] ip6gretap0: entered allmulticast mode [ 212.470392][ T8247] macvlan3: entered promiscuous mode [ 212.485169][ T8247] bridge0: port 3(macvlan3) entered blocking state [ 212.491894][ T8247] bridge0: port 3(macvlan3) entered forwarding state [ 212.520793][ T188] logitech 0003:046D:C293.0008: unknown main item tag 0x0 [ 212.533183][ T188] logitech 0003:046D:C293.0008: unknown main item tag 0x0 [ 212.543592][ T188] logitech 0003:046D:C293.0008: unknown main item tag 0x0 [ 212.551811][ T188] logitech 0003:046D:C293.0008: unknown main item tag 0x0 [ 212.559859][ T188] logitech 0003:046D:C293.0008: unknown main item tag 0x0 [ 212.568027][ T188] logitech 0003:046D:C293.0008: unknown main item tag 0x0 [ 212.585459][ T188] logitech 0003:046D:C293.0008: unknown main item tag 0x0 [ 212.598480][ T188] logitech 0003:046D:C293.0008: unknown main item tag 0x0 [ 212.606217][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.633857][ T188] logitech 0003:046D:C293.0008: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.2-1/input0 [ 212.665696][ T188] logitech 0003:046D:C293.0008: no inputs found [ 212.689130][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.699440][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.708516][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.717601][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.780776][ T188] usb 3-1: USB disconnect, device number 25 [ 212.793881][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.802989][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.812031][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.821099][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.830140][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.905646][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.914824][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.923872][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.938457][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.947555][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.956631][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 212.987018][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 213.011926][ T995] usb 4-1: USB disconnect, device number 18 [ 213.131054][ T8255] syzkaller0: entered promiscuous mode [ 213.137044][ T8255] syzkaller0: entered allmulticast mode [ 213.202205][ T8261] syzkaller0: entered promiscuous mode [ 213.207951][ T8261] syzkaller0: entered allmulticast mode [ 213.415256][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.664339][ T8279] syzkaller0: entered promiscuous mode [ 213.727741][ T8279] syzkaller0: entered allmulticast mode [ 214.084596][ T8289] vlan3: entered promiscuous mode [ 214.094004][ T8289] bond0: entered promiscuous mode [ 214.113222][ T8289] bond_slave_0: entered promiscuous mode [ 214.310281][ T8291] syzkaller0: entered promiscuous mode [ 214.328829][ T8291] syzkaller0: entered allmulticast mode [ 214.455774][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.487993][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.650442][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.536080][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.800921][ T8301] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 216.863329][ T8321] syzkaller0: entered promiscuous mode [ 216.901012][ T8321] syzkaller0: entered allmulticast mode [ 216.939447][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.811'. [ 217.038060][ T8330] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.069540][ T8328] syzkaller0: entered promiscuous mode [ 217.086994][ T8328] syzkaller0: entered allmulticast mode [ 217.282996][ T8343] syzkaller0: entered promiscuous mode [ 217.290683][ T8343] syzkaller0: entered allmulticast mode [ 217.485171][ T8353] syzkaller0: entered promiscuous mode [ 217.492437][ T8353] syzkaller0: entered allmulticast mode [ 217.567375][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.114115][ T8362] tipc: Started in network mode [ 218.120034][ T8362] tipc: Node identity 02fd490ad5d8, cluster identity 4711 [ 218.130216][ T8362] tipc: Enabled bearer , priority 0 [ 218.143866][ T8362] syzkaller0: entered promiscuous mode [ 218.150991][ T8362] syzkaller0: entered allmulticast mode [ 218.189336][ T8362] tipc: Resetting bearer [ 218.199604][ T8361] tipc: Resetting bearer [ 218.233072][ T8361] tipc: Disabling bearer [ 218.616035][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.665937][ T8372] syzkaller1: entered promiscuous mode [ 218.687067][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.689660][ T8372] syzkaller1: entered allmulticast mode [ 219.090880][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.437318][ T188] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 219.596012][ T188] usb 4-1: Using ep0 maxpacket: 32 [ 219.606101][ T188] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.617165][ T188] usb 4-1: config 0 has no interfaces? [ 219.623918][ T188] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 219.633549][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.646523][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.650638][ T188] usb 4-1: config 0 descriptor?? [ 219.714331][ T8396] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.728411][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.737135][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.123805][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.838'. [ 220.145776][ T8406] syz_tun: Device is already in use. [ 220.151746][ T8407] syzkaller0: entered promiscuous mode [ 220.158201][ T8407] syzkaller0: entered allmulticast mode [ 220.250668][ T8409] syzkaller0: entered promiscuous mode [ 220.256441][ T8409] syzkaller0: entered allmulticast mode [ 220.659405][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 220.695895][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.716555][ T188] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 220.733976][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 220.875594][ T188] usb 3-1: Using ep0 maxpacket: 16 [ 220.882881][ T188] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 220.901429][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.929464][ T188] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 220.941048][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.950771][ T188] usb 3-1: Product: syz [ 220.955093][ T188] usb 3-1: Manufacturer: syz [ 220.960821][ T188] usb 3-1: SerialNumber: syz [ 220.971972][ T188] usb 3-1: config 0 descriptor?? [ 220.995067][ T5689] usb 4-1: USB disconnect, device number 19 [ 221.008904][ T188] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 221.020603][ T188] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 221.609342][ T188] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 221.631905][ T188] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 221.691481][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 221.735834][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.995731][ T5629] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 222.155664][ T5629] usb 2-1: Using ep0 maxpacket: 32 [ 222.166415][ T5629] usb 2-1: config 0 has an invalid interface number: 131 but max is 0 [ 222.181832][ T5629] usb 2-1: config 0 has no interface number 0 [ 222.191936][ T5629] usb 2-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30 [ 222.214546][ T5629] usb 2-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 222.240693][ T5629] usb 2-1: config 0 interface 131 has no altsetting 0 [ 222.260187][ T5629] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 222.276363][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.287700][ T5629] usb 2-1: Product: syz [ 222.292368][ T5629] usb 2-1: Manufacturer: syz [ 222.297831][ T5629] usb 2-1: SerialNumber: syz [ 222.316612][ T5629] usb 2-1: config 0 descriptor?? [ 222.406544][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 222.617181][ T8471] syzkaller0: entered promiscuous mode [ 222.622884][ T8471] syzkaller0: entered allmulticast mode [ 222.671349][ T188] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 222.767687][ T5629] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 222.769595][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.782348][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.791938][ T5629] gspca_topro: reg_w err -71 [ 222.826328][ T5629] gspca_topro: Sensor soi763a [ 222.846192][ T5629] usb 2-1: USB disconnect, device number 28 [ 222.883443][ T188] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 222.920348][ T188] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 222.934139][ T188] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 222.942651][ T188] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 222.949882][ T188] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 222.964652][ T188] usb 3-1: USB disconnect, device number 26 [ 223.685636][ T29] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 223.805842][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.868679][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 223.876382][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 223.887553][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.898122][ T188] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 223.935793][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 223.958309][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 223.970797][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 223.978977][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 224.007093][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.019147][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.037167][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 224.086877][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 224.094807][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 224.106342][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.118518][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.128780][ T188] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 224.176899][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 224.211493][ T29] usb 5-1: string descriptor 0 read error: -22 [ 224.233592][ T29] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 224.251511][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.263245][ T188] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 224.286828][ T188] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.327445][ T188] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.372410][ T188] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 224.387564][ T188] usb 2-1: Product: syz [ 224.392473][ T188] usb 2-1: