last executing test programs: 15.134165386s ago: executing program 1 (id=2195): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x11, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xce20, 0xfffffff7, @remote, 0x2}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, 0x0, 0x0, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x88640) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) socket(0x2, 0x80805, 0x0) 13.458746194s ago: executing program 1 (id=2200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x1500, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 13.249341195s ago: executing program 4 (id=2202): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) dup2(r2, r2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd29, 0xfffffffe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x2, {@ip4=@broadcast}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x51dcb31a4347a434) (fail_nth: 3) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) 13.197990791s ago: executing program 1 (id=2203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x1, 0xffc00000}, 0x3, 0x19c, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008840) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80000, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001d80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000100)=0xffff0080) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xc}, 0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) close(r3) unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2496], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 11.659196086s ago: executing program 1 (id=2207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x3}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r3, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea43", 0x7f}, {&(0x7f0000001400)="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", 0xf9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f", 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, &(0x7f0000000ac0)={0x2c, &(0x7f0000000800)={0x40, 0x22, 0x3f, {0x3f, 0x22, "86c9c03d1a6a9593220235ecacc1f9431bf61228905353c79677b45ec31f4aa64ede11b10559771a762bde0afb915ad26bc1105d2ec0b793781b8b0f84"}}, &(0x7f0000000900)={0x0, 0x3, 0x9a, @string={0x9a, 0x3, "d0047c58ab7db2c56d6de22786146d63e88bded353da7b6aa4f09f7b0efb14160667e9eaa79f32c8c79ec68187ef6bd17c3e818e830868494e8c87269045a6be668dc9328ffb0d3d5f4a83f5632dbffb99e32290dc629f2868439f90c97d5a0a9363749546119e1d627a3d33c484621aee9d5ffcc418eeec332222f2b0f9a34db4a473bd560fcb2bfcfe30718f9cb7617219134d969a97ee"}}, &(0x7f00000009c0)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9005a40d5e1639ed0da5ebac66a37b7f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0x74, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "cb1ab731057968714a27ae315804a62b"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "9da1d730d0537ad5bfdfac77f992fc94"}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x5, 0x8, "6a7091e2", "45e906df"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x0, 0x5, 0x2, 0x0, 0x7}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="2015f3000000ad4dbf1b0c644bd3875079a8fb8cca9bc6ba4ea1f51739c2e594318a93c8d7100a1a389116c1fadfff4e1f3a82cd74f60d44045f6b5edd863d4f438e5dff89804495d265b49476c57bcad2c3ad7c6d356ff9c564fdae64a00c3fb8e20f5f9d3fc87dbd660eb2f5a53311e1d3a56fb120fb891986380b07a34ae993bcf645f82a7c227519b7ec499fedf2a4f3aff64610ab7a4ba4eda036c500b225c2cd3f5befa5201544bd0cb57e5a2d3e6298905cb02070ef3c22c243228b2a639c3249b5702abbbc511fa52170947df517328a2512d39a6d795933f3ce571eedfe0930f3a456572b60"], &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000cc0)={0x20, 0x0, 0x8, {0x8, 0x20, [0xffff]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000d40)={0x40, 0x9, 0x1}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "b325"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, '\tO'}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x2}}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000780)=""/96, 0x60}], 0x2}, 0x40000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000200)={0x3, 0xfffffffa, 0x9, 0x1, 0x2, 0x10000}) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2641) ioctl$LOOP_SET_FD(r10, 0x4c00, r9) dup2(r9, r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 11.06531775s ago: executing program 3 (id=2209): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008840) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, &(0x7f0000000000)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xc}, 0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2496], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 10.954075533s ago: executing program 4 (id=2212): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000500), 0x4) 10.90255012s ago: executing program 4 (id=2213): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000340)={0x51c, 0x6, 0x1}) r6 = syz_clone(0x8240000, &(0x7f0000000000)="c57c630b4de01f2ad0d19556e745b1ad9040a9b96b6dc83d7895a24922499adcb47af058f26c80c0601b3729e98c09061f", 0x31, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="f61692fa75c886721397f096dedcc7e1c1cc42b66b94f64506041eeb8f01102842bfeb98a4949bcb536e21fb986939dd91889b0195bdfd4cd3a19d88474c071ee155f268fee4410a66dfeeb3e4312b145d3b33c750c6b38d031668708e8cebc872582b879408046258f8b8937c9e22963dfbb7d199632e1ef7affc19fcc4131f85fd615d97bc8d840a9a2e4ce78655821d9a009a9ff64b63508ab84d") openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x2080c0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r8 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440)=r7, 0x1) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1007, 0x4, 0xb, 0x4080, 'syz1\x00', 0xffffffff}, 0x3, 0x0, 0x1, r6, 0x0, 0x9, 'syz1\x00', 0x0}) 9.322350611s ago: executing program 3 (id=2217): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029120000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 9.321815821s ago: executing program 3 (id=2218): lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000040)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{{0x3, 0x0, 0x0, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x4, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x20) bind$can_raw(r2, &(0x7f00000001c0), 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1eb640) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x38}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 8.6691093s ago: executing program 4 (id=2219): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000040000000000a0000010900010073797a3100000000400004803c0001800b00010065787468647200002c000280080005400000001805000200830000000800014000000000080004400000005a080003400000001c0900020073797a3200000000140000001100010000000000000000000100000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000400)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1, 0x0, 0x2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0xe, 0x0, 0xcf0f, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x4d49, 0x1, {{0xd, 0x4, 0x1, 0x7, 0x34, 0x65, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, {[@timestamp={0x44, 0x18, 0x95, 0x0, 0xa, [0x770, 0x5, 0x8, 0x19143ca5, 0x7]}, @noop, @ra={0x94, 0x4}]}}}}}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0xf984, 0x10100, 0x3, 0x0, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@ifindex=r3, r1, 0x6, 0x0, 0x0, @void, @value=r5, @void, @void, r2}, 0x20) ioctl$FBIOGET_VSCREENINFO(r5, 0x4600, &(0x7f0000000700)) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000dc0)=""/232, 0xe8}], 0x1}, 0x40000010) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xb, 0xa}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0xffbd2e1bca3d81d7}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008884}, 0x40) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r10, &(0x7f0000000280)=""/49, 0x31) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x24200, 0x171}, 0x18) open_tree(r11, &(0x7f0000000100)='./file0\x00', 0x80000) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) 8.258050238s ago: executing program 1 (id=2221): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000002c0)) sendmsg(r2, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x40010122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) connect$unix(r3, &(0x7f0000000380)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) 7.762272207s ago: executing program 1 (id=2224): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x1500, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x38000000) 7.220197585s ago: executing program 32 (id=2224): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x1500, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x38000000) 6.792264173s ago: executing program 0 (id=2227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008840) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, &(0x7f0000000000)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xc}, 0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2496], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.614344406s ago: executing program 2 (id=2228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8902}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x24020400) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, &(0x7f0000000080)) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f00000003c0)) 6.574991175s ago: executing program 4 (id=2229): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000000}) 6.201640114s ago: executing program 2 (id=2230): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000340)={0x51c, 0x6, 0x1}) r6 = syz_clone(0x8240000, &(0x7f0000000000)="c57c630b4de01f2ad0d19556e745b1ad9040a9b96b6dc83d7895a24922499adcb47af058f26c80c0601b3729e98c09061f", 0x31, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="f61692fa75c886721397f096dedcc7e1c1cc42b66b94f64506041eeb8f01102842bfeb98a4949bcb536e21fb986939dd91889b0195bdfd4cd3a19d88474c071ee155f268fee4410a66dfeeb3e4312b145d3b33c750c6b38d031668708e8cebc872582b879408046258f8b8937c9e22963dfbb7d199632e1ef7affc19fcc4131f85fd615d97bc8d840a9a2e4ce78655821d9a009a9ff64b63508ab84d") openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x2080c0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r8 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440)=r7, 0x1) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1007, 0x4, 0xb, 0x4080, 'syz1\x00', 0xffffffff}, 0x3, 0x0, 0x1, r6, 0x0, 0x9, 'syz1\x00', 0x0}) 6.200853268s ago: executing program 3 (id=2231): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800, &(0x7f0000000080)={0xa, 0x4e20, 0x104, @local}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x1, 0x1, 0x1d}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 6.101686077s ago: executing program 3 (id=2232): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002100010025bd6f00fddbdf2502100002ff0000000e00010008000100ac1414159d05d283202f04cacd90eb8632e123e14a186e7914c4e6fa7342761e4625d71a287da7e721bad1476b97dff5f89504cb97bb4cfe02e0a6d6407dd4d73a22d1455d54c6314bcf9bea"], 0x24}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x5) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}}, 0x48004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x0, 0x7, 0x3, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private1, 0x7, 0x8000, 0xf8c3, 0x8}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) recvmmsg(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}], 0x2}, 0x8}, {{0x0, 0x0, 0x0}, 0x89bc}], 0x2, 0x20, 0x0) sendto$packet(r5, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140), 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000002b40)=[0x0, 0x0], &(0x7f0000002b80)=[0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000002bc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002c00), &(0x7f0000002c40), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000002c80)}}, 0x10) 5.64073472s ago: executing program 2 (id=2233): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200010000000009040000008ec46f000c3ca3ca9585aaf12cd4146ea047489a6fdc76ff5e502e1512451385f091832d81f474358b16de5a12e5699cc290ef402d701b0a796d9f4da1eefdc426913a4456e19494195a1035f55645bf88a4cf8d70697fd0c9060af224be772822aa2c8e3e079bdce98d71c993c7da2e4971faec428896012821a55a322e9e2299e522b8274daabf2c2cfcd2a649e0ddc76f7509e8eefddaf809fe843df4afa6d6fe31487ca141d205b4e561575d0db8fb6ff2dd81a510ced894ec7dc6fbc2124e0618d9e4649e99a000"], 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, 0x0, 0x1980, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20000040) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr(r2, 0x0, 0x0, 0x0, 0x2) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r6 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, 0x0, 0x0) syz_io_uring_setup(0x6bd, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 4.906174222s ago: executing program 0 (id=2234): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x1ab801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000011c0)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x2, 0x6}, &(0x7f0000001280)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001340)={r2, 0x68, &(0x7f00000012c0)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x21ba, @remote, 0x1}]}, &(0x7f0000001380)=0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000001040)) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}]}) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r4, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}, {0x0}], 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x53, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bb, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1fc, 0xfff, 0xfff]}, 0x45c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000010c0)=ANY=[@ANYBLOB="020300020c000000fdffffffffdbdf0d030006000020000002000000640101000000000000000000020401000000fd000000030005000000000002000000ac1414aa00bd4a0c93932a9fdbd14f0000000000000001000900000000000100140042fd85c850a056a15e52e962196aebdaf7daf39e3af131be317961d927b2dcb2771a26edeaa2ff5e3d6dbeb148fc8f31c495224df5012bb5a03109c0a5f9b5cb7c73e787a8ed8805758d63975adda72725dbc19974972645c5b197fca3d32ec75abc643e47be876aca6c1071bc1b7112ed1b1e60f4d0488b162ef220c6e4e5"], 0x60}, 0x1, 0x7}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000013c0)=@assoc_value, &(0x7f0000001400)=0x8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x3, 0x6, 0x2, 0x80000000, 0x2004c8, 0x0, 0x0, 0x1000000100800001, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x5], 0x4000, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d34101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup/syz1\x00', 0x1ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.409977802s ago: executing program 4 (id=2235): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x3) (async) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x3) pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xa6) (async) pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xa6) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRES16=r0], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001200)={0x1, 0x1, &(0x7f0000000040)=""/199, &(0x7f0000000140)=""/9, &(0x7f0000000180)=""/12, 0x10000}) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006) 3.971803889s ago: executing program 2 (id=2236): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x80ff, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300001800000000000000000000000400030000000000fdffffffffffffff07000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000020013"], 0xc0}}, 0x0) 3.514441868s ago: executing program 2 (id=2237): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb37, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/11], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.351954787s ago: executing program 0 (id=2238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x1, 0xffc00000}, 0x3, 0x19c, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008840) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80000, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001d80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000100)=0xffff0080) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xc}, 0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) close(r3) unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2496], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.84271842s