last executing test programs: 6m50.014750454s ago: executing program 4 (id=41): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000e80)={'syz0\x00', {0x3f, 0x9, 0x8, 0xe}, 0x200012, [0x3, 0x8, 0x76f, 0x3, 0x8001, 0x7, 0xf, 0xfffffffd, 0x3, 0xc, 0x9, 0x1, 0x8, 0x9, 0xab47, 0xb0c, 0x8, 0x1417d221, 0x7, 0x7b, 0x5, 0xbc2f, 0x4, 0xfffffffe, 0xfffffffe, 0x3, 0xa, 0x12, 0x8, 0xd2f1, 0x7, 0x7, 0x3, 0x3, 0x3, 0x2, 0x1ff, 0x47f2, 0x80000000, 0x4, 0xfffffffd, 0x7, 0x5, 0x29e, 0x2, 0x2, 0x9, 0xdf26, 0x1, 0x40, 0x4, 0x8, 0x80, 0x3, 0x9, 0x1a, 0x17ca, 0x5, 0x5, 0x9, 0x8000, 0x80000000, 0xcd, 0xfff], [0x80000000, 0x227, 0x1ff, 0x7, 0x8, 0x5, 0x81, 0x45, 0xc322, 0x6000, 0x7, 0x2, 0xf0, 0x1, 0x4, 0x8001, 0x801, 0x7, 0xa, 0xb, 0x9e, 0xd9, 0x0, 0x1, 0x2, 0xa, 0x0, 0x5, 0x2, 0x101, 0xfff, 0xfff, 0x1, 0x403, 0x5, 0x0, 0x1020, 0x5, 0x10, 0x4, 0x7fffffff, 0x3ea1, 0xffbffffa, 0x2, 0xfffffff9, 0x1, 0x6, 0x3fc, 0x2243ccfc, 0x8455, 0x0, 0xc2, 0xffffffa8, 0xdc9b, 0x0, 0x1553e2a8, 0xff, 0x80000005, 0x1, 0x4, 0x2, 0xd5c, 0x6, 0x8], [0x1, 0x7fff, 0x1, 0x0, 0x9, 0x3, 0x8, 0x7ffffffc, 0x2, 0x7, 0x6, 0x0, 0x4, 0x440, 0x7, 0x2, 0x7, 0x8, 0xe2, 0x80000001, 0x7fffffff, 0x7, 0x401, 0x4, 0xc7, 0x4, 0x2, 0x1, 0x2, 0x80000001, 0x1, 0x10001, 0x4f68, 0x5, 0x10001, 0x5, 0xc, 0x3, 0x10003, 0x7, 0x9, 0x1, 0xc0c, 0xcd, 0x9, 0x2, 0x401, 0x0, 0xd, 0x9, 0x0, 0x10, 0x7ff, 0x0, 0x7, 0x8a, 0x5, 0x2, 0xf53e, 0x2, 0x5, 0x7f, 0xf, 0x3], [0xc51, 0x2, 0x8, 0x1, 0x9, 0x3, 0x7fff, 0x10000, 0x1, 0x406, 0x200, 0x40, 0x5, 0x40000000, 0x9, 0x8, 0x3, 0x10, 0x6, 0xd2, 0x8, 0x7, 0x400, 0x4, 0xb, 0x9, 0x1, 0x9, 0x0, 0x2, 0x1, 0x7fffffff, 0x6, 0x2, 0x3, 0xfff, 0xe79, 0x2, 0xe0, 0x2, 0x3ff, 0xfffffffa, 0x6, 0xa, 0x100, 0x9, 0x3ff, 0x8e6, 0x3, 0x200, 0x9, 0x2, 0x9, 0x0, 0xb7, 0xc, 0x0, 0x9, 0x4, 0x4, 0x3, 0xcd87, 0x8001, 0x9]}, 0x45c) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfff1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe}}, {0x4}}]}]}, 0x5c}}, 0x0) io_setup(0x5, &(0x7f0000000240)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x8401, 0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r8, {0xe, 0x1}, {}, {0xd}}}, 0x24}}, 0x4) 6m49.251069019s ago: executing program 4 (id=45): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = fanotify_init(0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(r0, 0x105, 0x9165, r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x3, {0x2, 0x1, 0x1}, {0x2, 0xff, 0x3}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x4}, 0x1, 0xfd}, {0x2, 0x0, {0x0, 0xf0}, {0x0, 0xf0, 0x4}, 0xff, 0x2}, {0x2, 0x3, {0x1, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0x2}, {0x3, 0x1, {0x0, 0xff, 0x3}, {0x0, 0x0, 0x1}, 0xff, 0x2}], 0xa0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000100)={0x0, 0x1, 0x9ff000000, 0x9}) mq_unlink(&(0x7f0000000000)='eth0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r6 = openat(r5, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r6, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000140)=0x8, 0x3, 0x4) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200"/50], 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 6m49.072396333s ago: executing program 4 (id=46): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010100}}}], 0x18}}], 0x1, 0x4880) r2 = fsmount(r0, 0x0, 0x4) fchdir(r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1d8, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000004) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x5, 0x10, 0x0, 0x0, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) 6m48.826181358s ago: executing program 4 (id=47): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(0x3) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000100)) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1bf700050000000000dfbfc9b6146187e9", 0x11}], 0x1, 0x0, 0x0, 0x2c}, 0x20044084) 6m48.748290768s ago: executing program 4 (id=48): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) inotify_init1(0x800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x39, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x58cc1f1d, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x2000007, 0x800000, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xc, 0x8, 0x8000806e, 0x407, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x6, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x401, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x806, 0x400, 0x7, 0x6, 0x1, 0xff, 0x9, 0x1000005, 0x5f2f, 0xd, 0x4df, 0x2, 0x6, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0xffffffff, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x80000001, 0x3, 0x9, 0x1, 0x3, 0xb8f, 0xbc45, 0x48c93690, 0x0, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x4, 0x5, 0x0, 0x6, 0x5, 0xc99d, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x1, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x8002, 0x3, 0x802, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x101c, 0x120000, 0xffffffff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x8, 0xb, 0x5, 0x93a, 0x5, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x8000002, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x2, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x0, 0x1000, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x6, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000340)=""/108, 0x6c}], 0x1, 0x5a, 0x5) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x800, 0x0, 0x3, 0x42}, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f00000000c0)=0x417) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140), &(0x7f0000000100)) syz_io_uring_submit(r6, r4, r5, &(0x7f00000004c0)=@IORING_OP_NOP={0x0, 0x3, 0x0, r3, 0x8f0000, 0x6c, 0x7, 0x6, 0x0, {0xfffb}}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) recvfrom$inet(r0, &(0x7f0000000140)=""/5, 0x5, 0x101c0, 0x0, 0x4a) 6m48.529855291s ago: executing program 4 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x40045436, 0x3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x40001, 0x0) sendto$packet(r6, &(0x7f00000005c0)="bad386dd", 0x4, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) 6m48.271692087s ago: executing program 32 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x40045436, 0x3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x40001, 0x0) sendto$packet(r6, &(0x7f00000005c0)="bad386dd", 0x4, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) 6m47.615896608s ago: executing program 1 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000f80)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="48f8be4f01cbe74c5a76bad7709e5e"}]}, 0x30}}, 0x0) 6m47.359523399s ago: executing program 1 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000f80)={0x1c, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000054) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x40c, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffff, 0x1b}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x40c0}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x81, 0x1, &(0x7f0000000040)={0x0, "f045ab7e871ec7e18cbeecfc381bcec6b71fb2ce035ff4cb1e31f5a0b8fa7e9b86"}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x809, 0xed, 0x2000000}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10002, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x7], 0x100000, 0x240046}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r7, &(0x7f0000004300)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r9, r10, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, r9, 0x0) 6m46.831602466s ago: executing program 1 (id=57): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = fanotify_init(0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(r0, 0x105, 0x9165, r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x3, {0x2, 0x1, 0x1}, {0x2, 0xff, 0x3}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x4}, 0x1, 0xfd}, {0x2, 0x0, {0x0, 0xf0}, {0x0, 0xf0, 0x4}, 0xff, 0x2}, {0x2, 0x3, {0x1, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0x2}, {0x3, 0x1, {0x0, 0xff, 0x3}, {0x0, 0x0, 0x1}, 0xff, 0x2}], 0xa0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000100)={0x0, 0x1, 0x9ff000000, 0x9}) mq_unlink(&(0x7f0000000000)='eth0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r6 = openat(r5, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r6, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000140)=0x8, 0x3, 0x4) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200"/50], 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 6m46.591154912s ago: executing program 1 (id=58): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(0x3) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000100)) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1bf700050000000000dfbfc9b6146187e9", 0x11}], 0x1, 0x0, 0x0, 0x2c}, 0x20044084) 6m46.489296026s ago: executing program 1 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video4linux(&(0x7f00000006c0), 0x7f, 0x400) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000780)={0xfffffff, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4454) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc54) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) unshare(0x22020600) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0xfffffff7, 0xfffffffc], [0x6, 0xfffffffe, 0x0, 0x3, 0xfffffff9, 0x8000000, 0x2, 0x1]], '\x00', [{0xfffffffe, 0xf8, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x40000}, {0xffffffff, 0x10000}, {0xfffffff, 0x2242, 0x0, 0x1}, {0x3, 0xffffffff}, {0x80000001, 0xff}, {}, {0x0, 0x4007}, {0x9, 0x7f}, {0x2}, {0x0, 0x1000003}, {0x405, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) ioctl(r5, 0x8001, &(0x7f00000004c0)="030000000000a65700000000000000000000000101fcc9c85d1aea0df21586b7e03bc02a16cbb4b9354b0ba8476f9b58cf0700ac8292") close_range(0xffffffffffffffff, r4, 0x0) socket$inet6(0xa, 0x1, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x549580) write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[], 0xc8) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0x84a3, 0x6e}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24008040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r8], 0xe0}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 6m46.050101988s ago: executing program 1 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x2d9, &(0x7f0000000880)={0x0, 0xfc42, 0x4000, 0x3, 0x10c}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000340)={{0x8, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e24, 0x2, 'wlc\x00', 0x1, 0x7fffffff, 0x7e}, {@loopback, 0x4e23, 0x4, 0x8001, 0x9, 0x712ebde7}}, 0x44) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 6m45.722504329s ago: executing program 33 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x2d9, &(0x7f0000000880)={0x0, 0xfc42, 0x4000, 0x3, 0x10c}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000340)={{0x8, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e24, 0x2, 'wlc\x00', 0x1, 0x7fffffff, 0x7e}, {@loopback, 0x4e23, 0x4, 0x8001, 0x9, 0x712ebde7}}, 0x44) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 5m47.557566782s ago: executing program 6 (id=344): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 5m47.297777313s ago: executing program 6 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0000001d", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="1300340048f8be4f01cbe74c5a76bad7709e5e000400af00"], 0x34}}, 0x0) 5m47.066129654s ago: executing program 6 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001340), 0x6f6c01, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x6) r2 = syz_io_uring_setup(0xf01, &(0x7f0000000380)={0x0, 0x0, 0x400, 0x0, 0x3d1}, &(0x7f00000012c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000180)={@multicast1, @loopback, 0x0, "9b4cd773b9e8a2dc6910e3b28f97d5990f941095e6fa107083f343331373b7bb", 0xb6, 0x9, 0x3, 0x5}, 0x3c) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYRES16=r12], 0xd0}, 0x1, 0x0, 0x0, 0x20044851}, 0x20054841) fchdir(r11) r13 = creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) ioctl$EVIOCGMASK(r9, 0x80015b12, 0x0) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000040)=0x4, 0x4) sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) io_setup(0x3ff, &(0x7f0000000500)) syz_io_uring_setup(0x79cb, &(0x7f0000001200)={0x0, 0xaffd, 0x40, 0xffffffff, 0x44}, &(0x7f00000011c0), &(0x7f0000001300), &(0x7f0000001180)) socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r0, &(0x7f00000010c0)={0xd}) connect$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18) r14 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r14, 0x1000000, 0x1000000) openat$vcs(0xffffff9c, &(0x7f0000001380), 0x404402, 0x0) 5m43.933897935s ago: executing program 6 (id=361): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffffffffffffffd9}, 0x48) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000200)=0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x6}, {0x6}]}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 5m43.48231575s ago: executing program 6 (id=365): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000240), 0x8, 0x7b9400) r2 = socket(0x400000000010, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40789440, &(0x7f0000003400)={&(0x7f00000033c0)=[{&(0x7f0000000400)="58bc9974e82c7f5fb59cff81fa2b553996a9609aa8cb1ad9bc6b0b72e73d380fc2bbdd7c0289bf6525cde3870eac6f576709574660ba0e152a1b2d93a4574dc18523db0c47fe6240ed21fb072a7ebdf3ef8c8eb136f0482b1c6ab51a0771ea6020880585bce7e2f46347152561f78089884c5fc055be4b42c21ca412d866a5271146cd038bfa436ce2705043bd3caf6d532dfc3c5fc937df91643b9cf10378e1ac11ed36b261204bd6d831bf80d370e7dfd1ab25b12a062e39c447316a95ece65a8473056082512c14ae2e4fcbc8989dad9b3644af181d48cae38058f67c31844ce1cff3be093ca14645117c71887f74ef532104a9a08f", 0xf7}, {&(0x7f0000000580)="6582ab9366387ef855d73a729d6c8fbb103b75a72192b611e5db02272f74aed756c215d903eadfb8082b0d1bdc2206fd2a9d1981b3c386bc30afa64c172b8bf4e0bba16334e45dd02279a6a938986c8ce7b5609ea9efc8ebc07dd7b3f7db723130b14f60066a892a8f90b3795fbfc3512d19a8a923f8dc8e66c1787c69d0e7ce2dfe5e11e207610ca3b48ad04a4299ef3d00e566fcf712145f63c777729cb3d1642150f8c1b40c0d857d2605a9530150bb093d1b7dc7e8bc0d5e7d734096dadf731ccb198b123547a61f94142bb61759218322a4bb7da6f45f507db1bf7962", 0xdf}, {&(0x7f0000000680)="45bdfe60c7239d653ab0dcd6b0bad9cc3d0b59a7b3a748df46c599d12eaf5f10e2c61034f6f5c592e77a4abd54a758ce3877fa743143f3811ee7dbbf5a011e143a8b6be352b23f91557cd9e02a48a74258186b0c9a5fc507b03ff68ea2eeea4d901bed7017af764f2694e668aed8510e33d2", 0x72}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="4ba60a466efed32b7df101f9e087f0c764d49a5e171eb03be8c1176a45257edc7a694e782e84febb60786cb48af8ed540851b9c4a4f0eb73f80e10aac2b7fab23b7f26a1aa93c015d94bb2f946bba03630a4311ca12575854cd2274c5aee50f411ee9a6ce5ff32e802d11ff0d38e65a0964b2330c6b3903bfb4fbbb355995842bd097226", 0x84}], 0x6, 0x8000000000000001, 0x0, 0xb1, 0x440b, 0x0, 0x5, 0xff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xb}, {0xffe0, 0x9}}}, 0x24}}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000800)=[{0x1063, 0xc811, 0x0, 0x0}, {0xd73, 0x4f24e6afe8482a70, 0x0, 0x0}], 0x2}) 5m43.203058779s ago: executing program 6 (id=369): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045519, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100001b9b26ebf9a21769bd96363e000000000000050300000a20000000060aff1700000000000000000a0000b4a3bc082881b662b41741bc888e2dfd9c6e5c19fe73797a300000ff0014000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r5, @ANYBLOB="f4031a80f0032d80"], 0x414}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000007c0)={'bond_slave_1\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x400024, 0x3b, 0x45, 0x83, 0xd, 0x2, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x10f7, 0xbe, 0x9, 0x12]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x78d4a000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000100)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x24342400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x10001000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) pipe2(0x0, 0x80880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5m42.83767108s ago: executing program 34 (id=369): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045519, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100001b9b26ebf9a21769bd96363e000000000000050300000a20000000060aff1700000000000000000a0000b4a3bc082881b662b41741bc888e2dfd9c6e5c19fe73797a300000ff0014000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r5, @ANYBLOB="f4031a80f0032d80"], 0x414}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000007c0)={'bond_slave_1\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x400024, 0x3b, 0x45, 0x83, 0xd, 0x2, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x10f7, 0xbe, 0x9, 0x12]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x78d4a000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000100)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x24342400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x10001000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) pipe2(0x0, 0x80880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m37.420080843s ago: executing program 7 (id=769): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000e00), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000f80)=@multiplanar_userptr={0x4611, 0xd, 0x4, 0x100, 0x6, {0x0, 0xea60}, {0x4, 0x1, 0x4, 0x9, 0x4, 0x4, "3a2e5be7"}, 0x4, 0x2, {0x0}, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f68737200000000080003000300000018000380"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 4m34.319805546s ago: executing program 7 (id=788): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40e83, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) time(0xffffffffffffffff) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0xe0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xa, 0x4, 0x1, 0xfa14, 0x8}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="0800007bde4361fb7d68c7c0564fd24908734fef193a7722e33ab98d3b3bfab673209516b9d7bbdc36bd41e460b11f7426cdca7dda8702f73167a9e07a983121b436ba4ad6fbc4a75ffb5fa09ba20b6e97fe4f803ac3952ed75cc695b7d98d7771f4f615cf8e5bcd0117e2cc7ffa1140ec635f495a4ea81f571ed35b00000000000000"]) r6 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff, 0x2}, {0x0}, 0x0, 0x0, 0x6c, 0x4}}], 0x48, 0x8000}, 0x280040c1) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], 0x7c}}, 0xc0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001", @ANYRESOCT, @ANYRESOCT=r6, @ANYRESOCT, @ANYRES8=r0], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) openat$sndtimer(0xffffff9c, &(0x7f0000000100), 0x14000) 4m31.247822699s ago: executing program 7 (id=807): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 4m31.110516866s ago: executing program 7 (id=808): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000004c0)={0x5, @sdr={0x3136564e}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x4c400, 0x110) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x0) 4m30.169723991s ago: executing program 7 (id=817): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "0c2c7bcb", {0x3, 0x1, 0x0, 0x0, 0xd3, 0x64, 0x8}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="f202"]}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) 4m29.825971583s ago: executing program 7 (id=819): syz_ublk_setup_io_uring(0x7531, &(0x7f0000000000)={0x0, 0x943b, 0x8, 0x1, 0xd9}, &(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r3, 0x0, 0x0, 0x67, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000140)={"667aacdd2521cd8fd929726aa7e8d25f948ab9d973a94c9be70d230f06d0f18c", r3}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x5, 0x2, 0x40}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000004c0)={r4}, 