Manufacturer: syz [ 224.397341][ T188] usb 2-1: SerialNumber: syz [ 224.425418][ T29] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 224.444455][ T188] usb 2-1: config 0 descriptor?? [ 224.474413][ T188] usb 2-1: selecting invalid altsetting 0 [ 224.505911][ T995] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 224.668180][ T995] usb 6-1: unable to get BOS descriptor or descriptor too short [ 224.693682][ T995] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.721177][ T995] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 224.741098][ T995] usb 6-1: config 1 interface 1 has no altsetting 0 [ 224.778341][ T995] usb 6-1: string descriptor 0 read error: -22 [ 224.791151][ T995] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 224.806791][ T995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.848964][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.892107][ T188] usb 2-1: USB disconnect, device number 29 [ 225.053620][ T995] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 225.104142][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.117764][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.818363][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.892317][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.066924][ T5629] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 226.115058][ T8520] netlink: 'syz.2.874': attribute type 13 has an invalid length. [ 226.240640][ T5629] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 226.256776][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.270693][ T5629] usb 4-1: Product: syz [ 226.278885][ T5629] usb 4-1: Manufacturer: syz [ 226.283789][ T5629] usb 4-1: SerialNumber: syz [ 226.304759][ T5629] usb 4-1: config 0 descriptor?? [ 226.318781][ T5629] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 226.335806][ T995] usb 5-1: USB disconnect, device number 24 [ 226.521235][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 226.845845][ T188] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 226.853500][ T995] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 226.926670][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.007252][ T995] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 227.010891][ T188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 227.015429][ T995] usb 2-1: config 0 has no interface number 0 [ 227.016455][ T995] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.030308][ T188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.044855][ T995] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 227.054409][ T188] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.062580][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.075709][ T188] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.082171][ T995] usb 2-1: Product: syz [ 227.092930][ T995] usb 2-1: Manufacturer: syz [ 227.096187][ T188] usb 3-1: config 1 interface 0 has no altsetting 0 [ 227.098201][ T995] usb 2-1: SerialNumber: syz [ 227.113224][ T188] usb 3-1: string descriptor 0 read error: -22 [ 227.119895][ T995] usb 2-1: config 0 descriptor?? [ 227.126630][ T188] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 227.136268][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.145987][ T995] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 227.392004][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 227.404260][ T995] usb 2-1: USB disconnect, device number 30 [ 227.429039][ T995] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 227.519782][ T29] usb 6-1: USB disconnect, device number 23 [ 227.611072][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.630772][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.647372][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.664500][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.694959][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.718058][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.725034][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.732296][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.740389][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.747383][ T188] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 227.826842][ T188] kone 0003:1E7D:2CED.0009: hidraw0: USB HID v0.05 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 227.850691][ T188] kone 0003:1E7D:2CED.0009: couldn't init struct kone_device [ 227.860563][ T188] kone 0003:1E7D:2CED.0009: couldn't install mouse [ 227.872559][ T188] kone 0003:1E7D:2CED.0009: probe with driver kone failed with error -5 [ 227.906788][ T188] usb 3-1: USB disconnect, device number 27 [ 227.966091][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.994639][ T8545] fido_id[8545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 228.096563][ T8547] syzkaller0: entered promiscuous mode [ 228.102337][ T8547] syzkaller0: entered allmulticast mode [ 228.562656][ T5629] gspca_stk1135: reg_w 0x2ff err -71 [ 228.572877][ T8552] syzkaller0: entered promiscuous mode [ 228.580798][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 228.588276][ T5629] gspca_stk1135: Sensor write failed [ 228.593935][ T8552] syzkaller0: entered allmulticast mode [ 228.600228][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 228.608759][ T5629] gspca_stk1135: Sensor write failed [ 228.614295][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 228.626988][ T5629] gspca_stk1135: Sensor read failed [ 228.634812][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 228.643676][ T5629] gspca_stk1135: Sensor read failed [ 228.650846][ T5629] gspca_stk1135: Detected sensor type unknown (0x0) [ 228.667554][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 228.681833][ T5629] gspca_stk1135: Sensor read failed [ 228.693721][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 228.708432][ T5629] gspca_stk1135: Sensor read failed [ 228.721618][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 228.738500][ T5629] gspca_stk1135: Sensor write failed [ 228.750494][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 228.765133][ T5629] gspca_stk1135: Sensor write failed [ 228.778743][ T5629] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 228.807518][ T5629] usb 4-1: USB disconnect, device number 20 [ 228.848263][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.005978][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.157566][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 229.326236][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.736616][ T5629] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 229.922302][ T5629] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.939300][ T5629] usb 2-1: not running at top speed; connect to a high speed hub [ 229.953741][ T5629] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 229.964584][ T5629] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 229.973881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.985300][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.995303][ T5629] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 230.023998][ T5629] usb 2-1: config 14 has no interface number 0 [ 230.045878][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.071661][ T5629] usb 2-1: config 14 has no interface number 1 [ 230.099990][ T5629] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 230.131332][ T5629] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 230.159594][ T5629] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.187791][ T5629] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.226857][ T5629] usb 2-1: config 14 interface 57 has no altsetting 0 [ 230.271732][ T5629] usb 2-1: config 14 interface 228 has no altsetting 0 [ 230.297376][ T5629] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 230.315227][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.346630][ T5629] usb 2-1: Product: syz [ 230.363083][ T5629] usb 2-1: Manufacturer: syz [ 230.377426][ T5629] usb 2-1: SerialNumber: syz [ 230.551116][ T995] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 230.574339][ T8592] syzkaller0: entered promiscuous mode [ 230.591189][ T8592] syzkaller0: entered allmulticast mode [ 230.854642][ T5629] legousbtower 2-1:14.57: interrupt endpoints not found [ 231.089387][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.185848][ T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 231.271356][ T5629] legousbtower 2-1:14.228: get version request failed: -71 [ 231.289096][ T5629] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 231.314058][ T5629] usb 2-1: USB disconnect, device number 31 [ 231.347466][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 231.393266][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.419429][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 231.438674][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 231.447313][ T9] usb 5-1: Product: syz [ 231.451587][ T9] usb 5-1: Manufacturer: syz [ 231.456803][ T9] usb 5-1: SerialNumber: syz [ 231.471738][ T9] usb 5-1: config 0 descriptor?? [ 231.499183][ T9] usb 5-1: selecting invalid altsetting 0 [ 231.524855][ T8606] syzkaller0: entered promiscuous mode [ 231.548687][ T8606] syzkaller0: entered allmulticast mode [ 231.745702][ T188] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 231.763101][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 231.867745][ T5629] usb 5-1: USB disconnect, device number 25 [ 231.896944][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.910388][ T188] usb 4-1: config 1 interface 0 has no altsetting 0 [ 231.940546][ T188] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 231.964894][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.994007][ T8619] syzkaller0: entered promiscuous mode [ 232.000575][ T188] usb 4-1: Product: syz [ 232.017208][ T188] usb 4-1: Manufacturer: syz [ 232.019784][ T8619] syzkaller0: entered allmulticast mode [ 232.031347][ T188] usb 4-1: SerialNumber: syz [ 232.126011][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.275693][ T188] usbhid 4-1:1.0: can't add hid device: -71 [ 232.281846][ T188] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 232.297377][ T188] usb 4-1: USB disconnect, device number 21 [ 232.499206][ T8628] fuse: Bad value for 'fd' [ 232.575629][ T8630] netlink: 'syz.4.913': attribute type 1 has an invalid length. [ 232.635982][ T5629] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 232.677703][ T8630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.745401][ T8634] ip6erspan0: entered allmulticast mode [ 232.792880][ T5629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.803909][ T8630] bond4: (slave geneve2): making interface the new active one [ 