ago: executing program 3 (id=2239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) fcntl$dupfd(r2, 0x0, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x6b4eddb}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$kcm(0x2, 0x3, 0x2) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0xc0044dff, &(0x7f0000004000)) 2.405064971s ago: executing program 0 (id=2240): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f00000001c0)={0x0, 0x20, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000), 0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x624502, 0x0) 2.050250364s ago: executing program 0 (id=2241): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800, &(0x7f0000000080)={0xa, 0x4e20, 0x104, @local}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x1, 0x1, 0x1d}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 1.821155932s ago: executing program 0 (id=2242): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8080, 0x8400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x48}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000340), 0x5, 0x82080) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x4, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x200000000, 0x5, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, [0x0, 0x0, 0x6, 0x4000]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, 0xfff}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000140)=0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x100659, @empty, 0xff}, 0x1c) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x4, 0x0, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) r5 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r5, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r6, 0x2007ffb) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000a80)={0x2020}, 0x2039) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r9, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000440)='Y', 0x1}], 0x2) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_submit(0x0, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 1.74679569s ago: executing program 2 (id=2243): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x1, 0xffc00000}, 0x3, 0x19c, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008840) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001d80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xc}, 0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2496], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.413607112s ago: executing program 5 (id=2244): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181d03, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="bcdcf58bcb50b8e67bc00056d6c50e15", 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x15, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x200, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) socket(0x2d, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e0018e4d7bd95c2b730ab0e2bfb8104f492e586ea343bd51adcf2c91d5d381583999aae9f043ebcda"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.138712933s ago: executing program 5 (id=2245): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) write$nci(r1, &(0x7f0000000100)=ANY=[], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r3, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x300}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x10e0, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x74}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9d0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xae5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}]}, 0x10e0}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) write$proc_mixer(r1, &(0x7f00000002c0)=[{'MONITOR', @void}, {'LINE2', @void}], 0xe) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "116c9f", 0x14, 0x6, 0xff, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x58, 0x885}}}}}}}, 0x0) 1.009695107s ago: executing program 5 (id=2246): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x282, 0x0, 0x4}, {0x4b564d01, 0x0, 0x439e}]}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x121801, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x7, 0xa4b8, 0x2, 0x6, 0x3, 0x7ff, 0x9, 0x200, 0x10000, 0x6, 0x8, 0x838, 0x0, 0x10000, 0x4, 0x8000], 0xdddd1000, 0x4000}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='{', 0x1, 0x4040084, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) 410.135297ms ago: executing program 5 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r1) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_TOL={0x6, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) (async) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x2, 0x0, &(0x7f00000003c0)=0x0) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) 130.291634ms ago: executing program 5 (id=2248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050005000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=2249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000c08000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000001000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) kernel console output (not intermixed with test programs): -1: config 0 descriptor?? [ 527.077360][ T982] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now attached [ 527.100591][ T5929] em28xx 1-1:7.154: New device syz syz @ 480 Mbps (0438:b002, interface 154, class 154) [ 527.114697][ T5929] em28xx 1-1:7.154: Audio interface 154 found (Vendor Class) [ 527.175968][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 527.229519][ T5929] em28xx 1-1:7.154: unknown em28xx chip ID (0) [ 527.241555][ T5929] em28xx 1-1:7.154: Config register raw data: 0xfffffffb [ 527.342961][ T5929] em28xx 1-1:7.154: AC97 chip type couldn't be determined [ 527.355145][ T5929] em28xx 1-1:7.154: No AC97 audio processor [ 527.370121][ T5929] usb 1-1: USB disconnect, device number 82 [ 527.427747][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 527.473595][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 527.486681][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.495501][ T10] usb 2-1: Product: syz [ 527.501740][ T10] usb 2-1: Manufacturer: syz [ 527.506987][ T10] usb 2-1: SerialNumber: syz [ 527.526616][ T10] usb 2-1: config 0 descriptor?? [ 527.556389][T12232] loop6: detected capacity change from 0 to 2560 [ 527.563221][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 527.572832][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.583262][T12238] netlink: 'syz.2.1698': attribute type 10 has an invalid length. [ 527.600392][T12232] buffer_io_error: 5 callbacks suppressed [ 527.600411][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.620132][T12236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1696'. [ 527.632761][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.645983][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.662809][T12236] binder: 12227:12236 ioctl c0306201 2000000003c0 returned -14 [ 527.671473][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.683654][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.703534][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.724890][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.782653][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.794961][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.803891][T12232] ldm_validate_partition_table(): Disk read failed. [ 527.815282][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.823972][T12232] Buffer I/O error on dev loop6, logical block 0, async page read [ 527.833820][T12232] Dev loop6: unable to read RDB block 0 [ 527.840479][T12232] loop6: unable to read partition table [ 527.900197][T12232] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 527.987334][ T5929] usb 5-1: USB disconnect, device number 33 [ 527.994253][ T5929] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now disconnected [ 528.036102][T12244] netlink: 'syz.2.1700': attribute type 8 has an invalid length. [ 528.082826][ T10] gspca_ov534_9: reg_w failed -110 [ 528.645800][ T10] gspca_ov534_9: Unknown sensor 0000 [ 528.645893][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 528.666993][ T10] usb 2-1: USB