0x8) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda6d, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000440)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x60, &(0x7f0000000180)=@any_dev={0x81, 0xd1e, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xc1}}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r10 = gettid() rt_sigqueueinfo(r10, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffff9}) syz_ublk_add_dev(0xffffffffffffffff, r0, r7, 0x0, &(0x7f0000000340)={0x2e, 0x66, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x1, 0x0, 0x0, 0x1000, 0x401, r10, 0x0, 0x10}}}, &(0x7f00000003c0)) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1002060075040000240012800900010067726523617000001400028008000100", @ANYRES32=r12, @ANYBLOB="08000700ffffffff"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m29.358746665s ago: executing program 35 (id=819): syz_ublk_setup_io_uring(0x7531, &(0x7f0000000000)={0x0, 0x943b, 0x8, 0x1, 0xd9}, &(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r3, 0x0, 0x0, 0x67, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000140)={"667aacdd2521cd8fd929726aa7e8d25f948ab9d973a94c9be70d230f06d0f18c", r3}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x5, 0x2, 0x40}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000004c0)={r4}, 0x8) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda6d, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000440)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x60, &(0x7f0000000180)=@any_dev={0x81, 0xd1e, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xc1}}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r10 = gettid() rt_sigqueueinfo(r10, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffff9}) syz_ublk_add_dev(0xffffffffffffffff, r0, r7, 0x0, &(0x7f0000000340)={0x2e, 0x66, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x1, 0x0, 0x0, 0x1000, 0x401, r10, 0x0, 0x10}}}, &(0x7f00000003c0)) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1002060075040000240012800900010067726523617000001400028008000100", @ANYRES32=r12, @ANYBLOB="08000700ffffffff"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m36.259532909s ago: executing program 0 (id=1351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x70bd2c, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="475f99ce6ab9f0164d18380000830604010200000000000000000a0000010800054000000fa60500010001000000060006405ae5736a000500000a000200000007ff02000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x81}, {0x8, 0xc}]}, 0x14, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x6, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x0, 0x3922, 0xf, 0x2, 0x8, 0x5, 0x7, 0x6, [0x6, 0xc5f7, 0xb]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x11, 0x70c9, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0xf, 0xb1, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x9}}, 0x20) syz_usb_control_io$sierra_net(r2, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r5, 0x2b, 0x0, @void}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r9 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) dup(r9) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000900)={0xc, &(0x7f0000000680)={0x40, 0x21, 0xb6, {0xb6, 0x30, "b87a9f2c17e8d0359716e2bffe08da20c3088bbe54cb148170d37fced374bb3bc7e4ba2ec29275fe65fe3917f42b5211cdf2ed9135510c585fa207dfda47878c9a5ca77df4266eca6c252c76e19b55908f96d40a4aff4f1146e90f52d88b94e8ab79f4c507e9080f8b731c500390a46bb4b6e27ba924f94503eb57428607d9820062c8a665e7155e220b5f58f83d40a507dce292aa6ab5f230586838a86c126e08f264bd7728263d84ccf757477b0b09837864b5"}}, &(0x7f0000000800)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "c9d2b3c25078d8da363c151c2d465921a79d137c83216649ee655530680a1e5280ec711ff15acc2dafaa6d599cb395352b1d411469b312a5599360f18c79482b3d4b4b366da2a8787fe4221695f2abd204cc9cd0d825169a55b2ddccbf03931eda540269456459eb"}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x20, 0x13, 0xc4, "e8e75e067d8291aee78fb7809ec5ace37d1517f7c74e74d3d77621b1daac1d11f690f775e34470a283b6ed5fd24a28e9cc8911bbb870bcbe2510bc38050ad6601030e4040f901b4878f14c881247017072fe60b5f6875d3e46926c0af6f9c771f0ae6c760d769f7f088e121002523fda89941bdff52ae15130e510a76f46038251aa38c5bc28a4bcf81fe1d8d16bd8af293535242f853f75365389df74310f502929c8f87e9261c3f522fcc94f5efc683eb94dda3eddec8fa21f9c232484a7ba57895ceb"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000ac0)={0xc0, 0x5, 0x2, "992a"}, &(0x7f0000000b00)}) 2m34.033415593s ago: executing program 0 (id=1355): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x200}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302080000000000080002"], 0x30}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x181000, 0x146) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x3ff}) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0b", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="3d8fcf0cd0cc75662f110a116727eeb214cdbe991b67cf3faa630de37b734da39ec5a0aef563707c60cbea4c2f6e04a4ed48b554d668670af097106dd4f3381e389af2c1bc4bbaffffffff3dd5f0a64d4bdd15298face36aecd823d44ddb91adf519e862b7ef3763aeca575f", 0x6c}, {0x0}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) write(r7, &(0x7f0000001e00)="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", 0x2e0) 2m33.102476725s ago: executing program 0 (id=1359): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/233, 0xe9}], 0x4, 0x0, 0x96) write(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r1, &(0x7f00000042c0)=""/191, 0xbf, 0x9a) read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x2}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000009df00)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x2, 0x0, 0x0, 0x10, 0xfffd}, 0x20) link(0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELSET={0xbc, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_USERDATA={0x97, 0xd, 0x1, 0x0, "8d26453b8633c48300cbfa014121c806fc9f50c70fbca17d563daea197aefa4ada112c0d44ef132bb0d785fdb4f62555c35ee31a8d5c95ec57fcd90df433bc0c800d6df81c96d4ac4d231e18995ffdeb37376473fa66d6b1eb1b7ff26c043a63657d7a365d841dc72ccac34826bb3c2ef0f302ecbffe2162c9b27ec198a02b4ebb5b0f6cf31907e10c3d66bde1adffdded2dd3"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14}}, 0x158}}, 0xc850) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x18, &(0x7f00000000c0)={0x40, 0x14, 0x2, "86e2"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000540)=@deltclass={0x24, 0x29, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xffff, 0xa1a7a237334a7c95}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8082}, 0x800) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c00028005000500000000000800040001000000080003"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 2m30.194575567s ago: executing program 0 (id=1369): set_mempolicy(0x3, &(0x7f0000000080)=0x80000001, 0x7) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0x2, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0xffffffff, 0x4, 0x8003}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x80\x00') r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0xbe, &(0x7f00000003c0)=ANY=[], 0x0) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) unshare(0xa000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 2m27.034105105s ago: executing program 0 (id=1383): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, &(0x7f0000000000)) write$binfmt_register(0xffffffffffffffff, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xd, 0x3a, 'debugfs\x00\x9c\xf52X\x8b\xf2\xee^\x9e\a\xd7\xad+\xad~\xc4Q\x8d\xf1GWh\xa4\'\x0e:\b+\xb9U/\xc5<8o\x8d\x0f\xa6\x8094\xb2\xe2\x17I0\v\x8a\xbb\xbei\xf4\x1d\xf6q\xa5\xb3W\x96]\x9e\x82\xfaA\x0e\xe4\xbd\xffxg\xb6_\xeav\xcf\xa0', 0x3a, 'D,>\xfb\xf1\xa3cn\t\xb2\xf8\x80\xd0=\xae\x00C\x82zb\xf0\xebs\x80\xf0\x1ep:\xed\xdb\x1db\x0f\xe6Ow\x85s\xf0`N\xe1s\x1cm\x0e\xea\xfb\xeaUy\xaaz`\'\xf4\xed\x90T\a\xeb\xb7\x8em\xd0\x92b\x0e\xce\x8e\x96f\x1e\x89\xa2\xa2\xba\x8a\xa1\xce\xc5\xec5((u\x12\x1d\x119B\ftG\xfa\xe3!\x01c\x9a\xd68\x86\xeay\x89\xaeX\x90IO\x8c;\x0e&\xa7\xf9K\xf5\v3M\x91\xdfy;3\xb8<\xe7\xa0F\xe9\xf4\xb4\x80\x15\xacu1\x1f[\xb8\x12\xad\x06{\xf5OA\xda\x83\xa1\x01\x80\x19\xd3\xc5\xb2cI\xba\x12\xae1\xb6\x043\x8f\xfb=\xc2\xb1\xa0\\\xabg\xcf\xa6\x95\x9cV+z\"\x89\x06\xa9\x8f)\x14\xf4\x1d,%\xca|\xcf\x18<\x8a\xce\xbbL\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8bL\xad\x13}\xf4\xc2y\x06\xb4\xaf\xac\b\xc9\x14\x1b\x89IRJ\xa1\x80h\x10\x1f\x1c\xc1\a\x98\xcc\x01\xf8 \xbcQ\x89\x139\x0e\x87\x87l\x03W\x15\xb0Q\xc5\xe5\xdb\x89\x1d\x1b:\x9d\xd7\x0e#\xfd\x0e\x12\x90MvE\xa2x\xb4\x1b\x9a\xb1\xf9\b\x00\x00\x00\x00\x00\x00\x00V\x84\x81\xf7\xbf\xe9\xdc\xab\xba\xea\x87\xff', 0x3a, './file0'}, 0x1bc) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064d1, &(0x7f0000000040)={0x3f, 0x0, 0x0}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint={0x401, 0x1000}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f00000000c0)) (async) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f00000000c0)) 2m26.749928481s ago: executing program 0 (id=1385): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r1, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001ff, 0x20482) syz_io_uring_setup(0x34b6, &(0x7f0000000540)={0x0, 0x69ee, 0x8, 0x3, 0x50}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)) r3 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0xc800, 0x0) ioctl$BLKOPENZONE(r3, 0x40101286, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002"], 0x110}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x88) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x8000, 0x0) r5 = openat$autofs(0xffffff9c, &(0x7f0000000300), 0x60, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x9}}, './file2\x00'}) openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x4b0a00, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r9 = eventfd2(0x0, 0x800) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x8242, 0x0, 0x1, r9, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2m11.700187418s ago: executing program 36 (id=1385): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r1, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001ff, 0x20482) syz_io_uring_setup(0x34b6, &(0x7f0000000540)={0x0, 0x69ee, 0x8, 0x3, 0x50}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)) r3 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0xc800, 0x0) ioctl$BLKOPENZONE(r3, 0x40101286, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002"], 0x110}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x88) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x8000, 0x0) r5 = openat$autofs(0xffffff9c, &(0x7f0000000300), 0x60, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x9}}, './file2\x00'}) openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x4b0a00, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r9 = eventfd2(0x0, 0x800) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x8242, 0x0, 0x1, r9, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 10.215854464s ago: executing program 5 (id=2707): ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x61, 0xbc, 0x8d, 0x20, 0x1f4d, 0xd220, 0x30ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x20, 0xdf, "", [{{0x9, 0x4, 0x37, 0x2, 0x0, 0x87, 0xab, 0x1b, 0x4}}]}}]}}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0}) 8.761123567s ago: executing program 5 (id=2726): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xac, 0x453, 0x2, 0x70bd27, 0x25dfdbff, "19193522c9cfc1856165254e556977625389dedc0e6e7cdd75f8c302d4f75a9bcce54b44726879a2554aebab839ca1faf37dcc1c18399e237422f39c28e9c21e96416fff21c685540f4c03f6e2a9676cfa114ea270221dcd391bea14263447c9b86c1c18902627decc645d0aee2bec0a011b52529e9d1f57fce793872cd741877c9c7a46c7a3aa9443898fb8895e15b5e0cc5d550890cabf45e39f", ["", "", "", "", ""]}, 0xac}}, 0x20000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x6, 0x7, 0x3f8, 0x1, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000300)={0x3, @win={{0x6, 0x4, 0x9, 0x8e8}, 0x2, 0x401a, &(0x7f00000021c0)={{0x2, 0x0, 0xb86a, 0x40}}, 0x3317, 0x0, 0x14}}) sendmmsg$inet(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)}}], 0x3, 0x40480c0) close_range(r0, 0xffffffffffffffff, 0x0) 7.003174701s ago: executing program 5 (id=2738): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x5, 0xe000, 0x1000, &(0x7f00000b2000/0x1000)=nil}) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) 4.972498899s ago: executing program 3 (id=2754): futex(0x0, 0x615f757d33a3e2e, 0x1, 0x0, 0x0, 0x1) 4.838728329s ago: executing program 3 (id=2755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 4.578238577s ago: executing program 3 (id=2756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) socket$netlink(0x10, 0x3, 0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 4.222083663s ago: executing program 8 (id=2758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c0002800600020003"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 4.152516723s ago: executing program 5 (id=2760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 4.052606741s ago: executing program 8 (id=2761): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x0, 0x1, 0x0, 0x28, 0x0}) 3.794339988s ago: executing program 8 (id=2763): syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) 3.604703621s ago: executing program 8 (id=2764): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) unlink(0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000017c0)="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", 0x289}], 0x1}}], 0x1, 0x4000840) 3.55571125s ago: executing program 2 (id=2765): bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 3.290352014s ago: executing program 8 (id=2766): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}]}, 0x60}}, 0x0) 3.249586221s ago: executing program 2 (id=2767): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 2.806697854s ago: executing program 9 (id=2769): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.591714628s ago: executing program 2 (id=2770): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) 2.415208475s ago: executing program 3 (id=2771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='E\x00'], 0x13) 2.058157118s ago: executing program 5 (id=2772): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0xfffffffc, 0x0, 0x32, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x3}}]}, 0x60}, 0x1, 0x7}, 0x0) 1.95596775s ago: executing program 3 (id=2773): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xa40, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000001100)) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x24000000) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) syz_extract_tcp_res$synack(&(0x7f00000010c0), 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket(0x11, 0x800000003, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) write(r0, &(0x7f0000001040), 0x0) 1.907980259s ago: executing program 9 (id=2774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01"], 0xb0}}, 0x0) 1.802527908s ago: executing program 5 (id=2775): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f00000003c0)=""/175, 0xfffffffffffffde8, 0x0, &(0x7f0000000740)=""/177, 0xca}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) epoll_create(0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000000140)=""/187, 0xbb}], 0x2, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl(r5, 0x40186f40, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.729718569s ago: executing program 9 (id=2776): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) unlink(0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000017c0)="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", 0x289}], 0x1}}], 0x1, 0x4000840) 1.538972781s ago: executing program 9 (id=2777): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_DISCONNECT(r0, 0xab08) 1.334225374s ago: executing program 9 (id=2778): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 1.19824301s ago: executing program 2 (id=2779): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f00000000c0)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x48c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 1.132972549s ago: executing program 8 (id=2780): userfaultfd(0x80801) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) 774.044381ms ago: executing program 2 (id=2781): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x121342, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 27.661313ms ago: executing program 3 (id=2782): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=""/250}, 0x20) mkdir(&(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 9 (id=2783): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x34, r0, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) kernel console output (not intermixed with test programs): 304046][T12196] loop9: detected capacity change from 0 to 7 [ 401.312018][T12196] Dev loop9: unable to read RDB block 7 [ 401.312064][T12196] loop9: unable to read partition table [ 401.312268][T12196] loop9: partition table beyond EOD, truncated [ 401.312300][T12196] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 402.345827][ T5726] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 402.468719][T12231] netlink: 'syz.2.1752': attribute type 29 has an invalid length. [ 402.495811][ T5726] usb 10-1: Using ep0 maxpacket: 8 [ 402.496618][ T5726] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 402.497783][ T5726] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 402.497831][ T5726] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.497854][ T5726] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.497877][ T5726] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.497899][ T5726] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.497937][ T5726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.499272][ T4983] ldm_validate_privheads(): Disk read failed. [ 402.499335][ T4983] loop0: [ 402.499356][ T4983] loop0: partition table partially beyond EOD, truncated [ 402.724386][ T5726] usb 10-1: usb_control_msg returned -32 [ 402.724436][ T5726] usbtmc 10-1:16.0: can't read capabilities [ 403.254151][ T4933] Bluetooth: hci2: unexpected event for opcode 0x041b [ 403.757710][T12266] FAULT_INJECTION: forcing a failure. [ 403.757710][T12266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.757744][T12266] CPU: 1 UID: 0 PID: 12266 Comm: syz.5.1768 Not tainted syzkaller #0 PREEMPT(full) [ 403.757767][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 403.757779][T12266] Call Trace: [ 403.757788][T12266] [ 403.757796][T12266] dump_stack_lvl+0xe8/0x150 [ 403.757829][T12266] should_fail_ex+0x410/0x560 [ 403.757857][T12266] _copy_from_user+0x2d/0xb0 [ 403.757882][T12266] __sys_connect+0x155/0x450 [ 403.758030][T12266] ? __pfx___sys_connect+0x10/0x10 [ 403.758071][T12266] __ia32_sys_connect+0x7a/0x90 [ 403.758101][T12266] __do_fast_syscall_32+0x27a/0x6a0 [ 403.758126][T12266] ? do_fast_syscall_32+0x33/0x70 [ 403.758148][T12266] ? asm_int80_emulation+0x1a/0x20 [ 403.758167][T12266] ? do_int80_emulation+0x299/0x500 [ 403.758188][T12266] ? trace_irq_disable+0x3b/0x140 [ 403.758212][T12266] do_fast_syscall_32+0x33/0x70 [ 403.758235][T12266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 403.758260][T12266] RIP: 0023:0xf703f0ec [ 403.758284][T12266] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 403.758302][T12266] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 403.758325][T12266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 403.758339][T12266] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.758352][T12266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.758364][T12266] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 403.758377][T12266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.758406][T12266] [ 404.025586][T12271] fuse: Unknown parameter 'Žw' [ 404.101236][T12275] loop9: detected