232.832764][ T8630] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 232.869627][ T5629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.900847][ T5629] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.983050][ T5629] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.007892][ T8638] syzkaller0: entered promiscuous mode [ 233.018768][ T5629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.019548][ T8638] syzkaller0: entered allmulticast mode [ 233.043591][ T8638] TC_ACT_REPEAT abuse ? [ 233.059971][ T5629] usb 2-1: config 0 descriptor?? [ 233.517955][ T188] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 233.549335][ T5629] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 233.717171][ T188] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 233.757414][ T188] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.781266][ T188] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 233.798189][ T188] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 233.823353][ T188] usb 6-1: Product: syz [ 233.841271][ T188] usb 6-1: Manufacturer: syz [ 233.855248][ T188] usb 6-1: SerialNumber: syz [ 233.866944][ T188] usb 6-1: config 0 descriptor?? [ 233.884397][ T188] usb 6-1: selecting invalid altsetting 0 [ 233.936431][ T1186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.069871][ T8653] syzkaller0: entered promiscuous mode [ 234.088725][ T8653] syzkaller0: entered allmulticast mode [ 234.182330][ T29] usb 2-1: USB disconnect, device number 32 [ 234.207769][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.284263][ T8659] tipc: Started in network mode [ 234.290531][ T8659] tipc: Node identity 2e986a6f4cfc, cluster identity 4711 [ 234.299935][ T8659] tipc: Enabled bearer , priority 0 [ 234.307336][ T1186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.308904][ T5629] usb 6-1: USB disconnect, device number 24 [ 234.325017][ T8659] syzkaller0: entered promiscuous mode [ 234.331649][ T8659] syzkaller0: entered allmulticast mode [ 234.346276][ T8659] tipc: Resetting bearer [ 234.355216][ T8658] tipc: Resetting bearer [ 234.371568][ T8658] tipc: Disabling bearer [ 234.521015][ T8661] syzkaller0: entered promiscuous mode [ 234.527360][ T8661] syzkaller0: entered allmulticast mode [ 234.599195][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 234.896342][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 235.071647][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 235.098157][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.122482][ T9] usb 3-1: Product: syz [ 235.135186][ T9] usb 3-1: Manufacturer: syz [ 235.144788][ T36] net_ratelimit: 3 callbacks suppressed [ 235.144805][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.150014][ T9] usb 3-1: SerialNumber: syz [ 235.247792][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.391492][ T5641] Bluetooth: hci1: SCO packet for unknown connection handle 212 [ 235.617204][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 235.664935][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 235.993462][ T8695] fuse: Bad value for 'fd' [ 236.287290][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.295804][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.664820][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.673213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.824074][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.826291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 236.839967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.886305][ T97] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.068761][ T8705] syzkaller0: entered promiscuous mode [ 237.089238][ T8705] syzkaller0: entered allmulticast mode [ 237.536607][ T188] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 237.716192][ T188] usb 5-1: Using ep0 maxpacket: 32 [ 237.738252][ T188] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 237.756509][ T188] usb 5-1: config 0 has no interface number 0 [ 237.769692][ T188] usb 5-1: config 0 interface 184 has no altsetting 0 [ 237.791500][ T188] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 237.810084][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.837626][ T188] usb 5-1: Product: syz [ 237.850560][ T188] usb 5-1: Manufacturer: syz [ 237.865581][ T188] usb 5-1: SerialNumber: syz [ 237.904043][ T188] usb 5-1: config 0 descriptor?? [ 238.124057][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 238.157499][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 238.190397][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 238.249321][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 238.332000][ T9] usb 3-1: USB disconnect, device number 28 [ 238.539972][ T8722] syzkaller0: entered promiscuous mode [ 238.545867][ T8722] syzkaller0: entered allmulticast mode [ 238.555336][ T188] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 238.570583][ T188] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 238.869690][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.949'. [ 238.884584][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 239.026676][ T5704] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 239.189301][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.208685][ T8739] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 239.208685][ T8739] The task syz.5.950 (8739) triggered the difference, watch for misbehavior. [ 239.231077][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.248200][ T5704] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 239.267066][ T5704] usb 2-1: config 1 interface 1 has no altsetting 0 [ 239.288033][ T5704] usb 2-1: string descriptor 0 read error: -22 [ 239.304126][ T5704] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 239.339849][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.494064][ T5704] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 239.577565][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.608381][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.348343][ T8751] netlink: 'syz.2.953': attribute type 13 has an invalid length. [ 240.451410][ T995] net_ratelimit: 10 callbacks suppressed [ 240.451428][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.749839][ T8764] fuse: Bad value for 'fd' [ 240.877408][ T1186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.886549][ T188] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 240.904225][ T188] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 240.914364][ T188] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 240.935322][ T188] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 240.970808][ T188] usb 5-1: USB disconnect, device number 26 [ 241.045451][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.488509][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.512653][ T8767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.765606][ T5704] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 241.905637][ T995] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 242.038109][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.057489][ T995] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 242.065973][ T995] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 242.086400][ T995] usb 6-1: config 0 has no interface number 0 [ 242.105753][ T995] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.148308][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.170591][ T8767] bond0: entered allmulticast mode [ 242.182576][ T995] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.205138][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.224548][ T8767] bond_slave_0: entered allmulticast mode [ 242.233114][ T8767] bond_slave_1: entered allmulticast mode [ 242.248044][ T995] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 242.251210][ T5629] usb 2-1: USB disconnect, device number 33 [ 242.275429][ T8767] bond_slave_0: entered promiscuous mode [ 242.282396][ T8767] bond_slave_1: entered promiscuous mode [ 242.298745][ T8767] bridge1: port 1(macvlan2) entered blocking state [ 242.305402][ T8767] bridge1: port 1(macvlan2) entered forwarding state [ 242.327368][ T995] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 242.349925][ T995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.370031][ T8767] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.407889][ T995] usb 6-1: config 0 descriptor?? [ 242.414687][ T8769] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 242.427068][ T8767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.488392][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.516502][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.559359][ T5704] usb 5-1: no configurations [ 242.576128][ T5704] usb 5-1: can't read configurations, error -22 [ 242.727155][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 243.036805][ T995] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input29 [ 243.258048][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.268310][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.284491][ T995] usb 6-1: USB disconnect, device number 25 [ 243.284563][ C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 243.392644][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 243.402544][ T8785] veth1_macvtap: left promiscuous mode [ 243.629382][ T5704] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 243.711376][ T8791] syzkaller0: entered promiscuous mode [ 243.719892][ T8791] syzkaller0: entered allmulticast mode [ 243.733904][ T8791] tipc: Enabled bearer , priority 0 [ 243.748329][ T8790] tipc: Resetting bearer [ 243.765229][ T8790] tipc: Disabling bearer [ 243.815686][ T5704] usb 5-1: Using ep0 maxpacket: 16 [ 243.831821][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.850819][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.870693][ T5704] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.884704][ T5704] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 243.911605][ T5704] usb 5-1: string descriptor 0 read error: -22 [ 243.922565][ T5704] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 243.952976][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.975829][ T995] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 243.998157][ T5704] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 244.016569][ T5704] usb 5-1: MIDIStreaming interface descriptor not found [ 244.145975][ T995] usb 4-1: Using ep0 maxpacket: 8 [ 244.165643][ T995] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 244.200024][ T995] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 244.210261][ T5704] usb 5-1: USB disconnect, device number 28 [ 244.229113][ T995] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 