disconnect, device number 71 [ 528.696224][ T5929] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 528.862033][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 528.879040][ T5929] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 528.889789][ T5929] usb 1-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 528.905837][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.920888][ T5929] quatech2 1-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 529.124167][ T5929] usb 1-1: qt2_attach - failed to power on unit: -71 [ 529.135160][ T5929] quatech2 1-1:24.0: probe with driver quatech2 failed with error -71 [ 529.151081][ T5929] usb 1-1: USB disconnect, device number 83 [ 529.159535][T12271] FAULT_INJECTION: forcing a failure. [ 529.159535][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 529.172391][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.3.1707 Not tainted syzkaller #0 PREEMPT(full) [ 529.172423][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 529.172436][T12271] Call Trace: [ 529.172445][T12271] [ 529.172454][T12271] dump_stack_lvl+0x189/0x250 [ 529.172484][T12271] ? __pfx____ratelimit+0x10/0x10 [ 529.172513][T12271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.172538][T12271] ? __pfx__printk+0x10/0x10 [ 529.172573][T12271] ? __pfx___might_resched+0x10/0x10 [ 529.172600][T12271] should_fail_ex+0x414/0x560 [ 529.172629][T12271] should_failslab+0xa8/0x100 [ 529.172660][T12271] __kmalloc_noprof+0xcb/0x7f0 [ 529.172686][T12271] ? copy_splice_read+0x143/0xa50 [ 529.172717][T12271] copy_splice_read+0x143/0xa50 [ 529.172742][T12271] ? __pfx_pipe_to_null+0x10/0x10 [ 529.172761][T12271] ? pipe_unlock+0x56/0x80 [ 529.172783][T12271] ? splice_from_pipe+0x108/0x160 [ 529.172807][T12271] ? __pfx_pipe_to_null+0x10/0x10 [ 529.172822][T12271] ? __pfx_copy_splice_read+0x10/0x10 [ 529.172844][T12271] ? look_up_lock_class+0x74/0x170 [ 529.172878][T12271] ? file_end_write+0xd8/0x250 [ 529.172902][T12271] ? direct_splice_actor+0x10c/0x160 [ 529.172927][T12271] ? __pfx_copy_splice_read+0x10/0x10 [ 529.172949][T12271] splice_direct_to_actor+0x4a6/0xcc0 [ 529.172989][T12271] ? __pfx_direct_splice_actor+0x10/0x10 [ 529.173013][T12271] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 529.173045][T12271] do_splice_direct+0x181/0x270 [ 529.173071][T12271] ? __pfx_do_splice_direct+0x10/0x10 [ 529.173093][T12271] ? common_file_perm+0x1b5/0x230 [ 529.173114][T12271] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 529.173141][T12271] ? bpf_lsm_file_permission+0x9/0x20 [ 529.173158][T12271] ? security_file_permission+0x75/0x290 [ 529.173185][T12271] ? rw_verify_area+0x255/0x4d0 [ 529.173209][T12271] do_sendfile+0x4da/0x7e0 [ 529.173226][T12271] ? __pfx_vfs_write+0x10/0x10 [ 529.173252][T12271] ? __pfx_do_sendfile+0x10/0x10 [ 529.173269][T12271] ? __fget_files+0x3a0/0x420 [ 529.173302][T12271] __se_sys_sendfile64+0x13e/0x190 [ 529.173329][T12271] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 529.173353][T12271] ? rcu_is_watching+0x15/0xb0 [ 529.173377][T12271] ? do_syscall_64+0xbe/0x3b0 [ 529.173400][T12271] do_syscall_64+0xfa/0x3b0 [ 529.173414][T12271] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.173438][T12271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.173455][T12271] ? clear_bhb_loop+0x60/0xb0 [ 529.173476][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.173492][T12271] RIP: 0033:0x7fdae398eec9 [ 529.173507][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.173524][T12271] RSP: 002b:00007fdae48c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 529.173542][T12271] RAX: ffffffffffffffda RBX: 00007fdae3be6180 RCX: 00007fdae398eec9 [ 529.173556][T12271] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 529.173566][T12271] RBP: 00007fdae48c9090 R08: 0000000000000000 R09: 0000000000000000 [ 529.173577][T12271] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000002 [ 529.173588][T12271] R13: 00007fdae3be6218 R14: 00007fdae3be6180 R15: 00007fdae3d0fa28 [ 529.173614][T12271] [ 529.914082][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 531.891493][T12297] input: syz1 as /devices/virtual/input/input47 [ 532.662399][T12313] netlink: 'syz.2.1721': attribute type 10 has an invalid length. [ 532.673130][T12313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1721'. [ 532.682338][ T5929] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 532.692945][T12313] bridge0: port 3(dummy0) entered blocking state [ 532.700273][T12313] bridge0: port 3(dummy0) entered disabled state [ 532.709998][T12313] dummy0: entered allmulticast mode [ 532.718212][T12313] dummy0: entered promiscuous mode [ 532.726673][T12313] bridge0: port 3(dummy0) entered blocking state [ 532.733241][T12313] bridge0: port 3(dummy0) entered forwarding state [ 532.838128][ T5929] usb 2-1: no configurations [ 532.843207][ T5929] usb 2-1: can't read configurations, error -22 [ 532.859372][T12320] macvtap1: entered promiscuous mode [ 532.864799][T12320] macvtap1: entered allmulticast mode [ 532.870295][T12320] veth1_vlan: entered allmulticast mode [ 533.105480][ T5929] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 533.206028][T12331] tipc: Enabled bearer , priority 0 [ 533.262095][ T5929] usb 2-1: no configurations [ 533.266811][ T5929] usb 2-1: can't read configurations, error -22 [ 533.273344][ T5929] usb usb2-port1: attempt power cycle [ 533.333576][T12329] tipc: Disabling bearer [ 533.635864][ T5929] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 533.654384][T12338] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1726'. [ 533.672834][T12314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.789262][ T5929] usb 2-1: no configurations [ 533.793976][ T5929] usb 2-1: can't read configurations, error -22 [ 533.948435][ T5929] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 533.977333][ T5929] usb 2-1: no configurations [ 533.981962][ T5929] usb 2-1: can't read configurations, error -22 [ 533.988830][ T5929] usb usb2-port1: unable to enumerate USB device [ 537.286630][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 538.650357][T12403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1747'. [ 539.495832][ T5929] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 539.659398][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.747262][ T5929] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 539.831044][ T5929] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 539.885308][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.923094][ T5929] usb 3-1: config 0 descriptor?? [ 540.073511][T12420] syz_tun: entered allmulticast mode [ 540.130323][T12420] pimreg: entered allmulticast mode [ 540.137052][T12419] syz_tun: left allmulticast mode [ 541.049540][T12435] macvtap0: entered allmulticast mode [ 541.057552][T12435] veth0_macvtap: entered allmulticast mode [ 541.523775][ T43] usb 3-1: USB disconnect, device number 60 [ 541.529854][ T5896] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 541.760681][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.924400][ T5896] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 541.961179][ T5896] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 541.986023][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.083966][ T5896] usb 1-1: config 0 descriptor?? [ 542.473519][ T5929] usb 1-1: USB disconnect, device number 84 [ 543.248820][T12457] netlink: 'syz.3.1758': attribute type 15 has an invalid length. [ 543.257380][T12457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1758'. [ 543.306169][ T5929] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 543.602580][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 543.692341][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.711833][ T5929] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 543.727190][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.756900][ T5929] usb 5-1: config 0 descriptor?? [ 543.789488][ T5929] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 544.595935][ T43] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 544.762282][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 544.768969][ T43] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 