capacity change from 0 to 7 [ 404.102018][T12275] Dev loop9: unable to read RDB block 7 [ 404.102060][T12275] loop9: unable to read partition table [ 404.102356][T12275] loop9: partition table beyond EOD, truncated [ 404.102375][T12275] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 404.187462][T12277] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1772'. [ 404.244713][T12279] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1773'. [ 404.286258][ T5726] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 404.437628][ T5726] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 404.438766][ T5726] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.438797][ T5726] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.438833][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.866025][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.866063][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.866092][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.866121][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.866149][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.866187][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.866322][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.866353][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.866381][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.866409][ T5726] hid-sensor-hub 0003:8086:0000.0022: unknown main item tag 0x0 [ 404.867126][ T5726] hid-sensor-hub 0003:8086:0000.0022: unbalanced collection at end of report description [ 404.869078][ T5726] hid-sensor-hub 0003:8086:0000.0022: parse failed [ 404.869209][ T5726] hid-sensor-hub 0003:8086:0000.0022: probe with driver hid-sensor-hub failed with error -22 [ 404.985519][T10256] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 405.057965][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1770'. [ 405.063481][T12302] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1780'. [ 405.118492][T12304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.118877][T12304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.127916][T12304] binder: BINDER_SET_CONTEXT_MGR already set [ 405.128021][T12304] binder: 12272:12304 ioctl 4018620d 80004a80 returned -16 [ 405.175743][T10256] usb 9-1: Using ep0 maxpacket: 8 [ 405.176345][T10256] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 405.177902][T10256] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 405.179808][T10256] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 405.179832][T10256] usb 9-1: Product: syz [ 405.179847][T10256] usb 9-1: Manufacturer: syz [ 405.179861][T10256] usb 9-1: SerialNumber: syz [ 405.254318][ T9] usb 10-1: USB disconnect, device number 10 [ 405.254842][ T5726] usb 3-1: USB disconnect, device number 125 [ 405.375325][ T4983] ldm_validate_privheads(): Disk read failed. [ 405.375393][ T4983] loop0: [ 405.375412][ T4983] loop0: partition table partially beyond EOD, truncated [ 405.427347][T10256] usb 9-1: Handspring Visor / Palm OS: No valid connect info available [ 405.427373][T10256] usb 9-1: Handspring Visor / Palm OS: port 143, is for Remote File System use [ 405.427396][T10256] usb 9-1: Handspring Visor / Palm OS: port 223, is for unknown use [ 405.427413][T10256] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2 [ 405.493428][T12313] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1784'. [ 405.515820][T10245] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 405.630747][T10256] usb 9-1: palm_os_3_probe - error -71 getting bytes available request [ 405.630826][T10256] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 405.661205][T10256] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 405.666271][T10245] usb 6-1: Using ep0 maxpacket: 32 [ 405.670672][T10245] usb 6-1: unable to get BOS descriptor or descriptor too short [ 405.670723][T10245] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 405.671809][T10245] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 405.671833][T10245] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 405.671853][T10245] usb 6-1: config 14 has no interface number 0 [ 405.671868][T10245] usb 6-1: config 14 has no interface number 1 [ 405.671926][T10245] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 405.671949][T10245] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 405.671973][T10245] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 405.671999][T10245] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 405.672025][T10245] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 405.672051][T10245] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.672077][T10245] usb 6-1: config 14 interface 57 has no altsetting 0 [ 405.672094][T10245] usb 6-1: config 14 interface 228 has no altsetting 0 [ 405.679131][T10245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.679157][T10245] usb 6-1: Product: syz [ 405.679172][T10245] usb 6-1: Manufacturer: syz [ 405.679187][T10245] usb 6-1: SerialNumber: syz [ 405.722152][T10256] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 405.865501][T10256] usb 9-1: USB disconnect, device number 68 [ 405.878085][T10256] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 405.895506][T10256] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 405.906010][T10256] visor 9-1:1.0: device disconnected [ 406.170017][T12330] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1791'. [ 406.181538][T10245] legousbtower 6-1:14.57: interrupt endpoints not found [ 406.341859][ T4933] Bluetooth: hci3: unexpected event for opcode 0x041b [ 406.384898][T12341] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1795'. [ 406.446914][T12343] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1796'. [ 406.456242][T10256] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 406.460446][T10245] legousbtower 6-1:14.228: get version request failed: -71 [ 406.460619][T10245] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 406.511453][T10245] usb 6-1: USB disconnect, device number 108 [ 406.637980][T10256] usb 4-1: Using ep0 maxpacket: 8 [ 406.639921][T10256] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 406.662754][T10256] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 406.662810][T10256] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 406.662834][T10256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 406.662859][T10256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.662883][T10256] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.662926][T10256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.808802][T12349] FAULT_INJECTION: forcing a failure. [ 406.808802][T12349] name failslab, interval 1, probability 0, space 0, times 0 [ 406.808835][T12349] CPU: 0 UID: 0 PID: 12349 Comm: syz.5.1799 Not tainted syzkaller #0 PREEMPT(full) [ 406.808857][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 406.808869][T12349] Call Trace: [ 406.808878][T12349] [ 406.808886][T12349] dump_stack_lvl+0xe8/0x150 [ 406.808919][T12349] should_fail_ex+0x410/0x560 [ 406.808947][T12349] should_failslab+0xa8/0x100 [ 406.808972][T12349] ? dst_alloc+0x105/0x170 [ 406.809107][T12349] kmem_cache_alloc_noprof+0xa1/0x600 [ 406.809136][T12349] ? begin_current_label_crit_section+0x2a3/0x830 [ 406.809199][T12349] ? __pfx_find_exception+0x10/0x10 [ 406.809273][T12349] ? dst_alloc+0x105/0x170 [ 406.809307][T12349] dst_alloc+0x105/0x170 [ 406.809340][T12349] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 406.809378][T12349] ? ip_route_output_key_hash+0xd8/0x2a0 [ 406.809416][T12349] ip_route_output_key_hash+0x18d/0x2a0 [ 406.809452][T12349] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 406.809491][T12349] ? do_raw_spin_lock+0x12b/0x2f0 [ 406.809519][T12349] ? dst_release+0x72/0x1b0 [ 406.809550][T12349] __ip4_datagram_connect+0x89a/0x1220 [ 406.809627][T12349] udp_connect+0x32/0x1e0 [ 406.809682][T12349] __sys_connect+0x316/0x450 [ 406.809708][T12349] ? __pfx___sys_connect+0x10/0x10 [ 406.809751][T12349] __ia32_sys_connect+0x7a/0x90 [ 406.809776][T12349] __do_fast_syscall_32+0x27a/0x6a0 [ 406.809819][T12349] ? do_fast_syscall_32+0x33/0x70 [ 406.809842][T12349] ? asm_int80_emulation+0x1a/0x20 [ 406.809861][T12349] ? do_int80_emulation+0x299/0x500 [ 406.809882][T12349] ? trace_irq_disable+0x3b/0x140 [ 406.809906][T12349] do_fast_syscall_32+0x33/0x70 [ 406.809929][T12349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.809953][T12349] RIP: 0023:0xf703f0ec [ 406.809972][T12349] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 406.809991][T12349] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 406.810013][T12349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 406.810028][T12349] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.810040][T12349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 406.810053][T12349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 406.810065][T12349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.810095][T12349] [ 406.850541][T12350] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1808'. [ 407.077461][T10256] usb 4-1: usb_control_msg returned -32 [ 407.077511][T10256] usbtmc 4-1:16.0: can't read capabilities [ 407.530988][T12366] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1805'. [ 407.619998][T12369] loop9: detected capacity change from 0 to 7 [ 407.620807][T12369] Dev loop9: unable to read RDB block 7 [ 407.620849][T12369] loop9: unable to read partition table [ 407.621075][T12369] loop9: partition table beyond EOD, truncated [ 407.621098][T12369] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 407.813499][T12379] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1811'. [ 407.884069][T12381] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1813'. [ 407.976633][T12383] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 408.081366][T12388] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1814'. [ 408.637230][ T4983] ldm_validate_privheads(): Disk read failed. [ 408.637290][ T4983] loop0: [ 408.637302][ T4983] loop0: partition table partially beyond EOD, truncated [ 408.815465][T12402] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1819'. [ 409.179141][T12408] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1830'. [ 409.310471][T10245] usb 4-1: USB disconnect, device number 75 [ 409.364037][T12417] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1825'. [ 409.590955][T12428] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 409.684819][T12432] loop9: detected capacity change from 0 to 7 [ 409.721688][T12432] Dev loop9: unable to read RDB block 7 [ 409.721727][T12432] loop9: unable to read partition table [ 409.721893][T12432] loop9: partition table beyond EOD, truncated [ 409.721911][T12432] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 409.825468][ T31] kauditd_printk_skb: 79 callbacks suppressed [ 409.825489][ T31] audit: type=1804 audit(1789451730.246:14349): pid=12434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1833" name="/newroot/371/file0" dev="fuse" ino=1 res=1 errno=0 [ 410.355886][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 410.450265][ T4983] ldm_validate_privheads(): Disk read failed. [ 410.450307][ T4983] loop0: [ 410.450318][ T4983] loop0: partition table partially beyond EOD, truncated [ 410.506717][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 410.508206][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 410.513027][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 410.513059][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.513072][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.513084][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.513097][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.513121][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.644873][T12461] FAULT_INJECTION: forcing a failure. [ 410.644873][T12461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.644905][T12461] CPU: 1 UID: 0 PID: 12461 Comm: syz.8.1845 Not tainted syzkaller #0 PREEMPT(full) [ 410.644927][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 410.644939][T12461] Call Trace: [ 410.644947][T12461] [ 410.644955][T12461] dump_stack_lvl+0xe8/0x150 [ 410.645000][T12461] should_fail_ex+0x410/0x560 [ 410.645026][T12461] _copy_to_user+0x31/0xb0 [ 410.645053][T12461] simple_read_from_buffer+0xe1/0x170 [ 410.645086][T12461] proc_fail_nth_read+0x1bb/0x230 [ 410.645115][T12461] ? common_file_perm+0x20e/0x2b0 [ 410.645236][T12461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.645265][T12461] ? rw_verify_area+0x24a/0x4c0 [ 410.645302][T12461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.645328][T12461] vfs_read+0x213/0xa80 [ 410.645361][T12461] ? __pfx___mutex_lock+0x10/0x10 [ 410.645383][T12461] ? __pfx_vfs_read+0x10/0x10 [ 410.645413][T12461] ? __fget_files+0x2a/0x420 [ 410.645443][T12461] ? __fget_files+0x3a2/0x420 [ 410.645467][T12461] ? __fget_files+0x2a/0x420 [ 410.645496][T12461] ksys_read+0x150/0x270 [ 410.645520][T12461] ? __pfx_ksys_read+0x10/0x10 [ 410.645548][T12461] ? asm_int80_emulation+0x1a/0x20 [ 410.645571][T12461] do_int80_emulation+0x198/0x500 [ 410.645593][T12461] ? trace_irq_disable+0x3b/0x140 [ 410.645622][T12461] ? asm_int80_emulation+0x1a/0x20 [ 410.645641][T12461] ? clear_bhb_loop+0x70/0xc0 [ 410.645661][T12461] ? clear_bhb_loop+0x70/0xc0 [ 410.645685][T12461] asm_int80_emulation+0x1a/0x20 [ 410.645704][T12461] RIP: 0023:0xf71f75ab [ 410.645722][T12461] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 410.645737][T12461] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 410.645756][T12461] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad5d0 [ 410.645769][T12461] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 410.645780][T12461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.645791][T12461] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 410.645802][T12461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.645830][T12461] [ 410.826073][ T9] usb 3-1: usb_control_msg returned -32 [ 410.826120][ T9] usbtmc 3-1:16.0: can't read capabilities [ 411.132332][T12470] loop9: detected capacity change from 0 to 7 [ 411.134590][T12470] Dev loop9: unable to read RDB block 7 [ 411.134630][T12470] loop9: unable to read partition table [ 411.154793][T12470] loop9: partition table beyond EOD, truncated [ 411.154825][T12470] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 411.245797][ T5683] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 411.395836][ T5683] usb 9-1: Using ep0 maxpacket: 8 [ 411.398294][ T5683] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 411.399583][ T5683] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 411.403483][ T5683] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.403512][ T5683] usb 9-1: Product: syz [ 411.403528][ T5683] usb 9-1: Manufacturer: syz [ 411.403543][ T5683] usb 9-1: SerialNumber: syz [ 411.459885][ T5683] usb 9-1: config 0 descriptor?? [ 411.490431][ T5683] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 411.490488][ T5683] usb 9-1: setting power ON [ 411.490507][ T5683] dvb-usb: bulk message failed: -22 (2/0) [ 411.525259][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.538743][ T5683] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 411.538791][ T5683] usb 9-1: media controller created [ 411.579192][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.604866][ T5683] usb 9-1: selecting invalid altsetting 6 [ 411.604891][ T5683] usb 9-1: digital interface selection failed (-22) [ 411.604905][ T5683] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 411.628755][ T5683] usb 9-1: setting power OFF [ 411.628779][ T5683] dvb-usb: bulk message failed: -22 (2/0) [ 411.628794][ T5683] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 411.628807][ T5683] (NULL device *): no alternate interface [ 411.667631][T12479] __nla_validate_parse: 10 callbacks suppressed [ 411.667654][T12479] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1852'. [ 411.712808][ T5683] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 411.729780][ T5683] usb 9-1: USB disconnect, device number 69 [ 411.773530][T12482] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1854'. [ 411.911400][ T4983] ldm_validate_privheads(): Disk read failed. [ 411.911465][ T4983] loop0: [ 411.911485][ T4983] loop0: partition table partially beyond EOD, truncated [ 412.022562][T12497] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1859'. [ 412.104371][T12501] loop9: detected capacity change from 0 to 7 [ 412.107875][T12501] Dev loop9: unable to read RDB block 7 [ 412.107919][T12501] loop9: unable to read partition table [ 412.108140][T12501] loop9: partition table beyond EOD, truncated [ 412.108158][T12501] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 412.161218][T12503] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1862'. [ 412.216631][T12505] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1864'. [ 412.414834][T12515] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1867'. [ 412.562621][T12519] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1868'. [ 412.734396][ T4983] ldm_validate_privheads(): Disk read failed. [ 412.734464][ T4983] loop0: [ 412.734484][ T4983] loop0: partition table partially beyond EOD, truncated [ 412.867755][T12529] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1873'. [ 412.990906][T12533] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 413.028672][T12536] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1875'. [ 413.097802][T12538] loop9: detected capacity change from 0 to 7 [ 413.101407][T12538] Dev loop9: unable to read RDB block 7 [ 413.101437][T12538] loop9: unable to read partition table [ 413.101572][T12538] loop9: partition table beyond EOD, truncated [ 413.102338][T12538] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.203222][ T9] usb 3-1: USB disconnect, device number 126 [ 413.203491][T12540] netlink: 180 bytes leftover after parsing attributes in process `syz.9.1878'. [ 413.513349][T12542] syzkaller1: entered promiscuous mode [ 413.513374][T12542] syzkaller1: entered allmulticast mode [ 413.704694][ T4983] ldm_validate_privheads(): Disk read failed. [ 413.704735][ T4983] loop0: [ 413.704746][ T4983] loop0: partition table partially beyond EOD, truncated [ 414.232580][T12570] loop9: detected capacity change from 0 to 7 [ 414.234895][T12570] Dev loop9: unable to read RDB block 7 [ 414.234939][T12570] loop9: unable to read partition table [ 414.235133][T12570] loop9: partition table beyond EOD, truncated [ 414.264965][T12570] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 414.267025][ T9] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 414.268119][T10256] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 414.419452][T10256] usb 10-1: Using ep0 maxpacket: 8 [ 414.420126][T10256] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 414.420628][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 414.421116][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 414.421146][ T9] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 414.423453][T10256] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 414.423503][T10256] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.423525][T10256] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.423550][T10256] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.423575][T10256] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.423615][T10256] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.430307][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 414.441606][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.441636][ T9] usb 4-1: Product: 롌㙤ä“㿣ퟛ慯 [ 414.441651][ T9] usb 4-1: SerialNumber: syz [ 414.784794][T10256] usb 10-1: usb_control_msg returned -32 [ 414.784844][T10256] usbtmc 10-1:16.0: can't read capabilities [ 414.809187][T12568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.809490][T12568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.874608][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 415.036451][ T4983] ldm_validate_privheads(): Disk read failed. [ 415.036516][ T4983] loop0: [ 415.036536][ T4983] loop0: partition table partially beyond EOD, truncated [ 415.067575][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 415.113211][ T9] usb 4-1: USB disconnect, device number 76 [ 415.538780][T12607] loop9: detected capacity change from 0 to 7 [ 415.541613][T12607] Dev loop9: unable to read RDB block 7 [ 415.541663][T12607] loop9: unable to read partition table [ 415.541878][T12607] loop9: partition table beyond EOD, truncated [ 415.542850][T12607] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 415.676039][ T5683] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 415.828631][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 415.829138][ T5683] usb 3-1: not running at top speed; connect to a high speed hub [ 415.829179][ T5683] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 415.830292][ T5683] usb 3-1: config 249 has an invalid interface number: 203 but max is 0 [ 415.830319][ T5683] usb 3-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 415.830340][ T5683] usb 3-1: config 249 has no interface number 0 [ 415.830382][ T5683] usb 3-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 415.830419][ T5683] usb 3-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.830447][ T5683] usb 3-1: config 249 interface 203 has no altsetting 0 [ 415.832498][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.832513][ T5683] usb 3-1: Product: syz [ 415.832520][ T5683] usb 3-1: Manufacturer: syz [ 415.832528][ T5683] usb 3-1: SerialNumber: syz [ 416.155828][ T5683] rtl8150 3-1:249.203: couldn't find required endpoints [ 416.156073][ T5683] rtl8150 3-1:249.203: probe with driver rtl8150 failed with error -5 [ 416.191046][ T5683] usb 3-1: USB disconnect, device number 127 [ 416.192044][ T4983] ldm_validate_privheads(): Disk read failed. [ 416.192108][ T4983] loop0: [ 416.192127][ T4983] loop0: partition table partially beyond EOD, truncated [ 416.451355][T12636] loop9: detected capacity change from 0 to 7 [ 416.455618][T12636] Dev loop9: unable to read RDB block 7 [ 416.455767][T12636] loop9: unable to read partition table [ 416.455964][T12636] loop9: partition table beyond EOD, truncated [ 416.455981][T12636] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 416.589815][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 416.608171][T12635] IPVS: set_ctl: invalid protocol: 0 172.20.20.40:20265 [ 416.626318][T12637] IPVS: sed: FWM 3 0x00000003 - no destination available [ 416.718511][T12644] __nla_validate_parse: 19 callbacks suppressed [ 416.718532][T12644] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1920'. [ 416.720895][T12646] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1921'. [ 416.794320][T12648] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1922'. [ 416.861243][T12652] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1924'. [ 416.913336][T12654] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1925'. [ 417.013344][ T5683] usb 10-1: USB disconnect, device number 11 [ 417.022187][ T4983] ldm_validate_privheads(): Disk read failed. [ 417.022254][ T4983] loop0: [ 417.022270][ T4983] loop0: partition table partially beyond EOD, truncated [ 417.066012][ T5726] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 417.134132][T12669] loop5: detected capacity change from 0 to 7 [ 417.136199][T12669] Dev loop5: unable to read RDB block 7 [ 417.136251][T12669] loop5: AHDI p1 p2 p3 [ 417.136273][T12669] loop5: partition table partially beyond EOD, truncated [ 417.136441][T12669] loop5: p1 start 1818582900 is beyond EOD, truncated [ 417.136460][T12669] loop5: p3 start 335544320 is beyond EOD, truncated [ 417.235752][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 417.236944][ T5726] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 417.237908][ T5726] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 417.237932][ T5726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.237952][ T5726] usb 4-1: config 0 has no interface number 0 [ 417.239822][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.239846][ T5726] usb 4-1: Product: syz [ 417.239861][ T5726] usb 4-1: Manufacturer: syz [ 417.239876][ T5726] usb 4-1: SerialNumber: syz [ 417.243023][ T5726] usb 4-1: config 0 descriptor?? [ 417.307412][ T5712] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 417.341919][T12674] loop9: detected capacity change from 0 to 7 [ 417.353883][T12674] Dev loop9: unable to read RDB block 7 [ 417.353932][T12674] loop9: unable to read partition table [ 417.354143][T12674] loop9: partition table beyond EOD, truncated [ 417.357338][T12674] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.389394][ T31] audit: type=1326 audit(1789451737.816:14350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12665 comm="syz.9.1928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=172 compat=1 ip=0xf706f0ec code=0x0 [ 417.458192][ T5712] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 417.459371][ T5712] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 417.459399][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.459419][ T5712] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 417.459462][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.464947][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 417.464975][ T5712] usb 3-1: Product: syz [ 417.464989][ T5712] usb 3-1: Manufacturer: syz [ 417.510520][ T5712] cdc_wdm 3-1:1.0: skipping garbage [ 417.510540][ T5712] cdc_wdm 3-1:1.0: skipping garbage [ 417.518353][ T5712] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 417.518375][ T5712] cdc_wdm 3-1:1.0: Unknown control protocol [ 417.638087][ T4983] Dev loop5: unable to read RDB block 7 [ 417.638118][ T4983] loop5: AHDI p1 p2 p3 [ 417.638133][ T4983] loop5: partition table partially beyond EOD, truncated [ 417.638281][ T4983] loop5: p1 start 1818582900 is beyond EOD, truncated [ 417.638292][ T4983] loop5: p3 start 335544320 is beyond EOD, truncated [ 417.683151][ T5726] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 417.683249][ T5726] uvcvideo 4-1:0.105: No valid video chain found. [ 417.754552][T12660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.754898][T12660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.762085][ T9] usb 3-1: USB disconnect, device number 2 [ 417.775966][T12684] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1932'. [ 417.855183][ T4983] Dev loop5: unable to read RDB block 7 [ 417.855214][ T4983] loop5: AHDI p1 p2 p3 [ 417.855235][ T4983] loop5: partition table partially beyond EOD, truncated [ 417.873519][ T4983] loop5: p1 start 1818582900 is beyond EOD, truncated [ 417.873549][ T4983] loop5: p3 start 335544320 is beyond EOD, truncated [ 417.925628][T12687] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1933'. [ 418.000589][ T9] usb 4-1: USB disconnect, device number 77 [ 418.047213][T12689] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1934'. [ 418.137883][T12691] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1935'. [ 418.159153][ T4983] Dev loop5: unable to read RDB block 7 [ 418.159184][ T4983] loop5: AHDI p1 p2 p3 [ 418.159205][ T4983] loop5: partition table partially beyond EOD, truncated [ 418.159379][ T4983] loop5: p1 start 1818582900 is beyond EOD, truncated [ 418.159397][ T4983] loop5: p3 start 335544320 is beyond EOD, truncated [ 418.241196][T12693] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1936'. [ 418.327154][ T4983] Dev loop5: unable to read RDB block 7 [ 418.327186][ T4983] loop5: AHDI p1 p2 p3 [ 418.327206][ T4983] loop5: partition table partially beyond EOD, truncated [ 418.327389][ T4983] loop5: p1 start 1818582900 is beyond EOD, truncated [ 418.327407][ T4983] loop5: p3 start 335544320 is beyond EOD, truncated [ 419.095495][ T31] audit: type=1326 audit(1789451739.516:14351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.3.1954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 419.095545][ T31] audit: type=1326 audit(1789451739.516:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.3.1954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 419.107299][ T31] audit: type=1326 audit(1789451739.526:14353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.3.1954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 419.107348][ T31] audit: type=1326 audit(1789451739.526:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.3.1954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 419.107387][ T31] audit: type=1326 audit(1789451739.526:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.3.1954" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 420.046872][ T9] usb 9-1: new full-speed USB device number 70 using dummy_hcd [ 420.198774][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 420.201098][ T9] usb 9-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.201134][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 420.201169][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.246632][ T9] usb 9-1: config 0 descriptor?? [ 420.679562][ T9] logitech-djreceiver 0003:046D:C70E.0023: ignoring exceeding usage max [ 420.683976][ T9] hid_parser_main: 49 callbacks suppressed [ 420.684003][ T9] logitech-djreceiver 0003:046D:C70E.0023: unknown main item tag 0x3 [ 420.684039][ T9] logitech-djreceiver 0003:046D:C70E.0023: unexpected long global item [ 420.684748][ T9] logitech-djreceiver 0003:046D:C70E.0023: logi_dj_probe: parse failed [ 420.685397][ T9] logitech-djreceiver 0003:046D:C70E.0023: probe with driver logitech-djreceiver failed with error -22 [ 420.922854][ T9] usb 9-1: USB disconnect, device number 70 [ 421.100403][T12781] dlm: Unknown command passed to DLM device : 0 [ 421.100403][T12781] [ 421.134506][ T31] audit: type=1326 audit(1789451741.556:14356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12779 comm="syz.9.1972" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706f0ec code=0x0 [ 421.222959][T12786] misc userio: The device must be registered before sending interrupts [ 421.641097][ T4933] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 421.686154][ T5726] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 421.707856][ T5683] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 421.845788][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 421.846526][ T5726] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.847540][ T5726] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 421.847587][ T5726] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.847610][ T5726] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.847633][ T5726] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.847658][ T5726] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.847701][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.872322][ T5683] usb 3-1: Using ep0 maxpacket: 16 [ 421.942969][ T5683] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 421.945432][ T5683] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.945464][ T5683] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.945510][ T5683] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 421.945538][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 421.945571][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.006791][ T5683] usb 3-1: config 0 descriptor?? [ 422.082197][ T5726] usb 4-1: usb_control_msg returned -32 [ 422.082274][ T5726] usbtmc 4-1:16.0: can't read capabilities [ 422.441803][ T5683] hid (null): unknown global tag 0xe [ 422.442315][ T5683] hid (null): bogus close delimiter [ 422.620802][ T5683] usb 3-1: USB disconnect, device number 3 [ 422.801396][T12839] __nla_validate_parse: 2 callbacks suppressed [ 422.801418][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1996'. [ 423.465881][ T5683] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 423.626578][ T5683] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.628878][ T5683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.628905][ T5683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.630119][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.630144][ T5683] usb 3-1: SerialNumber: syz [ 423.895515][ T5683] usb 3-1: 0:2 : does not exist [ 423.968516][ T5683] usb 3-1: USB disconnect, device number 4 [ 424.459744][ T5683] usb 4-1: USB disconnect, device number 78 [ 424.505793][ T5712] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 424.634049][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 424.669307][ T5712] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 424.686159][ T5712] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 424.686187][ T5712] usb 10-1: Product: syz [ 424.686201][ T5712] usb 10-1: Manufacturer: syz [ 424.686216][ T5712] usb 10-1: SerialNumber: syz [ 424.690645][ T5712] usb 10-1: config 0 descriptor?? [ 424.972537][T12880] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 424.991532][ T5712] peak_usb 10-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 425.086434][ T5683] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 425.178363][ T5712] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 425.178394][ T5712] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 425.178469][ T5712] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 425.237916][ T5683] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 425.243480][ T5683] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.243508][ T5683] usb 9-1: Product: syz [ 425.243523][ T5683] usb 9-1: Manufacturer: syz [ 425.243537][ T5683] usb 9-1: SerialNumber: syz [ 425.280038][ T5712] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -22 [ 425.310377][T12911] loop8: detected capacity change from 0 to 8 [ 425.318820][T12911] Dev loop8: unable to read RDB block 8 [ 425.318866][T12911] loop8: unable to read partition table [ 425.319125][T12911] loop8: partition table beyond EOD, truncated [ 425.319142][T12911] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 425.342619][ T5683] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 425.960606][T12915] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2028'. [ 425.960623][T12915] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2028'. [ 426.095340][ T9] usb 10-1: USB disconnect, device number 12 [ 426.415834][ T5683] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 426.416056][ T5683] ath9k_htc: Failed to initialize the device [ 426.453231][ T5683] usb 9-1: ath9k_htc: USB layer deinitialized [ 427.552980][ T9] usb 9-1: USB disconnect, device number 71 [ 427.807879][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2042'. [ 429.867460][ T4933] Bluetooth: hci2: hcon ffff888033618000 sent 1 < count 256 [ 430.900811][ T4933] Bluetooth: hci4: unexpected cc 0x0c05 length: 4 > 1 [ 430.900844][ T4933] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 431.207869][ T31] audit: type=1326 audit(1789451751.636:14357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.207919][ T31] audit: type=1326 audit(1789451751.636:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.213358][ T31] audit: type=1326 audit(1789451751.636:14359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.213410][ T31] audit: type=1326 audit(1789451751.636:14360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.213449][ T31] audit: type=1326 audit(1789451751.636:14361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.247849][ T31] audit: type=1326 audit(1789451751.676:14362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.292843][ T31] audit: type=1326 audit(1789451751.676:14363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.293365][ T31] audit: type=1326 audit(1789451751.726:14364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.293405][ T31] audit: type=1326 audit(1789451751.726:14365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.331463][ T31] audit: type=1326 audit(1789451751.726:14366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.5.2093" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 431.437631][ T5760] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 431.589227][ T5760] usb 9-1: Using ep0 maxpacket: 32 [ 431.594721][ T5760] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 431.599469][ T5760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.599500][ T5760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.599536][ T5760] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.606309][ T5760] usb 9-1: config 0 descriptor?? [ 431.833079][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2103'. [ 431.850331][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2103'. [ 431.905834][T10723] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 431.972672][T13091] bridge0: port 3(syz_tun) entered blocking state [ 431.983188][T13091] bridge0: port 3(syz_tun) entered disabled state [ 431.983426][T13091] syz_tun: entered allmulticast mode [ 431.999723][T13091] syz_tun: entered promiscuous mode [ 432.000192][T13091] bridge0: port 3(syz_tun) entered blocking state [ 432.000264][T13091] bridge0: port 3(syz_tun) entered forwarding state [ 432.023159][ T9373] bridge0: port 3(syz_tun) entered disabled state [ 432.067535][ T5760] savu 0003:1E7D:2D5A.0025: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 432.076856][T10723] usb 10-1: Using ep0 maxpacket: 8 [ 432.094645][T10723] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 432.095622][T10723] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 432.097494][T10723] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.097524][T10723] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 432.097548][T10723] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.097574][T10723] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.097618][T10723] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.352818][ T5760] usb 9-1: USB disconnect, device number 72 [ 432.416244][T10723] usb 10-1: usb_control_msg returned -32 [ 432.416294][T10723] usbtmc 10-1:16.0: can't read capabilities [ 432.693267][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 432.710968][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 433.285802][T10723] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 433.445770][T10723] usb 9-1: Using ep0 maxpacket: 16 [ 433.448053][T10723] usb 9-1: unable to get BOS descriptor or descriptor too short [ 433.448095][T10723] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.449351][T10723] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 433.450478][T10723] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.450515][T10723] usb 9-1: config 1 interface 0 has no altsetting 0 [ 433.512796][T10723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.512825][T10723] usb 9-1: Product: syz [ 433.512840][T10723] usb 9-1: Manufacturer: syz [ 433.512856][T10723] usb 9-1: SerialNumber: syz [ 433.548600][T13129] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 433.771208][T10723] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 433.800629][T10723] usb 9-1: USB disconnect, device number 73 [ 433.883740][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 433.892361][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 433.969010][T13149] loop8: detected capacity change from 0 to 7 [ 433.972694][ T6319] buffer_io_error: 11 callbacks suppressed [ 433.972709][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 433.974946][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 433.975441][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 433.976035][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 433.981022][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 