244.254953][ T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.283431][ T995] usb 4-1: Product: syz [ 244.295328][ T995] usb 4-1: Manufacturer: syz [ 244.312536][ T995] usb 4-1: SerialNumber: syz [ 244.739185][ T995] usb 4-1: USB disconnect, device number 22 [ 244.847993][ T8811] tipc: Enabled bearer , priority 0 [ 244.878194][ T8811] syzkaller0: entered promiscuous mode [ 244.916495][ T8811] syzkaller0: entered allmulticast mode [ 244.952057][ T8814] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 245.265892][ T5704] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 245.270581][ T8819] syzkaller0: entered promiscuous mode [ 245.290317][ T8819] syzkaller0: entered allmulticast mode [ 245.356824][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 245.461540][ T5704] usb 5-1: Using ep0 maxpacket: 16 [ 245.482148][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.511181][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.531832][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 245.559414][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 245.572913][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.609492][ T5704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 245.619235][ T9] usb 3-1: config 0 has no interfaces? [ 245.640019][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 245.649188][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.665904][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.697853][ T5704] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.712925][ T9] usb 3-1: config 0 descriptor?? [ 245.725678][ T5704] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.735674][ T995] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 245.743804][ T5704] usb 5-1: Manufacturer: syz [ 245.763272][ T5704] usb 5-1: config 0 descriptor?? [ 245.898589][ T995] usb 4-1: Using ep0 maxpacket: 32 [ 245.909696][ T995] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 245.925743][ T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.936969][ T995] usb 4-1: config 0 descriptor?? [ 245.955435][ T8811] tipc: Resetting bearer [ 245.969114][ T5627] tipc: Node number set to 1650748015 [ 245.986093][ T8810] tipc: Resetting bearer [ 245.992313][ T5627] usb 3-1: USB disconnect, device number 29 [ 246.032336][ T8810] tipc: Disabling bearer [ 246.087181][ T5704] rc_core: IR keymap rc-hauppauge not found [ 246.093142][ T5704] Registered IR keymap rc-empty [ 246.100932][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.108299][ T8828] binder: 8822:8828 unknown command 0 [ 246.114015][ T8828] binder: 8822:8828 ioctl c0306201 2000000004c0 returned -22 [ 246.136206][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.151791][ T995] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 246.154690][ T8821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.169561][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 246.176507][ T995] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 246.183182][ T5704] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 246.188067][ T995] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 246.198703][ T8821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.218639][ T5704] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 246.239981][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.276076][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.305910][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.325724][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.346270][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.366610][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.374918][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.384015][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.394487][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.401786][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 246.411094][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 246.420322][ T9] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 246.429549][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.436764][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.444838][ T9] usb 2-1: Product: syz [ 246.449248][ T9] usb 2-1: Manufacturer: syz [ 246.453916][ T9] usb 2-1: SerialNumber: syz [ 246.458671][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.485651][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 246.508728][ T5704] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 246.518265][ T5704] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 246.538936][ T5704] usb 5-1: USB disconnect, device number 29 [ 246.688194][ T8826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.704685][ T8826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.758830][ T8831] syzkaller0: entered promiscuous mode [ 246.779599][ T8831] syzkaller0: entered allmulticast mode [ 246.856646][ T8836] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 246.879037][ T8836] syzkaller0: entered promiscuous mode [ 246.884663][ T8836] syzkaller0: entered allmulticast mode [ 247.043250][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 247.077732][ T9] usb 2-1: USB disconnect, device number 34 [ 247.154503][ T7684] udevd[7684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.202875][ T8847] syzkaller0: entered promiscuous mode [ 247.217082][ T8847] syzkaller0: entered allmulticast mode [ 247.230261][ T8849] syzkaller0: entered promiscuous mode [ 247.235911][ T5627] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 247.247335][ T8849] syzkaller0: entered allmulticast mode [ 247.406156][ T5627] usb 6-1: Using ep0 maxpacket: 32 [ 247.413286][ T5627] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 247.433886][ T5627] usb 6-1: config 0 has no interface number 0 [ 247.448578][ T5627] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 247.480973][ T5627] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 247.520369][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.538220][ T5627] usb 6-1: Product: syz [ 247.549988][ T5627] usb 6-1: Manufacturer: syz [ 247.558744][ T5627] usb 6-1: SerialNumber: syz [ 247.600517][ T5627] usb 6-1: config 0 descriptor?? [ 247.621405][ T8842] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 247.649457][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 247.853398][ T8842] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 248.003264][ T8856] kvm: kvm [8855]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 249.012475][ T8871] tipc: Enabled bearer , priority 0 [ 249.022160][ T8871] syzkaller0: entered promiscuous mode [ 249.028326][ T8871] syzkaller0: entered allmulticast mode [ 249.047017][ T8871] tipc: Resetting bearer [ 249.062441][ T8870] tipc: Resetting bearer [ 249.084726][ T8870] tipc: Disabling bearer [ 249.195695][ T29] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 249.375592][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 249.391673][ T29] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 249.410639][ T29] usb 2-1: config 0 has no interface number 0 [ 249.427641][ T29] usb 2-1: config 0 interface 184 has no altsetting 0 [ 249.445115][ T29] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 249.468358][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.478646][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 249.485662][ T29] usb 2-1: Product: syz [ 249.493586][ T29] usb 2-1: Manufacturer: syz [ 249.504138][ T29] usb 2-1: SerialNumber: syz [ 249.513860][ T29] usb 2-1: config 0 descriptor?? [ 249.655769][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 249.675294][ T9] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 249.705633][ T9] usb 5-1: config 0 has no interface number 0 [ 249.712575][ T9] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 249.726267][ T9] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 249.740648][ T9] usb 5-1: config 0 interface 48 has no altsetting 0 [ 249.768038][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 249.785376][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.800404][ T9] usb 5-1: Product: syz [ 249.813182][ T9] usb 5-1: Manufacturer: syz [ 249.824374][ T9] usb 5-1: SerialNumber: syz [ 249.841555][ T9] usb 5-1: config 0 descriptor?? [ 250.087216][ T9] dvb_usb_dtv5100 5-1:0.48: probe with driver dvb_usb_dtv5100 failed with error -71 [ 250.112085][ T9] usb 5-1: USB disconnect, device number 30 [ 250.160284][ T29] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 250.192334][ T29] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 250.910424][ T5704] hid_parser_main: 4008 callbacks suppressed [ 250.910443][ T5704] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 250.964604][ T5704] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.119445][ T5627] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 251.131164][ T5627] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 251.147398][ T5627] asix 6-1:0.188: probe with driver asix failed with error -71 [ 251.197758][ T5627] usb 6-1: USB disconnect, device number 26 [ 252.492339][ T8925] syzkaller0: entered promiscuous mode [ 252.498202][ T8925] syzkaller0: entered allmulticast mode [ 253.034824][ T29] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000034: -71 [ 253.091972][ T29] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write BURST_CAP: -71 [ 253.114532][ T29] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 253.142119][ T29] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 253.215782][ T29] usb 2-1: USB disconnect, device number 35 [ 253.383760][ T5627] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 253.508624][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 253.555638][ T5689] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 253.568126][ T5627] usb 5-1: config 0 has an invalid interface number: 252 but max is 0 [ 253.598802][ T5627] usb 5-1: config 0 has no interface number 0 [ 253.621508][ T5627] usb 5-1: config 0 interface 252 has no altsetting 0 [ 253.668211][ T5627] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91 [ 253.700032][ T5627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.721159][ T5689] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 253.730916][ T5689] usb 6-1: config 0 has no interface number 0 [ 253.734644][ T5627] usb 5-1: Product: syz [ 253.740609][ T5689] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.755206][ T5689] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 253.768251][ T5627] usb 5-1: Manufacturer: syz [ 253.780666][ T5627] usb 5-1: SerialNumber: syz [ 253.782002][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.794540][ T5689] usb 6-1: Product: syz [ 253.799597][ T5689] usb 