544.779779][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.826585][T12475] FAULT_INJECTION: forcing a failure. [ 544.826585][T12475] name failslab, interval 1, probability 0, space 0, times 0 [ 544.860126][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.869581][T12475] CPU: 0 UID: 0 PID: 12475 Comm: syz.1.1764 Not tainted syzkaller #0 PREEMPT(full) [ 544.869612][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 544.869624][T12475] Call Trace: [ 544.869631][T12475] [ 544.869640][T12475] dump_stack_lvl+0x189/0x250 [ 544.869670][T12475] ? __pfx____ratelimit+0x10/0x10 [ 544.869698][T12475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.869721][T12475] ? __pfx__printk+0x10/0x10 [ 544.869754][T12475] ? __pfx___might_resched+0x10/0x10 [ 544.869780][T12475] should_fail_ex+0x414/0x560 [ 544.869810][T12475] should_failslab+0xa8/0x100 [ 544.869846][T12475] kmem_cache_alloc_node_noprof+0x77/0x710 [ 544.869873][T12475] ? __alloc_skb+0x112/0x2d0 [ 544.869898][T12475] __alloc_skb+0x112/0x2d0 [ 544.869921][T12475] netlink_ack+0x146/0xa50 [ 544.869968][T12475] netlink_rcv_skb+0x28c/0x470 [ 544.869996][T12475] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.870024][T12475] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 544.870060][T12475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.870101][T12475] ? bpf_lsm_capable+0x9/0x20 [ 544.870123][T12475] ? security_capable+0x7e/0x2e0 [ 544.870152][T12475] nfnetlink_rcv+0x282/0x2590 [ 544.870182][T12475] ? __dev_queue_xmit+0x27b/0x3b50 [ 544.870207][T12475] ? __dev_queue_xmit+0x1d79/0x3b50 [ 544.870228][T12475] ? kasan_save_track+0x3e/0x80 [ 544.870251][T12475] ? __kasan_slab_alloc+0x6c/0x80 [ 544.870285][T12475] ? __dev_queue_xmit+0x27b/0x3b50 [ 544.870318][T12475] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 544.870342][T12475] ? __pfx___dev_queue_xmit+0x10/0x10 [ 544.870376][T12475] ? ref_tracker_free+0x63a/0x7d0 [ 544.870403][T12475] ? __asan_memcpy+0x40/0x70 [ 544.870425][T12475] ? __pfx_ref_tracker_free+0x10/0x10 [ 544.870449][T12475] ? __skb_clone+0x63/0x7a0 [ 544.870475][T12475] ? __skb_clone+0x483/0x7a0 [ 544.870503][T12475] ? skb_clone+0x246/0x3a0 [ 544.870529][T12475] ? __netlink_deliver_tap+0x807/0x850 [ 544.870548][T12475] ? netlink_deliver_tap+0x2e/0x1b0 [ 544.870574][T12475] ? netlink_deliver_tap+0x2e/0x1b0 [ 544.870600][T12475] netlink_unicast+0x82f/0x9e0 [ 544.870637][T12475] ? __pfx_netlink_unicast+0x10/0x10 [ 544.870667][T12475] ? netlink_sendmsg+0x642/0xb30 [ 544.870684][T12475] ? skb_put+0x11b/0x210 [ 544.870706][T12475] netlink_sendmsg+0x805/0xb30 [ 544.870734][T12475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.870757][T12475] ? aa_sock_msg_perm+0xf1/0x1d0 [ 544.870782][T12475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.870817][T12475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.870838][T12475] __sock_sendmsg+0x21c/0x270 [ 544.870867][T12475] ____sys_sendmsg+0x505/0x830 [ 544.870896][T12475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.870928][T12475] ? import_iovec+0x74/0xa0 [ 544.870953][T12475] ___sys_sendmsg+0x21f/0x2a0 [ 544.870978][T12475] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.871043][T12475] ? __fget_files+0x2a/0x420 [ 544.871071][T12475] ? __fget_files+0x3a0/0x420 [ 544.871109][T12475] __x64_sys_sendmsg+0x19b/0x260 [ 544.871138][T12475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.871170][T12475] ? __pfx_ksys_write+0x10/0x10 [ 544.871193][T12475] ? rcu_is_watching+0x15/0xb0 [ 544.871221][T12475] ? do_syscall_64+0xbe/0x3b0 [ 544.871244][T12475] do_syscall_64+0xfa/0x3b0 [ 544.871260][T12475] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.871288][T12475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.871308][T12475] ? clear_bhb_loop+0x60/0xb0 [ 544.871330][T12475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.871350][T12475] RIP: 0033:0x7f504558eec9 [ 544.871367][T12475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.871385][T12475] RSP: 002b:00007f50437f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.871406][T12475] RAX: ffffffffffffffda RBX: 00007f50457e6090 RCX: 00007f504558eec9 [ 544.871422][T12475] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000007 [ 544.871435][T12475] RBP: 00007f50437f6090 R08: 0000000000000000 R09: 0000000000000000 [ 544.871449][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.871461][T12475] R13: 00007f50457e6128 R14: 00007f50457e6090 R15: 00007f504590fa28 [ 544.871492][T12475] [ 545.280087][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.338621][ T43] usbtmc 1-1:16.0: bulk endpoints not found [ 545.806609][ T5929] gspca_vc032x: reg_w err -110 [ 545.811559][ T5929] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 546.121206][T12487] gtp0: entered promiscuous mode [ 546.125860][ T43] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 546.251417][ T5929] usb 5-1: USB disconnect, device number 34 [ 546.275838][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 546.282418][ T43] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 546.291085][ T43] usb 2-1: config 0 has no interface number 0 [ 546.297280][ T43] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 546.308209][ T43] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 546.321379][ T43] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 546.332993][ T43] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 546.346421][ T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 546.355549][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.366628][ T43] usb 2-1: config 0 descriptor?? [ 546.378274][ T43] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 547.180179][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 547.180196][ T30] audit: type=1326 audit(1759638121.850:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 547.211885][ T30] audit: type=1326 audit(1759638121.850:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 547.234156][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.242342][ T30] audit: type=1326 audit(1759638121.850:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 547.264848][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.271861][ T30] audit: type=1326 audit(1759638121.850:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 547.294444][ T30] audit: type=1326 audit(1759638121.850:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 547.316840][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.325469][ T30] audit: type=1326 audit(1759638121.850:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 547.602191][ T43] usb 1-1: USB disconnect, device number 85 [ 547.956265][T12522] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 548.122192][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 548.350524][T12529] netlink: 'syz.2.1782': attribute type 2 has an invalid length. [ 548.465892][ T43] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 548.630311][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.642032][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.684641][ T43] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 548.705593][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.738806][ T43] usb 1-1: config 0 descriptor?? [ 548.966402][ T5929] usb 2-1: USB disconnect, device number 76 [ 548.979382][ T5929] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 549.019954][T12527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.042688][T12527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.111989][ T43] usb 1-1: USB disconnect, device number 86 [ 549.824619][T12547] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 549.855984][ T30] audit: type=1326 audit(1759638124.520:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 549.975867][ T30] audit: type=1326 audit(1759638124.530:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 549.998239][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.050607][ T30] audit: type=1326 audit(1759638124.530:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 550.106589][ T30] audit: type=1326 audit(1759638124.530:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 550.408370][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 