433.981504][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 433.981940][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 433.989762][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 433.990291][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 433.990765][ T6319] Buffer I/O error on dev loop8, logical block 0, async page read [ 434.036820][ T5726] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 434.155783][ T5726] usb 3-1: device descriptor read/64, error -71 [ 434.396782][ T5726] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 434.545869][ T5726] usb 3-1: device descriptor read/64, error -71 [ 434.666253][ T5726] usb usb3-port1: attempt power cycle [ 434.698997][ T5760] usb 10-1: USB disconnect, device number 13 [ 434.941969][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2139'. [ 434.958725][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2139'. [ 435.018638][ T5726] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 435.039639][ T5726] usb 3-1: device descriptor read/8, error -71 [ 435.064245][T13178] sit0: entered promiscuous mode [ 435.078059][T13178] netlink: 'syz.9.2140': attribute type 1 has an invalid length. [ 435.078076][T13178] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2140'. [ 435.286287][ T5726] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 435.307817][ T5726] usb 3-1: device descriptor read/8, error -71 [ 435.426349][ T5726] usb usb3-port1: unable to enumerate USB device [ 435.935898][T10723] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 436.065855][T10723] usb 10-1: device descriptor read/64, error -71 [ 436.306125][T10723] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 436.435910][T10723] usb 10-1: device descriptor read/64, error -71 [ 436.546373][T10723] usb usb10-port1: attempt power cycle [ 436.889435][T10723] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 436.907065][T10723] usb 10-1: device descriptor read/8, error -71 [ 437.082026][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 437.082046][ T31] audit: type=1326 audit(1789451757.506:14369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 437.083472][ T31] audit: type=1326 audit(1789451757.506:14370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 437.103641][ T31] audit: type=1326 audit(1789451757.516:14371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 437.103692][ T31] audit: type=1326 audit(1789451757.516:14372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 437.103758][ T31] audit: type=1326 audit(1789451757.516:14373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 437.106178][ T31] audit: type=1326 audit(1789451757.516:14374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 437.106222][ T31] audit: type=1326 audit(1789451757.516:14375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 437.106260][ T31] audit: type=1326 audit(1789451757.516:14376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 437.109211][ T31] audit: type=1326 audit(1789451757.516:14377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 437.195792][T10723] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 437.223831][ T31] audit: type=1326 audit(1789451757.656:14379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.2159" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000 [ 437.296239][T10723] usb 10-1: device descriptor read/8, error -71 [ 437.406354][T10723] usb usb10-port1: unable to enumerate USB device [ 438.811216][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 439.104611][T13291] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2188'. [ 439.253711][ T4983] ldm_validate_privheads(): Disk read failed. [ 439.253751][ T4983] loop0: [ 439.253763][ T4983] loop0: partition table partially beyond EOD, truncated [ 439.677266][T13315] bridge1: entered promiscuous mode [ 439.719640][T13318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.824626][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2202'. [ 440.099320][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.099377][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.815193][T13346] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2212'. [ 440.874063][ T5726] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 441.051390][ T5726] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.052843][ T5726] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.052877][ T5726] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.052900][ T5726] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.052960][ T5726] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.063728][ T5726] usb 9-1: config 0 descriptor?? [ 441.160459][T13365] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[10154] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[13365] [ 441.181284][T10723] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 441.335785][T10723] usb 6-1: Using ep0 maxpacket: 8 [ 441.336491][T10723] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 441.337769][T10723] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 441.337794][T10723] usb 6-1: config 179 has no interface number 0 [ 441.337831][T10723] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 441.337858][T10723] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 441.337886][T10723] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 441.337912][T10723] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 441.337930][T10723] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 441.337954][T10723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.342540][T13349] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 441.491749][ T5726] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 442.075831][ T5726] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 442.205823][ T5726] usb 10-1: device descriptor read/64, error -71 [ 442.445820][ T5726] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 442.475867][ T5683] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 442.576337][ T5726] usb 10-1: device descriptor read/64, error -71 [ 442.626606][ T5683] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.627317][ T5683] usb 3-1: config 0 has no interfaces? [ 442.627354][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.630218][ T5683] usb 3-1: config 0 descriptor?? [ 442.687060][ T5726] usb usb10-port1: attempt power cycle [ 442.836433][ T5712] usb 3-1: USB disconnect, device number 9 [ 443.026080][ T5726] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 443.046597][ T5726] usb 10-1: device descriptor read/8, error -71 [ 443.316645][ T5726] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 443.339845][ T5726] usb 10-1: device descriptor read/8, error -71 [ 443.456192][ T5726] usb usb10-port1: unable to enumerate USB device [ 443.568225][ T5683] usb 9-1: USB disconnect, device number 74 [ 443.943357][ T5683] usb 6-1: USB disconnect, device number 109 [ 443.943466][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 443.943517][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 443.977431][T13414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.982913][T13412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.988780][T13412] warning: `syz.8.2239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 443.989439][T13411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.094060][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 444.094081][ T31] audit: type=1326 audit(1789451764.516:14435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2241" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 444.094124][ T31] audit: type=1326 audit(1789451764.516:14436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2241" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 444.094689][ T31] audit: type=1326 audit(1789451764.516:14437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2241" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 444.094843][ T31] audit: type=1326 audit(1789451764.516:14438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2241" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 444.095018][ T31] audit: type=1326 audit(1789451764.516:14439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2241" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 444.095431][ T31] audit: type=1326 audit(1789451764.516:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2241" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 444.095570][ T31] audit: type=1326 audit(1789451764.516:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2241" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 444.162201][ T31] audit: type=1326 audit(1789451764.586:14442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2241" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 444.162252][ T31] audit: type=1326 audit(1789451764.586:14443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2241" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 444.841513][ T4933] Bluetooth: hci3: unexpected cc 0x0c05 length: 4 > 1 [ 444.841557][ T4933] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 445.380366][T10249] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 445.530193][T10249] usb 6-1: unable to get BOS descriptor or descriptor too short [ 445.530838][T10249] usb 6-1: not running at top speed; connect to a high speed hub [ 445.530872][T10249] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 445.531900][T10249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.531925][T10249] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 445.551916][ T5683] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 445.562038][T10249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.562067][T10249] usb 6-1: Product: syz [ 445.562082][T10249] usb 6-1: Manufacturer: syz [ 445.562098][T10249] usb 6-1: SerialNumber: syz [ 445.735905][ T5683] usb 4-1: Using ep0 maxpacket: 32 [ 445.737937][ T5683] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 445.739850][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.739881][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.739938][ T5683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.744969][ T5683] usb 4-1: config 0 descriptor?? [ 446.052508][T10249] usb 6-1: USB disconnect, device number 110 [ 446.219131][ T5683] savu 0003:1E7D:2D5A.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 446.454910][ T5712] usb 4-1: USB disconnect, device number 79 [ 446.749986][T13532] binder_alloc: 13523: binder_alloc_buf, no vma [ 446.928291][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2292'. [ 447.185909][ T5712] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 447.238520][ T4933] Bluetooth: hci5: unexpected event 0x08 length: 103 > 4 [ 447.336659][ T5712] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 447.337440][ T5712] usb 9-1: config 0 has no interfaces? [ 447.339581][ T5712] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.339605][ T5712] usb 9-1: Product: syz [ 447.339619][ T5712] usb 9-1: Manufacturer: syz [ 447.339633][ T5712] usb 9-1: SerialNumber: syz [ 447.342869][ T5712] usb 9-1: config 0 descriptor?? [ 447.568253][T13569] pimreg: entered allmulticast mode [ 447.805897][ T5683] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 447.972464][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.972525][ T5683] usb 3-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 447.973641][ T5683] usb 3-1: config 127 has an invalid interface number: 106 but max is 0 [ 447.973668][ T5683] usb 3-1: config 127 has no interface number 0 [ 447.973709][ T5683] usb 3-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 447.973745][ T5683] usb 3-1: config 127 interface 106 has no altsetting 0 [ 448.028913][ T5683] usb 3-1: string descriptor 0 read error: -22 [ 448.029048][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.054485][ T5683] ftdi_sio 3-1:127.106: FTDI USB Serial Device converter detected [ 448.064985][ T5683] usb 3-1: Detected SIO [ 448.065015][ T5683] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 [ 448.082368][ T5683] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 448.255113][ T5712] usb 3-1: USB disconnect, device number 10 [ 448.273278][ T5712] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 448.275495][ T5712] ftdi_sio 3-1:127.106: device disconnected [ 448.494372][ T4983] ldm_validate_privheads(): Disk read failed. [ 448.494464][ T4983] loop0: [ 448.494482][ T4983] loop0: partition table partially beyond EOD, truncated [ 449.297160][ T4933] Bluetooth: hci5: command 0x0406 tx timeout [ 449.741371][ T9] usb 9-1: USB disconnect, device number 75 [ 449.744727][ T31] audit: type=1326 audit(1789451770.166:14444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.9.2342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 449.744894][ T31] audit: type=1326 audit(1789451770.166:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.9.2342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 449.744940][ T31] audit: type=1326 audit(1789451770.166:14446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.9.2342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 449.744980][ T31] audit: type=1326 audit(1789451770.166:14447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.9.2342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 449.745018][ T31] audit: type=1326 audit(1789451770.166:14448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.9.2342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 449.745059][ T31] audit: type=1326 audit(1789451770.166:14449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.9.2342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 449.745102][ T31] audit: type=1326 audit(1789451770.166:14450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.9.2342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 449.752720][ T31] audit: type=1326 audit(1789451770.176:14451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.9.2342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 449.783074][ T31] audit: type=1326 audit(1789451770.176:14452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.9.2342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 450.133766][T13664] usb usb8: usbfs: process 13664 (syz.9.2348) did not claim interface 0 before use [ 451.195833][ T9] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 451.196701][ T5712] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 451.347915][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 451.347958][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 451.349056][ T9] usb 4-1: config 127 has an invalid interface number: 106 but max is 0 [ 451.349072][ T9] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 451.349083][ T9] usb 4-1: config 127 has no interface number 0 [ 451.349106][ T9] usb 4-1: config 127 interface 106 altsetting 8 endpoint 0x7 has invalid wMaxPacketSize 0 [ 451.349118][ T9] usb 4-1: config 127 interface 106 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.349150][ T9] usb 4-1: config 127 interface 106 has no altsetting 0 [ 451.355243][ T9] usb 4-1: string descriptor 0 read error: -22 [ 451.355348][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.455034][ T9] ftdi_sio 4-1:127.106: FTDI USB Serial Device converter detected [ 451.465337][ T9] usb 4-1: Detected SIO [ 451.465385][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 451.481870][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 451.530897][ T5712] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 451.609346][T10249] usb 4-1: USB disconnect, device number 80 [ 451.624868][T10249] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 451.625332][T10249] ftdi_sio 4-1:127.106: device disconnected [ 451.653858][ T5712] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.653903][ T5712] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 451.653938][ T5712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 451.737630][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 451.737657][ T5712] usb 3-1: Product: syz [ 451.737671][ T5712] usb 3-1: Manufacturer: syz [ 451.737685][ T5712] usb 3-1: SerialNumber: syz [ 451.776298][ T5712] usb 3-1: config 0 descriptor?? [ 452.206078][T13672] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 452.249483][ T5712] usb 3-1: selecting invalid altsetting 0 [ 452.751803][ T5726] usb 3-1: USB disconnect, device number 11 [ 453.686015][T10245] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 453.836021][T10245] usb 9-1: Using ep0 maxpacket: 32 [ 453.836766][T10245] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 453.839378][T10245] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 453.839394][T10245] usb 9-1: config 0 has no interface number 0 [ 453.839417][T10245] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.839432][T10245] usb 9-1: config 0 interface 85 has no altsetting 0 [ 453.904019][T10245] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.904051][T10245] usb 9-1: Product: syz [ 453.904066][T10245] usb 9-1: Manufacturer: syz [ 453.904082][T10245] usb 9-1: SerialNumber: syz [ 453.933844][T10245] usb 9-1: config 0 descriptor?? [ 454.142070][T13769] netlink: 25 bytes leftover after parsing attributes in process `syz.9.2391'. [ 454.273483][T13773] binder: 13772:13773 ioctl c0306201 0 returned -14 [ 454.274624][T13773] binder: 13772:13773 ioctl 4b47 0 returned -22 [ 454.380761][ T5726] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 454.460027][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'. [ 454.526014][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 454.526933][ T5726] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 454.528215][ T5726] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 454.528244][ T5726] usb 6-1: config 1 has no interface number 0 [ 454.528283][ T5726] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 454.528307][ T5726] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 454.528332][ T5726] usb 6-1: config 1 interface 105 has no altsetting 0 [ 454.531939][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 454.531963][ T5726] usb 6-1: Product: syz [ 454.531978][ T5726] usb 6-1: Manufacturer: syz [ 454.531992][ T5726] usb 6-1: SerialNumber: syz [ 454.543004][T13767] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 454.543137][T13767] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 454.606199][T10245] appletouch 9-1:0.85: Geyser mode initialized. [ 454.631718][T10245] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input42 [ 454.763666][T13789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2401'. [ 454.789190][ T5683] usb 9-1: USB disconnect, device number 76 [ 454.850248][ T5683] appletouch 9-1:0.85: input: appletouch disconnected [ 454.957413][T13767] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 454.957552][T13767] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 454.999808][ T31] audit: type=1326 audit(1789451775.426:14453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.9.2406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 454.999979][ T31] audit: type=1326 audit(1789451775.426:14454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.9.2406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 455.030991][ T31] audit: type=1326 audit(1789451775.436:14455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.9.2406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 455.090425][ T31] audit: type=1326 audit(1789451775.516:14456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.9.2406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 455.090477][ T31] audit: type=1326 audit(1789451775.516:14457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.9.2406" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 455.731237][ T5726] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 455.731554][ T5726] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 455.754758][ T5726] usb 6-1: USB disconnect, device number 111 [ 455.846167][ T5683] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 455.997938][ T5683] usb 10-1: not running at top speed; connect to a high speed hub [ 455.997975][ T5683] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 456.003909][ T5683] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.003957][ T5683] usb 10-1: config 1 interface 1 has no altsetting 0 [ 456.003993][ T5683] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.019575][ T5683] uvcvideo 10-1:1.0: Found UVC 1.00 device (046d:0825) [ 456.019737][ T5683] usb 10-1: selecting invalid altsetting 0 [ 456.234792][ T5683] uvcvideo 10-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 456.235624][ T5683] uvcvideo 10-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 456.236245][ T5683] uvcvideo 10-1:1.1: Failed to initialize the device (-71). [ 456.236362][ T5683] usb 10-1: selecting invalid altsetting 0 [ 456.280067][ T5683] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -71 [ 456.294077][ T5683] usb 10-1: selecting invalid altsetting 0 [ 456.294104][ T5683] usbtest 10-1:1.1: probe with driver usbtest failed with error -22 [ 456.325169][ T5683] usb 10-1: USB disconnect, device number 22 [ 456.957161][ T5683] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 457.111519][ T5683] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 457.118964][ T5683] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.119000][ T5683] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.119026][ T5683] usb 9-1: config 0 interface 0 has no altsetting 0 [ 457.119059][ T5683] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.131642][ T5683] usb 9-1: config 0 descriptor?? [ 457.570110][ T5683] hid (null): global environment stack underflow [ 457.570149][ T5683] hid (null): bogus close delimiter [ 457.584666][ T5683] hid-multitouch 0003:0EEF:72C4.0028: global environment stack underflow [ 457.584691][ T5683] hid-multitouch 0003:0EEF:72C4.0028: item 0 4 1 11 parsing failed [ 457.593077][ T5683] hid-multitouch 0003:0EEF:72C4.0028: probe with driver hid-multitouch failed with error -22 [ 457.794253][ T5760] usb 9-1: USB disconnect, device number 77 [ 458.218630][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'. [ 459.484289][ T31] audit: type=1326 audit(1789451779.906:14458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13973 comm="syz.2.2478" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700f0ec code=0x0 [ 459.995962][T10245] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 460.165987][T10245] usb 4-1: Using ep0 maxpacket: 16 [ 460.166894][T10245] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.188492][T10245] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.188528][T10245] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 460.188553][T10245] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 460.188573][T10245] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 460.189900][T10245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 460.189924][T10245] usb 4-1: SerialNumber: syz [ 460.193183][T13980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 460.193305][T13980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 460.194458][T10245] hub 4-1:1.0: bad descriptor, ignoring hub [ 460.194478][T10245] hub 4-1:1.0: probe with driver hub failed with error -5 [ 460.336373][ T9] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 460.398695][T13980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 460.398886][T13980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 460.507430][ T9] usb 9-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 460.508725][ T9] usb 9-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 460.511061][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.511086][ T9] usb 9-1: Product: syz [ 460.511100][ T9] usb 9-1: Manufacturer: syz [ 460.511108][ T9] usb 9-1: SerialNumber: syz [ 460.562623][ T9] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 460.562678][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 460.583933][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 460.584910][ T9] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 460.584962][ T9] usb 9-1: media controller created [ 460.624901][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.710237][ T9] DVB: Unable to find symbol mt352_attach() [ 460.710256][ T9] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 460.711817][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 460.738483][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 460.832289][ T5683] usb 9-1: USB disconnect, device number 78 [ 460.849213][T10245] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 460.946394][ T5683] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 461.328302][ T5683] usb 4-1: USB disconnect, device number 81 [ 461.358231][ T5683] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 461.360836][ T5615] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 462.060235][T14032] bridge0: port 3(dummy0) entered disabled state [ 462.060432][T14032] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.060737][T14032] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.189937][T14032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.194138][T14032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.318136][T14032] bridge1: left promiscuous mode [ 462.338367][ T9372] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.338405][ T9372] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.341362][ T273] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.341396][ T273] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.341433][ T273] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.341459][ T273] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.525791][T10249] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 462.677828][T10249] usb 3-1: Using ep0 maxpacket: 32 [ 462.682937][T10249] usb 3-1: unable to get BOS descriptor or descriptor too short [ 462.682998][T10249] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 462.719167][T10249] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 462.719196][T10249] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 462.719216][T10249] usb 3-1: config 14 has no interface number 0 [ 462.719233][T10249] usb 3-1: config 14 has no interface number 1 [ 462.719287][T10249] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 462.719312][T10249] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 462.719338][T10249] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 462.719360][T10249] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 462.719383][T10249] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 462.719410][T10249] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.719437][T10249] usb 3-1: config 14 interface 57 has no altsetting 0 [ 462.719455][T10249] usb 3-1: config 14 interface 228 has no altsetting 0 [ 462.743598][T10249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.743629][T10249] usb 3-1: Product: syz [ 462.743644][T10249] usb 3-1: Manufacturer: syz [ 462.743659][T10249] usb 3-1: SerialNumber: syz [ 462.922957][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 463.226284][ T5683] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 463.368287][T10249] legousbtower 3-1:14.57: interrupt endpoints not found [ 463.431718][ T5683] usb 6-1: New USB device found, idVendor=09d8, idProduct=0320, bcdDevice=a1.34 [ 463.444988][ T5683] usb 6-1: config 127 has an invalid interface number: 162 but max is 0 [ 463.445018][ T5683] usb 6-1: config 127 has no interface number 0 [ 463.463401][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.463433][ T5683] usb 6-1: Product: syz [ 463.463490][ T5683] usb 6-1: Manufacturer: syz [ 463.463514][ T5683] usb 6-1: SerialNumber: syz [ 463.724676][ T5683] usb 6-1: USB disconnect, device number 112 [ 463.771993][T10249] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 463.775887][T10249] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 465.544775][T10245] usb 3-1: USB disconnect, device number 12 [ 465.594805][T10245] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 465.846191][ T5712] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 466.010718][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short [ 466.010794][ T5712] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 466.011898][ T5712] usb 4-1: config 8 has an invalid interface number: 109 but max is 0 [ 466.011923][ T5712] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 466.011943][ T5712] usb 4-1: config 8 has no interface number 0 [ 466.011982][ T5712] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 466.012324][ T5712] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 466.012354][ T5712] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 466.018265][ T5712] usb 4-1: string descriptor 0 read error: -22 [ 466.018395][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.031349][ T5712] metro_usb 4-1:8.109: Metrologic USB to Serial converter detected [ 466.037362][T10245] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 466.043002][ T5712] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 466.235001][ T5712] usb 4-1: USB disconnect, device number 82 [ 466.243508][T10245] usb 3-1: Using ep0 maxpacket: 8 [ 466.246590][T10245] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 466.251091][T10245] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.251126][T10245] usb 3-1: config 0 interface 0 has no altsetting 0 [ 466.251158][T10245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.255464][T10245] usb 3-1: config 0 descriptor?? [ 466.257300][ T5712] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 466.260962][ T5712] metro_usb 4-1:8.109: device disconnected [ 466.471438][T10245] usbhid 3-1:0.0: can't add hid device: -71 [ 466.471582][T10245] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 466.490089][T10245] usb 3-1: USB disconnect, device number 13 [ 467.612849][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051886000: rx timeout, send abort [ 468.112977][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051885c00: rx timeout, send abort [ 468.114729][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051886000: abort rx timeout. Force session deactivation [ 468.217625][T10245] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 468.315800][T10723] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 468.384316][T10245] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 468.389947][T10245] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 468.389979][T10245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 468.390005][T10245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 468.390027][T10245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 468.390052][T10245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 468.392594][T10245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.392618][T10245] usb 4-1: Product: syz [ 468.392632][T10245] usb 4-1: Manufacturer: syz [ 468.392646][T10245] usb 4-1: SerialNumber: syz [ 468.400586][T10245] usb 4-1: config 0 descriptor?? [ 468.476820][T10723] usb 10-1: Using ep0 maxpacket: 32 [ 468.477985][T10723] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 468.481456][T10723] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 468.481505][T10723] usb 10-1: config 0 has no interface number 0 [ 468.481546][T10723] usb 10-1: config 0 interface 184 has no altsetting 0 [ 468.487084][T10723] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.487109][T10723] usb 10-1: Product: syz [ 468.487124][T10723] usb 10-1: Manufacturer: syz [ 468.487137][T10723] usb 10-1: SerialNumber: syz [ 468.511443][T10723] usb 10-1: config 0 descriptor?? [ 468.609595][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.611673][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.613027][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051885c00: abort rx timeout. Force session deactivation [ 468.613167][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.617370][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.619467][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.621121][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.621595][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.623722][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.624186][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.626241][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.626725][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.627577][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.628168][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.629149][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.629592][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.632723][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.633282][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.635345][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.637123][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.637971][T10245] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 468.638014][T10245] input input43: Timeout waiting for response from device. [ 468.661419][T10245] usb 4-1: USB disconnect, device number 83 [ 469.145451][T10723] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 469.145485][T10723] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.323082][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'. [ 469.356081][ T5760] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 469.507203][ T5760] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 469.509014][ T5760] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 469.509039][ T5760] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 469.509055][ T5760] usb 6-1: config 4 has no interface number 0 [ 469.509085][ T5760] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 469.511708][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.511734][ T5760] usb 6-1: Product: syz [ 469.511750][ T5760] usb 6-1: Manufacturer: syz [ 469.511765][ T5760] usb 6-1: SerialNumber: syz [ 469.591450][T14217] netlink: 'syz.2.2550': attribute type 10 has an invalid length. [ 469.591474][T14217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2550'. [ 469.609619][T14217] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 469.610049][T14217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.002270][ T5760] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 470.024202][ T5760] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 470.037407][ T5760] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 470.037474][ T5760] usb 6-1: media controller created [ 470.041260][ T5760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.262164][ T5760] DVB: Unable to find symbol dib7000p_attach() [ 470.262183][ T5760] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 470.426018][ T5760] rc_core: IR keymap rc-dib0700-rc5 not found [ 470.426039][ T5760] Registered IR keymap rc-empty [ 470.426512][ T5760] dvb-usb: could not initialize remote control. [ 470.426524][ T5760] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 470.463827][ T5760] usb 6-1: USB disconnect, device number 113 [ 470.486246][ T5760] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 470.594037][T10723] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 470.594086][T10723] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 470.594108][T10723] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 470.594360][T10723] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 470.608299][T10723] usb 10-1: USB disconnect, device number 23 [ 473.858682][T14295] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2577'. [ 475.938290][ T5712] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 476.086476][ T5712] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 476.087501][ T5712] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 476.087530][ T5712] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 476.087556][ T5712] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 476.095425][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.095454][ T5712] usb 3-1: Product: syz [ 476.095468][ T5712] usb 3-1: Manufacturer: syz [ 476.095484][ T5712] usb 3-1: SerialNumber: syz [ 476.106434][ T5712] usb 3-1: config 0 descriptor?? [ 476.108181][T14324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.108308][T14324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.114482][ T5712] usb 3-1: ucan: probing device on interface #0 [ 476.523525][ T5712] usb 3-1: ucan: device reported invalid tx-fifo size [ 476.523551][ T5712] usb 3-1: ucan: probe failed; try to update the device firmware [ 476.729616][ T5760] usb 3-1: USB disconnect, device number 14 [ 476.774378][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2603'. [ 476.943397][T14337] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2595'. [ 476.943423][T14337] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2595'. [ 477.185856][T10723] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 477.316606][ T5760] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 477.339962][T10723] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 477.351830][T10723] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.351858][T10723] usb 10-1: Product: syz [ 477.351873][T10723] usb 10-1: Manufacturer: syz [ 477.351888][T10723] usb 10-1: SerialNumber: syz [ 477.357327][T10723] usb 10-1: config 0 descriptor?? [ 477.360929][T10723] hub 10-1:0.0: bad descriptor, ignoring hub [ 477.360956][T10723] hub 10-1:0.0: probe with driver hub failed with error -5 [ 477.406310][T14343] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 477.475781][ T5760] usb 4-1: Using ep0 maxpacket: 16 [ 477.477510][ T5760] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 477.478496][ T5760] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 477.478521][ T5760] usb 4-1: config 0 has no interface number 0 [ 477.481713][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.481738][ T5760] usb 4-1: Product: syz [ 477.481753][ T5760] usb 4-1: Manufacturer: syz [ 477.481767][ T5760] usb 4-1: SerialNumber: syz [ 477.501213][ T5760] usb 4-1: config 0 descriptor?? [ 477.554339][ T5760] hub 4-1:0.132: bad descriptor, ignoring hub [ 477.554369][ T5760] hub 4-1:0.132: probe with driver hub failed with error -5 [ 477.573356][ T5760] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input45 [ 477.582646][T10723] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 477.602670][T10723] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 477.608432][T10723] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 477.608485][T10723] usb 10-1: media controller created [ 477.670718][T10723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.673192][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2598'. [ 477.695596][T14349] bridge0: port 3(syz_tun) entered disabled state [ 477.769803][T14349] syz_tun (unregistering): left allmulticast mode [ 477.769834][T14349] syz_tun (unregistering): left promiscuous mode [ 477.769985][T14349] bridge0: port 3(syz_tun) entered disabled state [ 477.853076][T10723] DVB: Unable to find symbol dib7000p_attach() [ 477.853096][T10723] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 477.937860][T10723] rc_core: IR keymap rc-dib0700-rc5 not found [ 477.937890][T10723] Registered IR keymap rc-empty [ 477.938459][T10723] dvb-usb: could not initialize remote control. [ 477.938471][T10723] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 477.947469][T10723] usb 10-1: USB disconnect, device number 24 [ 478.081114][T10723] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 478.147450][ T5712] usb 4-1: USB disconnect, device number 84 [ 479.006329][ T5683] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 479.155932][ T5683] usb 3-1: Using ep0 maxpacket: 8 [ 479.156634][ T5683] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 479.157615][ T5683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.157662][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.162994][ T5683] usb 3-1: config 0 descriptor?? [ 479.186755][ T5712] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 479.217057][ T5683] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 479.329690][ T5712] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 479.330823][ T5712] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.330849][ T5712] usb 4-1: config 0 has no interface number 0 [ 479.332873][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.332898][ T5712] usb 4-1: Product: syz [ 479.332914][ T5712] usb 4-1: Manufacturer: syz [ 479.332930][ T5712] usb 4-1: SerialNumber: syz [ 479.337828][ T5712] usb 4-1: config 0 descriptor?? [ 479.556216][ T5712] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 479.564495][ T5712] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 479.564924][ T5712] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 479.564973][ T5712] usb 4-1: media controller created [ 479.593339][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.759084][ T5712] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 479.908208][ T5712] usb 4-1: USB disconnect, device number 85 [ 480.307604][ T5760] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 480.413915][ T5683] gspca_vc032x: reg_w err -71 [ 480.413991][ T5683] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 480.437891][ T5683] usb 3-1: USB disconnect, device number 15 [ 480.457369][ T5760] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 480.458372][ T5760] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.458420][ T5760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 480.458443][ T5760] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 480.458466][ T5760] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.458507][ T5760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.649424][T14403] binder: 14402:14403 ioctl 4018620d 0 returned -22 [ 480.687735][ T5712] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 480.777903][ T5683] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 480.850473][ T5712] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 480.854824][ T5712] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 480.854853][ T5712] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 480.854873][ T5712] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 480.854915][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 480.854940][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 480.859268][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 480.859295][ T5712] usb 4-1: Product: syz [ 480.859310][ T5712] usb 4-1: Manufacturer: syz [ 480.872941][ T5712] cdc_wdm 4-1:1.0: skipping garbage [ 480.872962][ T5712] cdc_wdm 4-1:1.0: skipping garbage [ 480.883425][ T5712] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 480.883446][ T5712] cdc_wdm 4-1:1.0: Unknown control protocol [ 480.962976][ T5683] usb 10-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 480.964087][ T5683] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 480.964135][ T5683] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.997724][ T5683] usb 10-1: config 0 descriptor?? [ 480.999486][T14399] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 481.077208][T10256] usb 4-1: USB disconnect, device number 86 [ 481.110499][T14385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.112145][T14385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.145856][T10249] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 481.295817][T10249] usb 9-1: Using ep0 maxpacket: 8 [ 481.296561][T10249] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 481.297502][T10249] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 481.297532][T10249] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.297544][T10249] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 481.297557][T10249] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.297569][T10249] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.297618][T10249] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.404587][ T5683] hid (null): bogus close delimiter [ 481.404671][ T5683] hid (null): unknown global tag 0x6d [ 481.404680][ T5683] hid (null): bogus close delimiter [ 481.412792][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.412858][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.412887][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.412914][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.412941][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.413001][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.413028][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.413055][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.413081][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.413216][ T5683] uclogic 0003:5543:0064.0029: unknown main item tag 0x0 [ 481.414016][ T5683] uclogic 0003:5543:0064.0029: bogus close delimiter [ 481.414032][ T5683] uclogic 0003:5543:0064.0029: item 0 0 2 10 parsing failed [ 481.414885][ T5683] uclogic 0003:5543:0064.0029: parse failed [ 481.415025][ T5683] uclogic 0003:5543:0064.0029: probe with driver uclogic failed with error -22 [ 481.511310][T10249] usb 9-1: usb_control_msg returned -32 [ 481.511360][T10249] usbtmc 9-1:16.0: can't read capabilities [ 481.539366][ T5760] [drm] Initialized gud 1.0.0 for 6-1:1.0 on minor 1 [ 481.609469][T10249] usb 10-1: USB disconnect, device number 25 [ 481.714552][ T9] usb 9-1: USB disconnect, device number 79 [ 481.885519][ T5760] Console: switching to colour frame buffer device 128x48 [ 481.919488][ T5760] gud 6-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 481.923449][ T5760] usb 6-1: USB disconnect, device number 114 [ 481.950940][ T5760] Console: switching to colour VGA+ 80x25 [ 482.483330][T14442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2638'. [ 482.568256][T14446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.568277][T14446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.574434][T14446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.574451][T14446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.846438][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 485.006996][ T9] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 485.008891][ T9] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 485.008924][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 485.008941][ T9] usb 3-1: config 4 has no interface number 0 [ 485.008979][ T9] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.013732][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.013760][ T9] usb 3-1: Product: syz [ 485.013775][ T9] usb 3-1: Manufacturer: syz [ 485.013790][ T9] usb 3-1: SerialNumber: syz [ 485.016656][ T5712] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 485.045854][T10723] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 485.188029][ T5712] usb 9-1: Using ep0 maxpacket: 16 [ 485.190301][ T5712] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.191663][ T5712] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.191710][ T5712] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.191761][ T5712] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 485.191787][ T5712] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.191809][ T5712] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.191850][ T5712] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.200513][ T5712] usb 9-1: config 0 descriptor?? [ 485.219617][T10723] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 485.220642][T10723] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.220686][T10723] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 485.220708][T10723] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 485.220731][T10723] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.220770][T10723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.345959][ T5712] rc_core: IR keymap rc-hauppauge not found [ 485.345977][ T5712] Registered IR keymap rc-empty [ 485.346779][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.422809][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.437933][ T5712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 485.442191][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input47 [ 485.461641][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.489652][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.495620][ T9] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 485.499881][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 485.502340][ T9] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 485.502391][ T9] usb 3-1: media controller created [ 485.506903][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.516698][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.536739][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.556702][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.576492][ T9] DVB: Unable to find symbol dib7000p_attach() [ 485.576508][ T9] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 485.576985][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.605990][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.616871][ T5683] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 485.629862][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.647230][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.668707][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 485.668721][ T9] Registered IR keymap rc-empty [ 485.668901][ T9] dvb-usb: could not initialize remote control. [ 485.668907][ T9] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 485.669081][ T5712] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 485.701125][ T5712] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 485.701150][ T5712] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 485.711366][ T9] usb 3-1: USB disconnect, device number 16 [ 485.713762][ T5712] usb 9-1: USB disconnect, device number 80 [ 485.748293][ T9] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 485.816513][ T5683] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 485.817506][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 485.817537][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 485.817560][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 485.817585][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 485.819511][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.819535][ T5683] usb 6-1: Product: syz [ 485.819549][ T5683] usb 6-1: Manufacturer: syz [ 485.819564][ T5683] usb 6-1: SerialNumber: syz [ 485.822460][ T5683] usb 6-1: config 0 descriptor?? [ 486.031454][ T5683] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 486.239373][ T5683] usb 6-1: USB disconnect, device number 115 [ 486.278779][T10723] gud 4-1:1.0: USB-1: Failed to add properties (ret=-5) [ 486.278836][T10723] gud 4-1:1.0: Failed to get connectors (error=-5) [ 486.278864][T10723] gud 4-1:1.0: probe with driver gud failed with error -5 [ 486.468390][T10723] usb 4-1: USB disconnect, device number 87 [ 487.588272][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2674'. [ 488.984552][T14578] binder: 14577:14578 ioctl c0306201 80000080 returned -14 [ 489.635767][ T5683] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 489.657525][T14593] binder: 14577:14593 ioctl c0306201 800003c0 returned -14 [ 489.785758][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 489.792676][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 489.792727][ T5683] usb 3-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice=f3.a9 [ 489.794597][ T5683] usb 3-1: config 14 has an invalid interface number: 237 but max is 0 [ 489.794623][ T5683] usb 3-1: config 14 has no interface number 0 [ 489.794652][ T5683] usb 3-1: config 14 interface 237 has no altsetting 0 [ 489.849611][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.849641][ T5683] usb 3-1: Product: syz [ 489.849657][ T5683] usb 3-1: Manufacturer: syz [ 489.849672][ T5683] usb 3-1: SerialNumber: syz [ 490.067015][ T5683] belkin_sa 3-1:14.237: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 490.068400][ T5683] usb 3-1: bcdDevice: f3a9, bfc: 0 [ 490.072551][ T5683] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 490.103257][ T5683] usb 3-1: USB disconnect, device number 17 [ 490.116375][ T5683] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 490.116898][ T5683] belkin_sa 3-1:14.237: device disconnected [ 490.835942][ T5732] usb 9-1: new full-speed USB device number 81 using dummy_hcd [ 490.987953][ T5732] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.989385][ T5732] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.989415][ T5732] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.989458][ T5732] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.825052][ T5732] usb 9-1: usb_control_msg returned -32 [ 491.825104][ T5732] usbtmc 9-1:16.0: can't read capabilities [ 491.880754][ T5683] usb 9-1: USB disconnect, device number 81 [ 492.336656][ T5683] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 492.487663][ T5683] usb 6-1: Using ep0 maxpacket: 32 [ 492.502908][ T5683] usb 6-1: unable to get BOS descriptor or descriptor too short [ 492.502960][ T5683] usb 6-1: New USB device found, idVendor=1f4d, idProduct=d220, bcdDevice=30.ec [ 492.521456][ T5683] usb 6-1: config 2 has an invalid interface number: 55 but max is 0 [ 492.521485][ T5683] usb 6-1: config 2 has no interface number 0 [ 492.521515][ T5683] usb 6-1: config 2 interface 55 has no altsetting 0 [ 492.541914][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.541940][ T5683] usb 6-1: Product: syz [ 492.541953][ T5683] usb 6-1: Manufacturer: syz [ 492.541967][ T5683] usb 6-1: SerialNumber: syz [ 492.809328][ T5683] dvb-usb: found a 'Geniatech T220 DVB-T/T2 USB2.0' in warm state. [ 492.809383][ T5683] dw2102: su3000_power_ctrl: 1, initialized 0 [ 492.809403][ T5683] dvb-usb: bulk message failed: -22 (2/0) [ 492.838758][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 492.841199][ T5683] dvbdev: DVB: registering new adapter (Geniatech T220 DVB-T/T2 USB2.0) [ 492.841271][ T5683] usb 6-1: media controller created [ 492.841432][ T5683] dvb-usb: bulk message failed: -22 (6/0) [ 492.841448][ T5683] dw2102: i2c transfer failed. [ 492.841500][ T5683] dvb-usb: bulk message failed: -22 (6/0) [ 492.841515][ T5683] dw2102: i2c transfer failed. [ 492.841529][ T5683] dvb-usb: bulk message failed: -22 (6/0) [ 492.841543][ T5683] dw2102: i2c transfer failed. [ 492.841556][ T5683] dvb-usb: bulk message failed: -22 (6/0) [ 492.912382][ T5683] dw2102: i2c transfer failed. [ 492.912407][ T5683] dvb-usb: bulk message failed: -22 (6/0) [ 492.912423][ T5683] dw2102: i2c transfer failed. [ 492.912436][ T5683] dvb-usb: bulk message failed: -22 (6/0) [ 492.912457][ T5683] dw2102: i2c transfer failed. [ 492.912466][ T5683] dvb-usb: MAC address: 02:02:02:02:02:02 [ 492.957031][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.996442][ T5683] dvb-usb: bulk message failed: -22 (3/0) [ 492.996464][ T5683] dw2102: command 0x0e transfer failed. [ 492.996474][ T5683] dvb-usb: bulk message failed: -22 (3/0) [ 492.996488][ T5683] dw2102: command 0x0e transfer failed. [ 492.996497][ T5683] dvb-usb: bulk message failed: -22 (3/0) [ 492.996510][ T5683] dw2102: command 0x0e transfer failed. [ 493.071743][ T5683] dvb-usb: bulk message failed: -22 (3/0) [ 493.071769][ T5683] dw2102: command 0x0e transfer failed. [ 493.071786][ T5683] dvb-usb: bulk message failed: -22 (1/0) [ 493.071799][ T5683] dw2102: command 0x51 transfer failed. [ 493.177548][ T5683] DVB: Unable to find symbol cxd2820r_attach() [ 493.177566][ T5683] dw2102: Failed to attach TDA18271HD/CXD2820R! [ 493.177575][ T5683] dvb-usb: no frontend was attached by 'Geniatech T220 DVB-T/T2 USB2.0' [ 493.203022][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2723'. [ 493.224788][T14660] bridge0: port 3(syz_tun) entered disabled state [ 493.268330][T14660] syz_tun (unregistering): left allmulticast mode [ 493.268359][T14660] syz_tun (unregistering): left promiscuous mode [ 493.268456][T14660] bridge0: port 3(syz_tun) entered disabled state [ 493.336007][ T5683] rc_core: IR keymap rc-su3000 not found [ 493.336026][ T5683] Registered IR keymap rc-empty [ 493.339742][ T5683] rc rc0: Geniatech T220 DVB-T/T2 USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 493.352104][ T5683] input: Geniatech T220 DVB-T/T2 USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input49 [ 493.386160][ T4933] Bluetooth: hci5: command 0x0406 tx timeout [ 493.389281][ T5683] dvb-usb: schedule remote query interval to 150 msecs. [ 493.389306][ T5683] dw2102: su3000_power_ctrl: 0, initialized 1 [ 493.389318][ T5683] dvb-usb: Geniatech T220 DVB-T/T2 USB2.0 successfully initialized and connected. [ 493.392207][ T5683] usb 6-1: USB disconnect, device number 116 [ 493.461363][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2725'. [ 493.544845][ T5683] dvb-usb: Geniatech T220 DVB-T/T2 USB2.0 successfully deinitialized and disconnected. [ 493.705162][T14672] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 493.905759][T10249] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 493.989376][T14684] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 494.055938][T10249] usb 10-1: Using ep0 maxpacket: 16 [ 494.056627][T10249] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 494.061648][T10249] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.061676][T10249] usb 10-1: Product: syz [ 494.061689][T10249] usb 10-1: Manufacturer: syz [ 494.061704][T10249] usb 10-1: SerialNumber: syz [ 494.110208][T10249] usb 10-1: config 0 descriptor?? [ 494.125025][T10249] visor 10-1:0.0: Sony Clie 3.5 converter detected [ 494.552093][T10249] usb 10-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 494.752678][T10249] usb 10-1: USB disconnect, device number 26 [ 494.790080][T10249] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 494.790649][T10249] visor 10-1:0.0: device disconnected [ 495.475825][ T9] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 495.555942][ T5732] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 495.627874][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 495.629337][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.633663][ T9] usb 6-1: config 0 descriptor?? [ 495.708065][ T5732] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 495.713645][ T5732] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.713662][ T5732] usb 9-1: Product: syz [ 495.713670][ T5732] usb 9-1: Manufacturer: syz [ 495.713678][ T5732] usb 9-1: SerialNumber: syz [ 495.721744][ T5732] usb 9-1: config 0 descriptor?? [ 495.731354][ T5732] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 495.760590][ T5732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 495.765139][ T5732] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 495.765201][ T5732] usb 9-1: media controller created [ 495.814861][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.837041][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 495.900989][ T5732] DVB: Unable to find symbol mt352_attach() [ 495.953027][ T5732] DVB: Unable to find symbol nxt6000_attach() [ 495.953044][ T5732] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 495.958394][ T5732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input50 [ 