6-1: Manufacturer: syz [ 253.804688][ T5689] usb 6-1: SerialNumber: syz [ 253.822235][ T5627] usb 5-1: config 0 descriptor?? [ 253.827563][ T5689] usb 6-1: config 0 descriptor?? [ 253.852289][ T5689] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 253.966878][ T9] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 254.110394][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 254.156278][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 254.189830][ T9] usb 2-1: no configurations [ 254.205537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 254.212279][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 254.232136][ T9] usb 2-1: can't read configurations, error -22 [ 254.239415][ T5704] usb 6-1: USB disconnect, device number 27 [ 254.254538][ T5704] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 254.501050][ T5627] usb 5-1: USB disconnect, device number 31 [ 254.522660][ T8946] syzkaller0: entered promiscuous mode [ 254.532366][ T8946] syzkaller0: entered allmulticast mode [ 255.099054][ T29] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 255.167272][ T8957] macvlan4: entered allmulticast mode [ 255.181959][ T8957] dummy0: entered allmulticast mode [ 255.190479][ T8957] dummy0: entered promiscuous mode [ 255.202077][ T8957] team0: Port device macvlan4 added [ 255.295828][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 255.307070][ T29] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 255.320546][ T29] usb 6-1: config 0 has no interface number 0 [ 255.326816][ T29] usb 6-1: config 0 interface 184 has no altsetting 0 [ 255.337883][ T29] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 255.348403][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.357328][ T29] usb 6-1: Product: syz [ 255.361620][ T29] usb 6-1: Manufacturer: syz [ 255.368452][ T29] usb 6-1: SerialNumber: syz [ 255.374564][ T8964] syzkaller0: entered promiscuous mode [ 255.382652][ T29] usb 6-1: config 0 descriptor?? [ 255.386614][ T8964] syzkaller0: entered allmulticast mode [ 255.454037][ T8963] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1028'. [ 255.470490][ T8963] dummy0 (unregistering): left allmulticast mode [ 255.483165][ T8963] team0: Port device macvlan4 removed [ 255.567398][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.574481][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.703016][ T8970] syzkaller0: entered promiscuous mode [ 255.712864][ T8970] syzkaller0: entered allmulticast mode [ 256.021867][ T29] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 256.072748][ T29] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 256.256576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 256.306494][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 256.811981][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 256.854050][ T8985] bridge1: port 2(ip6erspan0) entered blocking state [ 256.872137][ T8985] bridge1: port 2(ip6erspan0) entered disabled state [ 256.889833][ T8985] ip6erspan0: entered allmulticast mode [ 256.919640][ T8985] ip6erspan0: entered promiscuous mode [ 256.941822][ T8985] macvlan2: entered promiscuous mode [ 256.962047][ T8985] bond0: entered promiscuous mode [ 257.025634][ T5627] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 257.135870][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 257.198653][ T5627] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 257.223109][ T5627] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 257.243598][ T5627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.263977][ T5627] usb 3-1: Product: syz [ 257.274975][ T5627] usb 3-1: Manufacturer: syz [ 257.293279][ T5627] usb 3-1: SerialNumber: syz [ 257.298127][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 257.307677][ T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 257.320405][ T9] usb 5-1: config 0 has no interface number 0 [ 257.358274][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 257.380566][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.404562][ T9] usb 5-1: Product: syz [ 257.417851][ T9] usb 5-1: Manufacturer: syz [ 257.425863][ T9] usb 5-1: SerialNumber: syz [ 257.437593][ T5629] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.458912][ T9] usb 5-1: config 0 descriptor?? [ 257.662566][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.678381][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.695064][ T9] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 257.703164][ T9] uvcvideo 5-1:0.31: No valid video chain found. [ 257.712653][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.740447][ T9] usb 5-1: USB disconnect, device number 32 [ 257.783351][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.813331][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.836271][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.851299][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.866134][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.882206][ T8986] netlink: 11870 bytes leftover after parsing attributes in process `syz.2.1034'. [ 257.990648][ T8991] xt_hashlimit: size too large, truncated to 1048576 [ 258.422371][ T5689] usb 3-1: USB disconnect, device number 30 [ 258.527755][ T5629] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 258.541545][ T9004] fuse: root generation should be zero [ 258.570308][ T5629] ath9k_htc: Failed to initialize the device [ 258.593708][ T5689] usb 3-1: ath9k_htc: USB layer deinitialized [ 258.764612][ T29] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 258.809262][ T29] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 258.851858][ T29] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.881955][ T29] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.923226][ T29] usb 6-1: USB disconnect, device number 28 [ 259.066065][ T9021] loop5: detected capacity change from 0 to 7 [ 259.082334][ T9021] Dev loop5: unable to read RDB block 7 [ 259.093638][ T9021] loop5: AHDI p2 [ 259.100858][ T9021] loop5: partition table partially beyond EOD, truncated [ 259.135588][ T5689] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 259.319972][ T5689] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.353283][ T5689] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 259.373772][ T4994] Dev loop5: unable to read RDB block 7 [ 259.379838][ T4994] loop5: AHDI p2 [ 259.385042][ T5689] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 259.397478][ T4994] loop5: partition table partially beyond EOD, truncated [ 259.412684][ T5689] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.445979][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.473759][ T5689] usb 2-1: Product: syz [ 259.488475][ T5689] usb 2-1: Manufacturer: syz [ 259.499529][ T5689] usb 2-1: SerialNumber: syz [ 259.523251][ T5689] usb 2-1: selecting invalid altsetting 1 [ 259.728224][ T4994] Dev loop5: unable to read RDB block 7 [ 259.756119][ T4994] loop5: AHDI p2 [ 259.773669][ T4994] loop5: partition table partially beyond EOD, truncated [ 260.125738][ T5629] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 260.166092][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 260.292563][ T5689] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 260.299792][ T5629] usb 6-1: Using ep0 maxpacket: 8 [ 260.319813][ T5629] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.324549][ T5689] cdc_ncm 2-1:1.0: bind() failure [ 260.353954][ T5629] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.382398][ T5629] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.388660][ T5689] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 260.396151][ T5629] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.427044][ T5689] cdc_ncm 2-1:1.1: bind() failure [ 260.435773][ T5629] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.449291][ T5629] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.459425][ T9038] syzkaller0: entered promiscuous mode [ 260.469733][ T5689] usb 2-1: USB disconnect, device number 38 [ 260.479772][ T9038] syzkaller0: entered allmulticast mode [ 260.494983][ T9040] syzkaller0: entered promiscuous mode [ 260.510050][ T9040] syzkaller0: entered allmulticast mode [ 260.533938][ T9038] tipc: Enabled bearer , priority 0 [ 260.550621][ T9040] tipc: Enabled bearer , priority 0 [ 260.572124][ T9040] tipc: Resetting bearer [ 260.582345][ T9039] tipc: Resetting bearer [ 260.600884][ T9039] tipc: Disabling bearer [ 260.688199][ T5629] usb 6-1: GET_CAPABILITIES returned 0 [ 260.705614][ T5629] usbtmc 6-1:16.0: can't read capabilities [ 260.805811][ T5627] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 260.959336][ T5627] usb 3-1: not running at top speed; connect to a high speed hub [ 260.973775][ T5627] usb 3-1: config 1 interface 0 has no altsetting 0 [ 260.988276][ T5627] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.40 [ 260.998495][ T5629] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 261.012596][ T5627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.031480][ T5627] usb 3-1: Product: syz [ 261.040008][ T5627] usb 3-1: Manufacturer: syz [ 261.055646][ T5627] usb 3-1: SerialNumber: syz [ 261.072921][ T9] usb 6-1: USB disconnect, device number 29 [ 261.178749][ T5629] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.188365][ T5629] usb 5-1: not running at top speed; connect to a high speed hub [ 261.198059][ T5629] usb 5-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 261.209219][ T5629] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 261.220816][ T5629] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.238071][ T5629] usb 5-1: string descriptor 0 read error: -22 [ 261.244611][ T5629] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 261.254370][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.270022][ T9038] tipc: Resetting bearer [ 261.284202][ T5629] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 261.293139][ T5629] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 261.301994][ T5629] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 261.321449][ T5629] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 261.334152][ T5627] usbhid 3-1:1.0: can't add hid device: -71 [ 261.341452][ T9037] tipc: Resetting bearer [ 261.347516][ T5627] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 261.365667][ T5627] usb 3-1: USB disconnect, device number 31 [ 261.387842][ T9037] tipc: Disabling bearer [ 261.506727][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.526941][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.774905][ T9044] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 261.908834][ T9053] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 261.984627][ T9053] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 262.063731][ T9053] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 262.111416][ T9053] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 262.145396][ T9053] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 262.174909][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'. [ 262.191670][ T9053] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 262.270208][ T9053] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 262.291716][ T9053] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 262.329211][ T9053] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 262.884299][ T5629] usb 5-1: USB disconnect, device number 33 [ 262.975954][ T29] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 263.052178][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 263.126917][ T9074] warning: `syz.3.1060' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 263.155594][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 263.171318][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.191951][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.220549][ T29] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.234909][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.253140][ T29] usb 2-1: Product: syz [ 263.265666][ T29] usb 2-1: Manufacturer: syz [ 263.275668][ T29] usb 2-1: SerialNumber: syz [ 263.320221][ T29] usb 2-1: 0:2 : does not exist [ 263.528730][ T29] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 263.610272][ T9082] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1063'. [ 263.643485][ T29] usb 2-1: USB disconnect, device number 39 [ 263.684031][ T9082] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1063'. [ 263.694559][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 263.722959][ T9082] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1063'. [ 263.766863][ T7684] udevd[7684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.897135][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 263.922570][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 263.936212][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 263.946278][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 263.956336][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 263.965468][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.981534][ T9] usb 5-1: config 0 descriptor?? [ 264.293490][ T9] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 264.307555][ T9] hdpvr 5-1:0.0: device init failed [ 264.321272][ T9] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 264.443732][ T29] usb 5-1: USB disconnect, device number 34 [ 264.486179][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 265.965698][ T29] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 266.142368][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.170503][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.209529][ T29] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 266.242247][ T29] usb 5-1: config 1 interface 1 has no altsetting 0 [ 266.267199][ T29] usb 5-1: string descriptor 0 read error: -22 [ 266.283225][ T9109] tipc: Enabled bearer , priority 0 [ 266.288725][ T29] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 266.312969][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.323631][ T9109] syzkaller0: entered promiscuous mode [ 266.340054][ T9109] syzkaller0: entered allmulticast mode [ 266.366956][ T9109] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1071'. [ 266.396118][ T9109] tipc: Resetting bearer [ 266.437791][ T9108] tipc: Resetting bearer [ 266.478649][ T9108] tipc: Disabling bearer [ 266.518794][ T29] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 266.550842][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.571040][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.725644][ T5629] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 266.902905][ T5629] usb 3-1: config 0 has no interfaces? [ 266.910964][ T5629] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 266.923292][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.931818][ T5629] usb 3-1: Product: syz [ 266.936791][ T5629] usb 3-1: Manufacturer: syz [ 266.941489][ T5629] usb 3-1: SerialNumber: syz [ 266.951021][ T5629] usb 3-1: config 0 descriptor?? [ 266.986408][ T9121] kvm: kvm [9120]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa6 [ 267.257257][ T5629] usb 3-1: USB disconnect, device number 32 [ 267.743846][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 268.215666][ T5629] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 268.375656][ T5629] usb 3-1: Using ep0 maxpacket: 8 [ 268.382374][ T5629] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 268.390808][ T5629] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.400631][ T5629] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.410732][ T5629] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.420696][ T5629] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.433719][ T5629] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.443287][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.454310][ T9147] loop5: detected capacity change from 0 to 7 [ 268.469172][ T9147] Dev loop5: unable to read RDB block 7 [ 268.474991][ T9147] loop5: AHDI p2 [ 268.479166][ T9147] loop5: partition table partially beyond EOD, truncated [ 268.660724][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 268.811199][ T5697] usb 5-1: USB disconnect, device number 35 [ 269.531050][ T9168] tipc: Enabled bearer , priority 0 [ 269.539461][ T9168] syzkaller0: entered promiscuous mode [ 269.545028][ T9168] syzkaller0: entered allmulticast mode [ 269.556252][ T9168] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 269.595632][ T9168] tipc: Resetting bearer [ 269.623747][ T9167] tipc: Resetting bearer [ 269.657374][ T9167] tipc: Disabling bearer [ 269.768045][ T5697] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 269.842476][ T5629] usb 3-1: usb_control_msg returned -71 [ 269.851327][ T5629] usbtmc 3-1:16.0: can't read capabilities [ 269.869344][ T5629] usb 3-1: USB disconnect, device number 33 [ 269.906686][ T5627] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 269.955642][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 269.967336][ T5697] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 269.985592][ T5697] usb 5-1: config 0 has no interface number 0 [ 269.993691][ T5697] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 270.016243][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.024257][ T5697] usb 5-1: Product: syz [ 270.028779][ T5697] usb 5-1: Manufacturer: syz [ 270.045560][ T5697] usb 5-1: SerialNumber: syz [ 270.052434][ T5697] usb 5-1: config 0 descriptor?? [ 270.069380][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 270.082045][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 270.093291][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 270.104729][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 270.117596][ T5627] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 270.126998][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.135080][ T5627] usb 2-1: Product: syz [ 270.139967][ T5627] usb 2-1: Manufacturer: syz [ 270.144678][ T5627] usb 2-1: SerialNumber: syz [ 270.154569][ T5627] usb 2-1: config 0 descriptor?? [ 270.367464][ T5627] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 270.465132][ T5697] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 270.495872][ T5697] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 270.574253][ T9175] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 270.658919][ T5629] usb 2-1: USB disconnect, device number 40 [ 270.847438][ T29] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 271.028959][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 271.043819][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.056969][ T29] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 271.073178][ T29] usb 6-1: config 1 interface 1 has no altsetting 0 [ 271.089180][ T29] usb 6-1: string descriptor 0 read error: -22 [ 271.097307][ T29] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 271.109077][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.313601][ T29] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 271.347670][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.367170][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.655650][ T5629] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 271.695355][ T9192] syzkaller0: entered promiscuous mode [ 271.700956][ T9192] syzkaller0: entered allmulticast mode [ 271.828363][ T5629] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 271.838975][ T5629] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 271.843184][ T9195] syzkaller0: entered promiscuous mode [ 271.852753][ T9195] syzkaller0: entered allmulticast mode [ 271.858434][ T5629] usb 2-1: config 0 has no interface number 0 [ 271.858473][ T5629] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.858497][ T5629] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.858522][ T5629] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 271.858562][ T5629] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 271.858584][ T5629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.870393][ T5629] usb 2-1: config 0 descriptor?? [ 271.923348][ T9190] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 272.112191][ T9200] loop5: detected capacity change from 0 to 7 [ 272.125298][ T9200] Dev loop5: unable to read RDB block 7 [ 272.134097][ T9200] loop5: AHDI p2 [ 272.140099][ T9200] loop5: partition table partially beyond EOD, truncated [ 272.551888][ T5629] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input31 [ 272.758260][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.767781][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.780373][ T5696] usb 2-1: USB disconnect, device number 41 [ 272.780584][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 273.487948][ T5696] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 273.567651][ T188] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 273.645700][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 273.663840][ T5696] usb 3-1: unable to get BOS descriptor or descriptor too short [ 273.678949][ T5629] usb 6-1: USB disconnect, device number 30 [ 273.683637][ T5696] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 273.693480][ T5696] usb 3-1: can't read configurations, error -71 [ 273.743153][ T188] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 273.770003][ T188] usb 2-1: config 0 has no interface number 0 [ 273.784272][ T188] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.808194][ T188] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 273.819011][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.827986][ T188] usb 2-1: Product: syz [ 273.832229][ T188] usb 2-1: Manufacturer: syz [ 273.837221][ T188] usb 2-1: SerialNumber: syz [ 273.844666][ T188] usb 2-1: config 0 descriptor?? [ 273.866610][ T188] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 273.956978][ T5697] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000024: -71 [ 273.971800][ T5697] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 273.991471][ T5697] usb 5-1: USB disconnect, device number 36 [ 274.111318][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 274.118516][ T5629] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 274.132098][ T188] usb 2-1: USB disconnect, device number 42 [ 274.153285][ T188] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 274.285658][ T5629] usb 6-1: Using ep0 maxpacket: 16 [ 274.294231][ T5629] usb 6-1: config 4 has an invalid interface number: 104 but max is 0 [ 274.303230][ T5629] usb 6-1: config 4 has no interface number 0 [ 274.309478][ T5629] usb 6-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11 [ 274.331593][ T5629] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8 [ 274.349882][ T5629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.364722][ T5629] usb 6-1: Product: syz [ 274.369294][ T5629] usb 6-1: Manufacturer: syz [ 274.373962][ T5629] usb 6-1: SerialNumber: syz [ 274.634652][ T5629] rtsx_usb 6-1:4.104: probe with driver rtsx_usb failed with error -71 [ 274.673513][ T9230] syzkaller0: entered promiscuous mode [ 274.683597][ T5629] usb 6-1: USB disconnect, device number 31 [ 274.699165][ T9230] syzkaller0: entered allmulticast mode [ 274.756741][ T9231] tipc: Enabled bearer , priority 0 [ 274.812449][ T9230] tipc: Resetting bearer [ 274.839700][ T9229] tipc: Resetting bearer [ 274.868289][ T9229] tipc: Disabling bearer [ 275.288771][ T9245] loop5: detected capacity change from 0 to 7 [ 275.295738][ T5629] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 275.306250][ T9245] Dev loop5: unable to read RDB block 7 [ 275.316588][ T9245] loop5: AHDI p2 [ 275.323077][ T9245] loop5: partition table partially beyond EOD, truncated [ 275.471219][ T5629] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.527287][ T5629] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 275.578107][ T5629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.631242][ T5629] usb 5-1: config 0 descriptor?? [ 275.680074][ T5629] pwc: Askey VC010 type 2 USB webcam detected. [ 275.825216][ T9251] syz_tun: entered allmulticast mode [ 275.875059][ T5629] pwc: send_video_command error -71 [ 275.886336][ T9250] syz_tun: left allmulticast mode [ 275.910680][ T5629] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 275.969930][ T5629] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 276.014779][ T5629] usb 5-1: USB disconnect, device number 37 [ 276.366644][ T188] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 276.445837][ T5629] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 276.542781][ T188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 276.573212][ T188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.613345][ T188] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 276.631216][ T5629] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.651780][ T188] usb 3-1: config 1 interface 1 has no altsetting 0 [ 276.662083][ T5629] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 276.693996][ T5629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.707144][ T188] usb 3-1: string descriptor 0 read error: -22 [ 276.715069][ T188] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 276.736096][ T5627] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 276.744889][ T5629] usb 5-1: config 0 descriptor?? [ 276.752959][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.788826][ T5629] pwc: Askey VC010 type 2 USB webcam detected. [ 276.918719][ T5627] usb 6-1: Using ep0 maxpacket: 8 [ 276.928901][ T188] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 276.950584][ T5627] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.965194][ T5627] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.976987][ T5627] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.987332][ T5627] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.001817][ T5627] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.019575][ T5627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.030011][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.041516][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.125662][ T6131] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 277.201334][ T5629] pwc: recv_control_msg error -32 req 02 val 2b00 [ 277.208529][ T5629] pwc: recv_control_msg error -32 req 02 val 2700 [ 277.215485][ T5629] pwc: recv_control_msg error -32 req 02 val 2c00 [ 277.223477][ T5629] pwc: recv_control_msg error -32 req 04 val 1000 [ 277.230680][ T5629] pwc: recv_control_msg error -32 req 04 val 1300 [ 277.237678][ T5629] pwc: recv_control_msg error -32 req 04 val 1400 [ 277.245093][ T5629] pwc: recv_control_msg error -32 req 02 val 2000 [ 277.252200][ T5629] pwc: recv_control_msg error -32 req 02 val 2100 [ 277.261055][ T5629] pwc: recv_control_msg error -32 req 04 val 1500 [ 277.267699][ T5627] usb 6-1: GET_CAPABILITIES returned 0 [ 277.273348][ T5627] usbtmc 6-1:16.0: can't read capabilities [ 277.279731][ T5629] pwc: recv_control_msg error -32 req 02 val 2500 [ 277.291000][ T5629] pwc: recv_control_msg error -32 req 02 val 2400 [ 277.298037][ T6131] usb 2-1: unable to get BOS descriptor or descriptor too short [ 277.308183][ T5629] pwc: recv_control_msg error -32 req 02 val 2600 [ 277.315864][ T6131] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.326277][ T5629] pwc: recv_control_msg error -32 req 02 val 2900 [ 277.332772][ T6131] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.344030][ T6131] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 277.353589][ T6131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.361699][ T6131] usb 2-1: Product: syz [ 277.365925][ T6131] usb 2-1: Manufacturer: syz [ 277.370536][ T6131] usb 2-1: SerialNumber: syz [ 277.383275][ T6131] usb 2-1: selecting invalid altsetting 1 [ 277.389900][ T6131] usb 2-1: unit 6 not found! [ 277.543027][ T5629] pwc: recv_control_msg error -71 req 04 val 1100 [ 277.553822][ T5629] pwc: recv_control_msg error -71 req 04 val 1200 [ 277.561865][ T5629] pwc: Registered as video103. [ 277.569725][ T5629] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 277.602805][ T5629] usb 5-1: USB disconnect, device number 38 [ 277.789953][ T6131] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 277.841655][ T6131] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 277.873572][ T7684] udevd[7684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.202221][ T5696] usb 3-1: USB disconnect, device number 36 [ 279.450558][ T5696] usb 6-1: USB disconnect, device number 32 [ 279.743135][ T9297] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[9298] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[9297] [ 279.824627][ T30] audit: type=1800 audit(1785628287.860:25): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1124" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 279.937190][ T6131] usb 2-1: USB disconnect, device number 43 [ 280.424784][ T5641] Bluetooth: hci0: unexpected subevent 0x0a length: 57 > 30 [ 281.357057][ T9322] mmap: syz.4.1134 (9322) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 281.564330][ T9327] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 281.815629][ T29] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 281.975607][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 281.987067][ T29] usb 6-1: config 9 has an invalid interface number: 178 but max is 1 [ 281.997058][ T29] usb 6-1: config 9 has an invalid interface number: 172 but max is 1 [ 282.005430][ T29] usb 6-1: config 9 has no interface number 0 [ 282.011905][ T29] usb 6-1: config 9 has no interface number 1 [ 282.022299][ T29] usb 6-1: config 9 interface 172 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 282.034253][ T29] usb 6-1: config 9 interface 172 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 282.047107][ T29] usb 6-1: config 9 interface 178 has no altsetting 0 [ 282.060065][ T29] usb 6-1: string descriptor 0 read error: -22 [ 282.068546][ T29] usb 6-1: New USB device found, idVendor=06a3, idProduct=f921, bcdDevice=89.69 [ 282.081443][ T9344] syzkaller0: entered promiscuous mode [ 282.087239][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.097024][ T9344] syzkaller0: entered allmulticast mode [ 282.111862][ T9344] tipc: Enabled bearer , priority 0 [ 282.136159][ T9344] tipc: Resetting bearer [ 282.152478][ T9343] tipc: Resetting bearer [ 282.186870][ T6131] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 282.197621][ T9343] tipc: Disabling bearer [ 282.299621][ T9346] tipc: Enabling of bearer rejected, failed to enable media [ 282.321455][ T5629] usb 6-1: USB disconnect, device number 33 [ 282.377932][ T6131] usb 2-1: unable to get BOS descriptor or descriptor too short [ 282.397162][ T6131] usb 2-1: not running at top speed; connect to a high speed hub [ 282.409052][ C0] ================================================================== [ 282.417151][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 282.425162][ C0] Read of size 2 at addr ffff8881677a8d74 by task kworker/u8:0/12 [ 282.432968][ C0] [ 282.435301][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.435320][ C0] Tainted: [L]=SOFTLOCKUP [ 282.435325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.435333][ C0] Workqueue: events_unbound macvlan_process_broadcast [ 282.435363][ C0] Call Trace: [ 282.435369][ C0] [ 282.435374][ C0] dump_stack_lvl+0xe8/0x150 [ 282.435394][ C0] print_address_description+0x55/0x1e0 [ 282.435411][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 282.435428][ C0] print_report+0x58/0x70 [ 282.435443][ C0] kasan_report+0x117/0x150 [ 282.435462][ C0] ? __lock_acquire+0x683/0x2cf0 [ 282.435479][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 282.435514][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 282.435543][ C0] __dev_queue_xmit+0x27f/0x3820 [ 282.435573][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 282.435589][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 282.435604][ C0] ? ebt_do_table+0x2605/0x27d0 [ 282.435620][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 282.435642][ C0] ? ebt_do_table+0x2605/0x27d0 [ 282.435660][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 