551.161632][T12574] fuse: Bad value for 'fd' [ 551.750583][T12586] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 551.882826][T12586] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1800'. [ 552.285859][ T5929] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 552.465821][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 552.483267][ T5929] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.493603][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.535074][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 552.565434][ T5929] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 552.609956][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.619523][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 552.649600][ T5929] usb 3-1: SerialNumber: syz [ 552.676028][ T43] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 552.686553][ T5929] hub 3-1:1.0: bad descriptor, ignoring hub [ 552.712658][ T5929] hub 3-1:1.0: probe with driver hub failed with error -5 [ 552.733625][ T5929] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 552.979002][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1804'. [ 553.006589][T12596] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 553.086699][ T43] usb 1-1: config 0 has no interfaces? [ 553.157284][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 553.166514][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.174516][ T43] usb 1-1: Product: syz [ 553.180224][ T43] usb 1-1: Manufacturer: syz [ 553.184848][ T43] usb 1-1: SerialNumber: syz [ 553.193450][ T43] usb 1-1: config 0 descriptor?? [ 553.537126][T12604] netlink: 'syz.1.1806': attribute type 3 has an invalid length. [ 553.545847][T12604] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1806'. [ 554.318234][T12613] fuse: Bad value for 'fd' [ 555.093694][ T43] usb 1-1: USB disconnect, device number 87 [ 555.170429][T12627] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 555.198291][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.288110][ T5929] usb 3-1: USB disconnect, device number 61 [ 555.369388][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 555.436483][ T43] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 555.535884][ T5929] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 555.535883][ T5896] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 555.587863][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.599161][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.611652][ T43] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 555.628728][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.643637][ T43] usb 1-1: config 0 descriptor?? [ 555.689146][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 555.697772][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.711853][ T5896] usb 2-1: config 0 has no interfaces? [ 555.715857][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 555.718042][ T5896] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 555.754571][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.765677][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.776788][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.778717][ T5896] usb 2-1: config 0 descriptor?? [ 555.796298][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.805458][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.814093][ T5929] usb 4-1: Product: syz [ 555.818888][ T5929] usb 4-1: Manufacturer: syz [ 555.823565][ T5929] usb 4-1: SerialNumber: syz [ 556.067138][ T43] hid_parser_main: 54 callbacks suppressed [ 556.067155][ T43] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 556.089950][ T43] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 556.113879][ T43] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 556.124026][ T43] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 556.139471][ T43] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 556.155315][ T43] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 556.209365][T12653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.290048][T12653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.296795][ T43] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 556.389188][T12653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.397918][T12653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.482939][ T43] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 556.560365][ T43] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x00 [ 556.824753][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 557.098863][T12625] cp2112 0003:10C4:EA90.0013: Error starting transaction: -38 [ 557.108449][ T43] cp2112 0003:10C4:EA90.0013: error reading lock byte: -71 [ 557.202352][ T43] usb 1-1: USB disconnect, device number 88 [ 557.811464][T12657] team0: Device gtp1 is of different type [ 558.326151][ T43] usb 2-1: USB disconnect, device number 77 [ 558.583588][ T5929] usb 4-1: 0:2 : does not exist [ 558.876342][ T5929] usb 4-1: USB disconnect, device number 78 [ 558.898610][T12691] FAULT_INJECTION: forcing a failure. [ 558.898610][T12691] name failslab, interval 1, probability 0, space 0, times 0 [ 559.202225][T12691] CPU: 0 UID: 0 PID: 12691 Comm: syz.3.1825 Not tainted syzkaller #0 PREEMPT(full) [ 559.202251][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 559.202263][T12691] Call Trace: [ 559.202271][T12691] [ 559.202279][T12691] dump_stack_lvl+0x189/0x250 [ 559.202307][T12691] ? __pfx____ratelimit+0x10/0x10 [ 559.202334][T12691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.202356][T12691] ? __pfx__printk+0x10/0x10 [ 559.202388][T12691] ? __pfx___might_resched+0x10/0x10 [ 559.202410][T12691] ? fs_reclaim_acquire+0x7d/0x100 [ 559.202442][T12691] should_fail_ex+0x414/0x560 [ 559.202471][T12691] should_failslab+0xa8/0x100 [ 559.202511][T12691] __kmalloc_cache_noprof+0x6f/0x6f0 [ 559.202536][T12691] ? rcu_is_watching+0x15/0xb0 [ 559.202556][T12691] ? snd_virmidi_input_open+0xb4/0x440 [ 559.202578][T12691] ? trace_kmalloc+0x1f/0xd0 [ 559.202603][T12691] snd_virmidi_input_open+0xb4/0x440 [ 559.202629][T12691] open_substream+0x3f7/0x7b0 [ 559.202664][T12691] rawmidi_open_priv+0x94/0x660 [ 559.202694][T12691] snd_rawmidi_open+0x44f/0xae0 [ 559.202732][T12691] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 559.202759][T12691] ? __pfx_default_wake_function+0x10/0x10 [ 559.202795][T12691] ? snd_open+0x2f7/0x390 [ 559.202822][T12691] chrdev_open+0x4c9/0x5e0 [ 559.202854][T12691] ? __pfx_chrdev_open+0x10/0x10 [ 559.202886][T12691] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 559.202922][T12691] ? __pfx_chrdev_open+0x10/0x10 [ 559.202949][T12691] do_dentry_open+0x950/0x13f0 [ 559.202983][T12691] vfs_open+0x3b/0x340 [ 559.203000][T12691] ? path_openat+0x2ecd/0x3830 [ 559.203026][T12691] path_openat+0x2ee5/0x3830 [ 559.203085][T12691] ? __pfx_path_openat+0x10/0x10 [ 559.203129][T12691] do_filp_open+0x1fa/0x410 [ 559.203151][T12691] ? __lock_acquire+0xab9/0xd20 [ 559.203173][T12691] ? __pfx_do_filp_open+0x10/0x10 [ 559.203217][T12691] ? _raw_spin_unlock+0x28/0x50 [ 559.203242][T12691] ? alloc_fd+0x64c/0x6c0 [ 559.203284][T12691] do_sys_openat2+0x121/0x1c0 [ 559.203309][T12691] ? __pfx_do_sys_openat2+0x10/0x10 [ 559.203331][T12691] ? ksys_write+0x22a/0x250 [ 559.203359][T12691] ? __pfx_ksys_write+0x10/0x10 [ 559.203382][T12691] ? rcu_is_watching+0x15/0xb0 [ 559.203408][T12691] __x64_sys_openat+0x138/0x170 [ 559.203435][T12691] do_syscall_64+0xfa/0x3b0 [ 559.203452][T12691] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.203480][T12691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.203506][T12691] ? clear_bhb_loop+0x60/0xb0 [ 559.203531][T12691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.203550][T12691] RIP: 0033:0x7fdae398d710 [ 559.203568][T12691] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 559.203588][T12691] RSP: 002b:00007fdae490ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 559.203610][T12691] RAX: ffffffffffffffda RBX: 0000000000004e02 RCX: 00007fdae398d710 [ 559.203625][T12691] RDX: 0000000000004e02 RSI: 00007fdae490ac10 RDI: 00000000ffffff9c [ 559.203640][T12691] RBP: 00007fdae490ac10 R08: 0000000000000000 R09: 0000000000000000 [ 