495.965189][ T5732] dvb-usb: schedule remote query interval to 1000 msecs. [ 495.965212][ T5732] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 495.965229][ T5732] dvb-usb: bulk message failed: -22 (7/0) [ 495.965243][ T5732] dvb-usb: bulk message failed: -22 (7/0) [ 495.978425][ T5732] usb 9-1: USB disconnect, device number 82 [ 496.112046][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 496.112075][ T9] [drm] Initialized udl on minor 1 [ 496.173137][ T5732] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 496.243131][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 496.243607][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 496.464756][T14704] loop7: detected capacity change from 0 to 16384 [ 496.714669][T14730] loop7: detected capacity change from 16384 to 16383 [ 497.372640][ T5732] usb 6-1: USB disconnect, device number 117 [ 497.379163][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 497.384491][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 498.049648][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2758'. [ 499.930113][T10723] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 500.083888][T10723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 500.091760][T10723] usb 3-1: not running at top speed; connect to a high speed hub [ 500.091796][T10723] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 500.096690][T10723] usb 3-1: config 3 has an invalid interface number: 5 but max is 1 [ 500.096715][T10723] usb 3-1: config 3 has an invalid interface number: 108 but max is 1 [ 500.096735][T10723] usb 3-1: config 3 has no interface number 0 [ 500.096751][T10723] usb 3-1: config 3 has no interface number 1 [ 500.096787][T10723] usb 3-1: config 3 interface 5 has no altsetting 0 [ 500.096805][T10723] usb 3-1: config 3 interface 108 has no altsetting 0 [ 500.111805][T10723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.111833][T10723] usb 3-1: Product: syz [ 500.111847][T10723] usb 3-1: Manufacturer: syz [ 500.111862][T10723] usb 3-1: SerialNumber: syz [ 500.369096][T14801] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2774'. [ 501.009234][T10723] msi2500 3-1:3.5: Registered as swradio24 [ 501.009258][T10723] msi2500 3-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 501.267251][T10723] videodev: could not get a free minor [ 501.267272][T10723] msi2500 3-1:3.108: Failed to register as video device (-23) [ 501.273389][T10723] msi2500 3-1:3.108: probe with driver msi2500 failed with error -23 [ 501.278637][T10723] usb 3-1: USB disconnect, device number 18 [ 501.550768][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.550830][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.177550][ T32] INFO: task kworker/1:1:30 blocked for more than 143 seconds. [ 502.177573][ T32] Not tainted syzkaller #0 [ 502.177585][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.177596][ T32] task:kworker/1:1 state:D stack:21832 pid:30 tgid:30 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 502.177647][ T32] Workqueue: usb_hub_wq hub_event [ 502.177799][ T32] Call Trace: [ 502.177811][ T32] [ 502.177824][ T32] __schedule+0x17db/0x58f0 [ 502.177861][ T32] ? __lock ** replaying previous printk message ** [ 502.177861][ T32] ? __lock_acquire+0x747/0x2de0 [ 502.177889][ T32] ? device_add+0x7d7/0xb80 [ 502.177971][ T32] ? usb_generic_driver_probe+0x8d/0x150 [ 502.178048][ T32] ? usb_probe_device+0x1c3/0x3b0 [ 502.178098][ T32] ? driver_probe_device+0x4f/0x240 [ 502.178146][ T32] ? __device_attach_driver+0x270/0x410 [ 502.178170][ T32] ? __device_attach+0x2c4/0x450 [ 502.178191][ T32] ? device_add+0x7d7/0xb80 [ 502.178210][ T32] ? look_up_lock_class+0x57/0x110 [ 502.178238][ T32] ? __pfx___schedule+0x10/0x10 [ 502.178266][ T32] ? lock_acquire+0x115/0x350 [ 502.178303][ T32] ? schedule+0x90/0x2b0 [ 502.178336][ T32] schedule+0x164/0x2b0 [ 502.178368][ T32] schedule_timeout+0xc0/0x2c0 [ 502.178428][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 502.178456][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.178493][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.178524][ T32] ? wait_for_completion+0x272/0x5e0 [ 502.178545][ T32] wait_for_completion+0x2ca/0x5e0 [ 502.178578][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 502.178605][ T32] ? kobject_put+0x50f/0x550 [ 502.178682][ T32] i2c_del_adapter+0x292/0x440 [ 502.178789][ T32] ? __pfx_i2c_del_adapter+0x10/0x10 [ 502.178818][ T32] ? kfree+0x4d/0x650 [ 502.178856][ T32] dvb_usb_i2c_exit+0x64/0xb0 [ 502.178919][ T32] dvb_usb_device_exit+0x1cb/0x350 [ 502.178944][ T32] ? console_srcu_read_lock+0x30/0x60 [ 502.178968][ T32] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 502.178996][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.179033][ T32] cxusb_probe+0x60f/0x710 [ 502.179083][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 502.179116][ T32] ? __pfx_cxusb_probe+0x10/0x10 [ 502.179143][ T32] ? __pm_runtime_set_status+0x994/0xc80 [ 502.179200][ T32] usb_probe_interface+0x788/0xe50 [ 502.179232][ T32] ? __pfx_usb_probe_interface+0x10/0x10 [ 502.179258][ T32] ? sysfs_do_create_link_sd+0xe0/0x110 [ 502.179312][ T32] ? driver_sysfs_add+0x1fe/0x210 [ 502.179335][ T32] ? __pfx_usb_probe_interface+0x10/0x10 [ 502.179359][ T32] really_probe+0x254/0xae0 [ 502.179388][ T32] __driver_probe_device+0x1e8/0x360 [ 502.179415][ T32] driver_probe_device+0x4f/0x240 [ 502.179442][ T32] __device_attach_driver+0x270/0x410 [ 502.179470][ T32] bus_for_each_drv+0x258/0x2f0 [ 502.179558][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 502.179597][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 502.179629][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.189031][ T32] __device_attach+0x2c4/0x450 [ 502.189069][ T32] ? __pfx___device_attach+0x10/0x10 [ 502.189090][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 502.189128][ T32] ? _raw_spin_unlock+0x28/0x50 [ 502.189160][ T32] device_initial_probe+0xa1/0xd0 [ 502.189185][ T32] bus_probe_device+0x12a/0x220 [ 502.189216][ T32] device_add+0x7d7/0xb80 [ 502.189240][ T32] usb_set_configuration+0x1ad8/0x2180 [ 502.189296][ T32] usb_generic_driver_probe+0x8d/0x150 [ 502.189322][ T32] usb_probe_device+0x1c3/0x3b0 [ 502.189350][ T32] ? __pfx_usb_probe_device+0x10/0x10 [ 502.189373][ T32] really_probe+0x254/0xae0 [ 502.189400][ T32] __driver_probe_device+0x1e8/0x360 [ 502.189425][ T32] driver_probe_device+0x4f/0x240 [ 502.189452][ T32] __device_attach_driver+0x270/0x410 [ 502.189479][ T32] bus_for_each_drv+0x258/0x2f0 [ 502.189508][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 502.189531][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 502.189562][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.189595][ T32] __device_attach+0x2c4/0x450 [ 502.189619][ T32] ? __pfx___device_attach+0x10/0x10 [ 502.189641][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 502.189670][ T32] ? _raw_spin_unlock+0x28/0x50 [ 502.189701][ T32] device_initial_probe+0xa1/0xd0 [ 502.189725][ T32] bus_probe_device+0x12a/0x220 [ 502.189755][ T32] device_add+0x7d7/0xb80 [ 502.189778][ T32] usb_new_device+0x9aa/0x1690 [ 502.189806][ T32] ? __pfx_usb_new_device+0x10/0x10 [ 502.189829][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.189861][ T32] hub_event+0x28e8/0x4d30 [ 502.189883][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 502.189954][ T32] ? __pfx_hub_event+0x10/0x10 [ 502.189985][ T32] ? rcu_is_watching+0x16/0xb0 [ 502.190009][ T32] ? process_scheduled_works+0x97a/0x1630 [ 502.190078][ T32] process_scheduled_works+0xc3d/0x1630 [ 502.190133][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.190165][ T32] ? assign_work+0x3cf/0x5d0 [ 502.190195][ T32] worker_thread+0xa47/0xfb0 [ 502.190245][ T32] kthread+0x38b/0x480 [ 502.190266][ T32] ? __pfx_worker_thread+0x10/0x10 [ 502.190297][ T32] ? __pfx_kthread+0x10/0x10 [ 502.190317][ T32] ret_from_fork+0x514/0xb70 [ 502.190351][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 502.190388][ T32] ? __switch_to+0xc89/0x1420 [ 502.190416][ T32] ? __pfx_kthread+0x10/0x10 [ 502.190437][ T32] ret_from_fork_asm+0x1a/0x30 [ 502.190483][ T32] [ 502.190687][ T32] INFO: task syz.0.1385:11259 blocked for more than 143 seconds. [ 502.190703][ T32] Not tainted syzkaller #0 [ 502.190713][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.190723][ T32] task:syz.0.1385 state:D stack:27216 pid:11259 tgid:11258 ppid:5635 task_flags:0x400040 flags:0x08080002 [ 502.190779][ T32] Call Trace: [ 502.190787][ T32] [ 502.190798][ T32] __schedule+0x17db/0x58f0 [ 502.190843][ T32] ? __lock_acquire+0x747/0x2de0 [ 502.190873][ T32] ? __pfx___schedule+0x10/0x10 [ 502.190911][ T32] ? schedule+0x90/0x2b0 [ 502.202009][ T32] schedule+0x164/0x2b0 [ 502.202055][ T32] schedule_preempt_disabled+0x13/0x30 [ 502.202074][ T32] __mutex_lock+0x7c1/0x1550 [ 502.202100][ T32] ? __mutex_lock+0x5d4/0x1550 [ 502.202125][ T32] ? usbdev_open+0x151/0x770 [ 502.202154][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 502.202177][ T32] ? bus_find_device+0x27d/0x2d0 [ 502.202208][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 502.202235][ T32] ? usbdev_open+0xa7/0x770 [ 502.202259][ T32] ? usbdev_open+0xa7/0x770 [ 502.202297][ T32] usbdev_open+0x151/0x770 [ 502.202328][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 502.202358][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 502.202390][ T32] chrdev_open+0x4d9/0x600 [ 502.202416][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 502.202438][ T32] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 502.202466][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 502.202487][ T32] do_dentry_open+0x816/0x1380 [ 502.202522][ T32] vfs_open+0x3b/0x340 [ 502.202543][ T32] ? path_openat+0x1428/0x1d60 [ 502.202565][ T32] path_openat+0x1443/0x1d60 [ 502.202604][ T32] do_file_open+0x23e/0x4a0 [ 502.202628][ T32] ? __pfx_do_file_open+0x10/0x10 [ 502.202669][ T32] ? _raw_spin_unlock+0x28/0x50 [ 502.202695][ T32] ? alloc_fd+0x651/0x6c0 [ 502.202731][ T32] do_sys_openat2+0x115/0x200 [ 502.202758][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.202783][ T32] ? rcu_is_watching+0x16/0xb0 [ 502.202816][ T32] __ia32_compat_sys_openat+0x131/0x160 [ 502.202847][ T32] do_int80_emulation+0x198/0x500 [ 502.202869][ T32] ? trace_irq_disable+0x3b/0x140 [ 502.202890][ T32] ? asm_int80_emulation+0x1a/0x20 [ 502.202910][ T32] ? clear_bhb_loop+0x70/0xc0 [ 502.202930][ T32] ? clear_bhb_loop+0x70/0xc0 [ 502.202953][ T32] asm_int80_emulation+0x1a/0x20 [ 502.202972][ T32] RIP: 0023:0xf71375ab [ 502.202990][ T32] RSP: 002b:00000000f53ed03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 502.203012][ T32] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53ed100 [ 502.203027][ T32] RDX: 0000000000020482 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.203040][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.203052][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.203064][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.203093][ T32] [ 502.209006][ T32] [ 502.209006][ T32] Showing all locks held in the system: [ 502.209024][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 502.209040][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 502.209095][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 502.209303][ T32] locks held by kworker/1:1/30: 5, on CPU#1: [ 502.214169][ T32] #0: ffff88801fe99140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 502.214235][ T32] #1: ffffc90000a57c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 502.214315][ T32] #2: ffff8880298031d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 502.214450][ T32] #3: ffff888029d7d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 502.214501][ T32] #4: ffff88805062f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 502.214547][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 502.214561][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 502.214669][ T32] locks held by udevd/4983: 1, last CPU#0: [ 502.214683][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 502.214740][ T32] locks held by getty/5377: 2, on CPU#1: [ 502.214753][ T32] #0: ffff88802bc6c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 502.214881][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 502.214934][ T32] locks held by udevd/5613: 4, on CPU#1: [ 502.214948][ T32] #0: ffff888074eb62d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 502.214995][ T32] #1: ffff88805874ec80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 502.215050][ T32] #2: ffff888059d4fa58 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 502.215103][ T32] #3: ffff888029d7d1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 502.215166][ T32] locks held by kworker/u8:28/9364: 3, last CPU#1: [ 502.215180][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 502.215231][ T32] #1: ffffc90003a2fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 502.215289][ T32] #2: ffff88807c47c258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 502.215412][ T32] locks held by syz-executor/10154: 4, last CPU#0: [ 502.215427][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 502.215477][ T32] #1: ffff88807b2603b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 502.215535][ T32] #2: ffff88807839c378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 502.215592][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 502.215645][ T32] locks held by kworker/0:14/10723: 3, on CPU#0: [ 502.223616][ T32] #0: ffff88801fe99140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 502.223685][ T32] #1: ffffc9000d847c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 502.223738][ T32] #2: ffff888029bd71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 502.223800][ T32] locks held by syz.0.1385/11259: 1, on CPU#1: [ 502.223814][ T32] #0: ffff8880298031d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 502.223867][ T32] locks held by syz-executor/11485: 4, last CPU#0: [ 502.223881][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 502.223931][ T32] #1: ffff88807f135038 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 502.223984][ T32] #2: ffff888030c303b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 502.224040][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 502.224095][ T32] locks held by syz.5.2775/14822: 1, last CPU#1: [ 502.224109][ T32] #0: ffff88807469ebf0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 502.224275][ T32] locks held by syz.2.2781/14828: 1, on CPU#1: [ 502.224297][ T32] #0: ffff888030c336b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 502.224360][ T32] locks held by syz.2.2781/14829: 4, last CPU#1: [ 502.224374][ T32] #0: ffff888030c336b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 502.224422][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 502.224476][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 502.225654][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 502.227761][ T32] [ 502.227767][ T32] ============================================= [ 502.227767][ T32] [ 502.227777][ T32] NMI backtrace for cpu 0 [ 502.227801][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 502.227823][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 502.227834][ T32] Call Trace: [ 502.227842][ T32] [ 502.227850][ T32] dump_stack_lvl+0xe8/0x150 [ 502.227879][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 502.227975][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 502.228015][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 502.228044][ T32] sys_info+0x135/0x170 [ 502.228096][ T32] watchdog+0xfd7/0x1030 [ 502.228130][ T32] ? watchdog+0x1c7/0x1030 [ 502.228154][ T32] kthread+0x38b/0x480 [ 502.228177][ T32] ? __pfx_watchdog+0x10/0x10 [ 502.228194][ T32] ? __pfx_kthread+0x10/0x10 [ 502.228214][ T32] ret_from_fork+0x514/0xb70 [ 502.228236][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 502.228278][ T32] ? __switch_to+0xc89/0x1420 [ 502.228312][ T32] ? __pfx_kthread+0x10/0x10 [ 502.228332][ T32] ret_from_fork_asm+0x1a/0x30 [ 502.228379][ T32] [ 502.228402][ T32] Sending NMI from CPU 0 to CPUs 1: [ 502.228472][ C1] NMI backtrace for cpu 1 [ 502.228485][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 502.228505][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 502.228515][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 502.228615][ C1] Code: e8 1e 35 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 35 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 502.228632][ C1] RSP: 0000:ffffc900001578b8 EFLAGS: 00000002 [ 502.228648][ C1] RAX: 1ffffffff35a7200 RBX: 00000000000003fd RCX: 0000000000000000 [ 502.228660][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 502.228671][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 502.228683][ C1] R10: dffffc0000000000 R11: ffffffff85729520 R12: dffffc0000000000 [ 502.228697][ C1] R13: 0000000000000000 R14: ffffffff9ad390c0 R15: 0000000000000000 [ 502.228708][ C1] FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 502.228724][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.228740][ C1] CR2: 00007fd13350b6b0 CR3: 000000007bd9c000 CR4: 00000000003526f0 [ 502.228756][ C1] Call Trace: [ 502.228763][ C1] [ 502.228771][ C1] wait_for_lsr+0x184/0x2f0 [ 502.228799][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 502.228832][ C1] serial8250_console_write+0xaa1/0x1200 [ 502.228850][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 502.228872][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 502.228890][ C1] ? __schedule+0x17f1/0x58f0 [ 502.228925][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 502.228952][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 502.228974][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 502.229000][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 502.229026][ C1] nbcon_kthread_func+0x679/0x880 [ 502.229049][ C1] ? nbcon_kthread_func+0x163/0x880 [ 502.229067][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 502.229088][ C1] ? __kthread_parkme+0x71/0x1f0 [ 502.229113][ C1] ? __kthread_parkme+0x199/0x1f0 [ 502.229139][ C1] kthread+0x38b/0x480 [ 502.229155][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 502.229172][ C1] ? __pfx_kthread+0x10/0x10 [ 502.229190][ C1] ret_from_fork+0x514/0xb70 [ 502.229208][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 502.229233][ C1] ? __switch_to+0xc89/0x1420 [ 502.229257][ C1] ? __pfx_kthread+0x10/0x10 [ 502.229275][ C1] ret_from_fork_asm+0x1a/0x30 [ 502.229309][ C1] [ 502.240783][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 503.813737][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 503.822859][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 503.832922][ T32] Call Trace: [ 503.836199][ T32] [ 503.839132][ T32] vpanic+0x56d/0xa60 [ 503.843116][ T32] ? __pfx___schedule+0x10/0x10 [ 503.847976][ T32] ? __pfx_vpanic+0x10/0x10 [ 503.852505][ T32] panic+0xc5/0xd0 [ 503.856236][ T32] ? __pfx_panic+0x10/0x10 [ 503.860822][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 503.866315][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 503.871711][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 503.877892][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 503.884058][ T32] watchdog+0x1030/0x1030 [ 503.888391][ T32] ? watchdog+0x1c7/0x1030 [ 503.892811][ T32] kthread+0x38b/0x480 [ 503.896876][ T32] ? __pfx_watchdog+0x10/0x10 [ 503.901551][ T32] ? __pfx_kthread+0x10/0x10 [ 503.906136][ T32] ret_from_fork+0x514/0xb70 [ 503.910723][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 503.915849][ T32] ? __switch_to+0xc89/0x1420 [ 503.920558][ T32] ? __pfx_kthread+0x10/0x10 [ 503.925143][ T32] ret_from_fork_asm+0x1a/0x30 [ 503.929941][ T32] [ 503.933284][ T32] Kernel Offset: disabled [ 503.937603][ T32] Rebooting in 86400 seconds..