282.435681][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 282.435698][ C0] ? br_nf_post_routing+0x110/0xee0 [ 282.435731][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 282.435750][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 282.435768][ C0] NF_HOOK+0x360/0x3f0 [ 282.435784][ C0] ? net_generic+0x1e/0x240 [ 282.435805][ C0] ? NF_HOOK+0xa2/0x3f0 [ 282.435821][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 282.435834][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 282.435850][ C0] br_forward_finish+0xd3/0x130 [ 282.435861][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 282.435874][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 282.435886][ C0] NF_HOOK+0x360/0x3f0 [ 282.435898][ C0] ? NF_HOOK+0xa2/0x3f0 [ 282.435909][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 282.435922][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 282.435935][ C0] ? br_handle_vlan+0x5e/0x530 [ 282.435954][ C0] __br_forward+0x397/0x540 [ 282.435966][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 282.435979][ C0] br_flood+0x3e6/0x8d0 [ 282.435995][ C0] br_handle_frame_finish+0x1175/0x1990 [ 282.436014][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 282.436029][ C0] ? net_generic+0x1e/0x240 [ 282.436041][ C0] ? net_generic+0x1e/0x240 [ 282.436054][ C0] ? net_generic+0x1e/0x240 [ 282.436067][ C0] ? setup_pre_routing+0x180/0x6e0 [ 282.436081][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 282.436098][ C0] br_handle_frame+0x81b/0x1510 [ 282.436115][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 282.436146][ C0] ? sock_def_readable+0x2ff/0x550 [ 282.436175][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 282.436189][ C0] ? packet_rcv+0x11a2/0x16f0 [ 282.436208][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 282.436223][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 282.436249][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 282.436272][ C0] ? process_backlog+0x3c3/0x1860 [ 282.436283][ C0] ? lock_acquire+0x106/0x350 [ 282.436300][ C0] ? process_backlog+0x3c3/0x1860 [ 282.436314][ C0] ? process_backlog+0x3c3/0x1860 [ 282.436325][ C0] ? process_backlog+0x3c3/0x1860 [ 282.436337][ C0] process_backlog+0x706/0x1860 [ 282.436351][ C0] ? process_backlog+0x3c3/0x1860 [ 282.436362][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 282.436379][ C0] __napi_poll+0xaa/0x330 [ 282.436398][ C0] net_rx_action+0x61d/0xf50 [ 282.436414][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 282.436425][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 282.436442][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 282.436459][ C0] ? lock_acquire+0x106/0x350 [ 282.436480][ C0] handle_softirqs+0x225/0x840 [ 282.436495][ C0] ? ktime_get+0x1f5/0x220 [ 282.436510][ C0] ? do_softirq+0x76/0xd0 [ 282.436525][ C0] ? netif_rx+0x79/0x90 [ 282.436539][ C0] do_softirq+0x76/0xd0 [ 282.436553][ C0] [ 282.436557][ C0] [ 282.436561][ C0] __local_bh_enable_ip+0xf8/0x130 [ 282.436576][ C0] netif_rx+0x83/0x90 [ 282.436590][ C0] macvlan_broadcast+0x375/0x630 [ 282.436611][ C0] ? macvlan_process_broadcast+0x2e7/0x660 [ 282.436634][ C0] macvlan_process_broadcast+0x437/0x660 [ 282.436656][ C0] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 282.436678][ C0] ? rcu_is_watching+0x15/0xb0 [ 282.436690][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 282.436705][ C0] process_scheduled_works+0xa8e/0x14e0 [ 282.436727][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.436743][ C0] ? assign_work+0x3cf/0x5d0 [ 282.436758][ C0] worker_thread+0xa47/0xfb0 [ 282.436795][ C0] kthread+0x388/0x470 [ 282.436820][ C0] ? __pfx_worker_thread+0x10/0x10 [ 282.436840][ C0] ? __pfx_kthread+0x10/0x10 [ 282.436870][ C0] ret_from_fork+0x514/0xb70 [ 282.436889][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 282.436907][ C0] ? __switch_to+0xc89/0x1420 [ 282.436924][ C0] ? __pfx_kthread+0x10/0x10 [ 282.436942][ C0] ret_from_fork_asm+0x1a/0x30 [ 282.436958][ C0] [ 282.436962][ C0] [ 282.928238][ C0] The buggy address belongs to the physical page: [ 282.934667][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1677a8 [ 282.943510][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 282.950718][ C0] raw: 057ff00000000000 ffffea00059dea08 ffffea00059dea08 0000000000000000 [ 282.959297][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 282.967867][ C0] page dumped because: kasan: bad access detected [ 282.974263][ C0] page_owner info is not present (never set?) [ 282.980316][ C0] [ 282.982632][ C0] Memory state around the buggy address: [ 282.988261][ C0] ffff8881677a8c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 282.996307][ C0] ffff8881677a8c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 283.004358][ C0] >ffff8881677a8d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 283.012416][ C0] ^ [ 283.020117][ C0] ffff8881677a8d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 283.028172][ C0] ffff8881677a8e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 283.036215][ C0] ================================================================== [ 283.044426][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 283.051641][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.062506][ C0] Tainted: [L]=SOFTLOCKUP [ 283.066858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.076930][ C0] Workqueue: events_unbound macvlan_process_broadcast [ 283.083730][ C0] Call Trace: [ 283.087024][ C0] [ 283.089882][ C0] vpanic+0x56c/0xa60 [ 283.093895][ C0] ? __pfx_vpanic+0x10/0x10 [ 283.098431][ C0] panic+0xc5/0xd0 [ 283.102187][ C0] ? __pfx_panic+0x10/0x10 [ 283.106635][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 283.112314][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 283.117971][ C0] check_panic_on_warn+0x89/0xb0 [ 283.122941][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 283.128597][ C0] end_report+0x73/0x170 [ 283.132870][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 283.138559][ C0] kasan_report+0x128/0x150 [ 283.143101][ C0] ? __lock_acquire+0x683/0x2cf0 [ 283.148080][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 283.153745][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 283.159263][ C0] __dev_queue_xmit+0x27f/0x3820 [ 283.164227][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 283.169536][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 283.174762][ C0] ? ebt_do_table+0x2605/0x27d0 [ 283.179638][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 283.184940][ C0] ? ebt_do_table+0x2605/0x27d0 [ 283.189818][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 283.195258][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 283.200573][ C0] ? br_nf_post_routing+0x110/0xee0 [ 283.205820][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 283.211231][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 283.217155][ C0] NF_HOOK+0x360/0x3f0 [ 283.221253][ C0] ? net_generic+0x1e/0x240 [ 283.225783][ C0] ? NF_HOOK+0xa2/0x3f0 [ 283.229979][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 283.234567][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 283.240459][ C0] br_forward_finish+0xd3/0x130 [ 283.245304][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 283.251190][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 283.256658][ C0] NF_HOOK+0x360/0x3f0 [ 283.260724][ C0] ? NF_HOOK+0xa2/0x3f0 [ 283.264882][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 283.269473][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 283.274947][ C0] ? br_handle_vlan+0x5e/0x530 [ 283.279715][ C0] __br_forward+0x397/0x540 [ 283.284233][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 283.289714][ C0] br_flood+0x3e6/0x8d0 [ 283.293884][ C0] br_handle_frame_finish+0x1175/0x1990 [ 283.299430][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 283.305338][ C0] ? net_generic+0x1e/0x240 [ 283.309850][ C0] ? net_generic+0x1e/0x240 [ 283.314348][ C0] ? net_generic+0x1e/0x240 [ 283.318843][ C0] ? setup_pre_routing+0x180/0x6e0 [ 283.323952][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 283.329151][ C0] br_handle_frame+0x81b/0x1510 [ 283.334021][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 283.339302][ C0] ? sock_def_readable+0x2ff/0x550 [ 283.344410][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 283.350297][ C0] ? packet_rcv+0x11a2/0x16f0 [ 283.354989][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 283.360282][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 283.365935][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 283.372013][ C0] ? process_backlog+0x3c3/0x1860 [ 283.377057][ C0] ? lock_acquire+0x106/0x350 [ 283.381776][ C0] ? process_backlog+0x3c3/0x1860 [ 283.386811][ C0] ? process_backlog+0x3c3/0x1860 [ 283.391850][ C0] ? process_backlog+0x3c3/0x1860 [ 283.396887][ C0] process_backlog+0x706/0x1860 [ 283.401733][ C0] ? process_backlog+0x3c3/0x1860 [ 283.406746][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 283.411767][ C0] __napi_poll+0xaa/0x330 [ 283.416098][ C0] net_rx_action+0x61d/0xf50 [ 283.420684][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 283.425804][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 283.431025][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 283.436314][ C0] ? lock_acquire+0x106/0x350 [ 283.440995][ C0] handle_softirqs+0x225/0x840 [ 283.445764][ C0] ? ktime_get+0x1f5/0x220 [ 283.450205][ C0] ? do_softirq+0x76/0xd0 [ 283.454529][ C0] ? netif_rx+0x79/0x90 [ 283.458692][ C0] do_softirq+0x76/0xd0 [ 283.462840][ C0] [ 283.465761][ C0] [ 283.468694][ C0] __local_bh_enable_ip+0xf8/0x130 [ 283.473799][ C0] netif_rx+0x83/0x90 [ 283.477777][ C0] macvlan_broadcast+0x375/0x630 [ 283.482740][ C0] ? macvlan_process_broadcast+0x2e7/0x660 [ 283.488545][ C0] macvlan_process_broadcast+0x437/0x660 [ 283.494195][ C0] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 283.500350][ C0] ? rcu_is_watching+0x15/0xb0 [ 283.505109][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 283.510835][ C0] process_scheduled_works+0xa8e/0x14e0 [ 283.516404][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.522378][ C0] ? assign_work+0x3cf/0x5d0 [ 283.526989][ C0] worker_thread+0xa47/0xfb0 [ 283.531584][ C0] kthread+0x388/0x470 [ 283.535657][ C0] ? __pfx_worker_thread+0x10/0x10 [ 283.540762][ C0] ? __pfx_kthread+0x10/0x10 [ 283.545350][ C0] ret_from_fork+0x514/0xb70 [ 283.549939][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 283.555073][ C0] ? __switch_to+0xc89/0x1420 [ 283.559747][ C0] ? __pfx_kthread+0x10/0x10 [ 283.564342][ C0] ret_from_fork_asm+0x1a/0x30 [ 283.569110][ C0] [ 283.572784][ C0] Kernel Offset: disabled [ 283.577132][ C0] Rebooting in 86400 seconds..