559.203653][T12691] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 559.203667][T12691] R13: 00007fdae3be6038 R14: 00007fdae3be5fa0 R15: 00007fdae3d0fa28 [ 559.203699][T12691] [ 559.225934][ T43] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 559.698025][ T43] usb 2-1: config 0 has no interfaces? [ 559.706220][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 559.718799][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.894975][ T43] usb 2-1: Product: syz [ 559.915251][ T43] usb 2-1: Manufacturer: syz [ 559.935862][ T5896] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 559.955278][ T43] usb 2-1: SerialNumber: syz [ 560.111656][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 560.172816][ T5896] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 560.254944][ T43] usb 2-1: config 0 descriptor?? [ 560.282770][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 560.292936][ T5896] usb 4-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 560.305215][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.381801][ T5896] usb 4-1: config 0 descriptor?? [ 560.602797][T12695] tipc: Cannot configure node identity twice [ 561.117097][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 561.124213][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 561.139903][ T5896] usb 4-1: USB disconnect, device number 79 [ 561.395940][ T5929] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 561.556926][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 561.566654][ T5929] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 561.791995][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.803901][ T5929] usb 1-1: Product: syz [ 561.808286][ T5929] usb 1-1: Manufacturer: syz [ 561.812962][ T5929] usb 1-1: SerialNumber: syz [ 561.839449][ T5896] usb 2-1: USB disconnect, device number 78 [ 561.861634][ T5929] usb 1-1: config 0 descriptor?? [ 561.870817][ T5929] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 562.396700][ T5929] gspca_ov534_9: reg_w failed -110 [ 562.413659][T12721] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1833'. [ 562.438917][T12721] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1833'. [ 562.786077][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 562.926543][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.933018][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.016415][ T5929] gspca_ov534_9: Unknown sensor 0000 [ 563.016479][ T5929] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 563.036116][ T5896] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 563.040783][ T5929] usb 1-1: USB disconnect, device number 89 [ 563.106709][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 563.118084][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.128498][ T10] usb 4-1: config 0 descriptor?? [ 563.142245][ T10] cp210x 4-1:0.0: cp210x converter detected [ 563.237096][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 563.245603][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.272635][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.282813][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 563.291974][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.363681][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 563.363821][ T5896] usb 3-1: config 0 descriptor?? [ 563.371464][ T10] cp210x 4-1:0.0: querying part number failed [ 563.456635][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 563.466676][ T5896] hub 3-1:0.0: USB hub found [ 563.468378][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 563.765048][ T5896] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 563.995434][T12737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.007383][T12737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.085382][ T5896] hid-generic 0003:046D:C31C.0014: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 564.298442][ T10] usb 3-1: USB disconnect, device number 62 [ 564.745947][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 564.905815][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 564.912696][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.930628][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.942553][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 564.957619][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 564.968442][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.985029][ T10] usb 1-1: config 0 descriptor?? [ 565.116907][ T5929] usb 4-1: USB disconnect, device number 80 [ 565.127009][ T5929] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 565.185085][ T5929] cp210x 4-1:0.0: device disconnected [ 565.410924][ T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0015/input/input48 [ 565.480526][T12762] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 565.488600][T12762] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 565.527588][ T5896] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 565.542253][ T10] appleir 0003:05AC:8241.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 565.644017][ T10] usb 1-1: USB disconnect, device number 90 [ 565.739767][T12766] fido_id[12766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 565.848885][ T5896] usb 2-1: config 0 has no interfaces? [ 565.858007][ T5896] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 565.867661][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.876274][ T5896] usb 2-1: Product: syz [ 565.880641][ T5896] usb 2-1: Manufacturer: syz [ 565.885265][ T5896] usb 2-1: SerialNumber: syz [ 565.895545][ T5896] usb 2-1: config 0 descriptor?? [ 566.935913][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 567.066591][ T10] usb 4-1: device descriptor read/64, error -71 [ 567.305860][ T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 567.456819][ T10] usb 4-1: device descriptor read/64, error -71 [ 567.580219][ T10] usb usb4-port1: attempt power cycle [ 567.935882][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 567.976631][ T10] usb 4-1: device descriptor read/8, error -71 [ 567.985607][ T43] usb 2-1: USB disconnect, device number 79 [ 568.225887][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 568.316598][ T10] usb 4-1: device descriptor read/8, error -71 [ 568.387009][T12797] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1853'. [ 568.496632][ T10] usb usb4-port1: unable to enumerate USB device [ 568.817356][T12800] syz.0.1854 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 569.115989][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 569.231001][T12808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.267644][ T10] usb 1-1: config 10 has an invalid interface number: 234 but max is 0 [ 569.277816][ T10] usb 1-1: config 10 has no interface number 0 [ 569.284039][ T10] usb 1-1: config 10 interface 234 has no altsetting 0 [ 569.293344][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=25.db [ 569.305368][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.313615][ T10] usb 1-1: Product: syz [ 569.317806][ T10] usb 1-1: Manufacturer: syz [ 569.322379][ T10] usb 1-1: SerialNumber: syz [ 569.556692][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251 [ 569.570857][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 569.580061][ T10] gspca_sn9c20x: Device initialization failed [ 569.587426][ T10] gspca_sn9c20x 1-1:10.234: probe with driver gspca_sn9c20x failed with error -71 [ 569.598811][ T10] usb 1-1: USB disconnect, device number 91 [ 570.046006][T12817] netlink: 'syz.4.1859': attribute type 4 has an invalid length. [ 570.089648][T12819] netlink: 'syz.4.1860': attribute type 5 has an invalid length. [ 570.097148][ T5929] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 570.105974][T12819] ip6erspan0: entered promiscuous mode [ 570.258025][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 570.264865][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.275965][ T5929] usb 4-1: config 0 has no interfaces? [ 570.281466][ T5929] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 570.290702][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.301612][ T5929] usb 4-1: config 0 descriptor?? [ 570.445974][ T5896] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 570.566284][T12828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.589271][T12828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.595953][ T5896] usb 1-1: Invalid ep0 maxpacket: 9 [ 570.622760][T12828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.638100][T12828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.775929][ T5896] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 570.897696][ T5929] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 570.925826][ T5896] usb 1-1: Invalid ep0 maxpacket: 9 [ 570.931515][ T5896] usb usb1-port1: attempt power cycle [ 571.086050][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 571.101241][ T5929] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 571.115104][ T5929] usb 3-1: config 0 has no interface number 0 [ 571.121713][ T5929] usb 3-1: config 0 interface 89 has no altsetting 0 [ 571.174604][ T5929] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 571.184882][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.194778][ T5929] usb 3-1: Product: syz [ 571.200366][ T5929] usb 3-1: Manufacturer: syz [ 571.205047][ T5929] usb 3-1: SerialNumber: syz [ 571.217358][ T5929] usb 3-1: config 0 descriptor?? [ 571.231819][ T5929] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 571.252574][ T5929] em28xx 3-1:0.89: Video interface 89 found: bulk [ 571.325973][ T5896] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 571.365629][ T5896] usb 1-1: Invalid ep0 maxpacket: 9 [ 571.527945][ T5896] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 571.557621][ T5896] usb 1-1: Invalid ep0 maxpacket: 9 [ 571.563384][ T5896] usb usb1-port1: unable to enumerate USB device [ 571.833681][ T5929] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 572.520768][ T5929] em28xx 3-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 572.615827][ T5929] em28xx 3-1:0.89: board has no eeprom [ 573.295911][ T5929] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 573.303569][ T5929] em28xx 3-1:0.89: analog set to bulk mode. [ 573.304007][ T5896] usb 4-1: USB disconnect, device number 85 [ 573.343500][ T10] em28xx 3-1:0.89: Registering V4L2 extension [ 573.415882][T12848] em28xx 3-1:0.89: reading from i2c device at 0x0 failed (error=-5) [ 573.416361][ T43] usb 3-1: USB disconnect, device number 63 [ 573.442393][ T43] em28xx 3-1:0.89: Disconnecting em28xx [ 573.549501][ T10] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 573.585830][ T10] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 573.596161][ T10] em28xx 3-1:0.89: No AC97 audio processor [ 573.617313][ T10] usb 3-1: Decoder not found [ 573.626767][ T10] em28xx 3-1:0.89: failed to create media graph [ 573.633124][ T10] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 573.658359][ T10] em28xx 3-1:0.89: Registering snapshot button... [ 573.684178][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input49 [ 573.718694][ T10] em28xx 3-1:0.89: Remote control support is not available for this card. [ 573.745910][ T43] em28xx 3-1:0.89: Closing input extension [ 573.759157][ T43] em28xx 3-1:0.89: Deregistering snapshot button [ 574.005190][T12865] team_slave_0: entered promiscuous mode [ 574.010907][T12865] team_slave_1: entered promiscuous mode [ 574.021351][T12865] vlan2: entered promiscuous mode [ 574.029145][T12865] team0: entered promiscuous mode [ 574.953815][ T43] em28xx 3-1:0.89: Freeing device [ 575.051307][T12874] fuse: Invalid rootmode [ 575.306135][ T5896] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 575.465902][ T5896] usb 2-1: device descriptor read/64, error -71 [ 575.785888][ T5896] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 575.946666][ T5896] usb 2-1: device descriptor read/64, error -71 [ 576.104170][ T5896] usb usb2-port1: attempt power cycle [ 576.445879][ T5896] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 576.466764][ T5896] usb 2-1: device descriptor read/8, error -71 [ 576.715864][ T5896] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 576.776568][ T5896] usb 2-1: device descriptor read/8, error -71 [ 576.896289][ T5896] usb usb2-port1: unable to enumerate USB device [ 577.465878][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 577.472082][T12883] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 578.106076][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 578.290375][T12883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 578.296989][T12883] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 578.307638][T12883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 578.313857][T12883] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 578.500062][T12928] fuse: Invalid rootmode [ 579.426074][ T43] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 579.524626][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 579.524644][ T30] audit: type=1326 audit(1759638154.190:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 579.556563][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 579.576004][ T43] usb 4-1: device descriptor read/64, error -71 [ 579.643863][ T30] audit: type=1326 audit(1759638154.220:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 579.684566][T12955] FAULT_INJECTION: forcing a failure. [ 579.684566][T12955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.697842][T12955] CPU: 0 UID: 0 PID: 12955 Comm: syz.2.1898 Not tainted syzkaller #0 PREEMPT(full) [ 579.697859][T12955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 579.697866][T12955] Call Trace: [ 579.697872][T12955] [ 579.697877][T12955] dump_stack_lvl+0x189/0x250 [ 579.697896][T12955] ? __pfx____ratelimit+0x10/0x10 [ 579.697912][T12955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.697925][T12955] ? __pfx__printk+0x10/0x10 [ 579.697941][T12955] ? __might_fault+0xb0/0x130 [ 579.697961][T12955] should_fail_ex+0x414/0x560 [ 579.697995][T12955] _copy_from_user+0x2d/0xb0 [ 579.698007][T12955] ___sys_sendmsg+0x158/0x2a0 [ 579.698022][T12955] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.698052][T12955] ? __fget_files+0x2a/0x420 [ 579.698068][T12955] ? __fget_files+0x3a0/0x420 [ 579.698089][T12955] __x64_sys_sendmsg+0x19b/0x260 [ 579.698103][T12955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.698119][T12955] ? __pfx_ksys_write+0x10/0x10 [ 579.698132][T12955] ? rcu_is_watching+0x15/0xb0 [ 579.698148][T12955] ? do_syscall_64+0xbe/0x3b0 [ 579.698166][T12955] do_syscall_64+0xfa/0x3b0 [ 579.698175][T12955] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.698191][T12955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.698201][T12955] ? clear_bhb_loop+0x60/0xb0 [ 579.698215][T12955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.698225][T12955] RIP: 0033:0x7fe25978eec9 [ 579.698237][T12955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.698247][T12955] RSP: 002b:00007fe2579f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.698260][T12955] RAX: ffffffffffffffda RBX: 00007fe2599e5fa0 RCX: 00007fe25978eec9 [ 579.698268][T12955] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000004 [ 579.698275][T12955] RBP: 00007fe2579f6090 R08: 0000000000000000 R09: 0000000000000000 [ 579.698283][T12955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.698289][T12955] R13: 00007fe2599e6038 R14: 00007fe2599e5fa0 R15: 00007fe259b0fa28 [ 579.698306][T12955] [ 579.965981][ T30] audit: type=1326 audit(1759638154.220:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 579.991547][ T30] audit: type=1326 audit(1759638154.220:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 580.041861][ T30] audit: type=1326 audit(1759638154.220:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 580.064728][ T30] audit: type=1326 audit(1759638154.220:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 580.088416][ T30] audit: type=1326 audit(1759638154.230:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 580.111717][ T30] audit: type=1326 audit(1759638154.230:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 580.136879][ T30] audit: type=1326 audit(1759638154.230:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 580.145904][ T43] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 580.159777][ T30] audit: type=1326 audit(1759638154.230:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fc3c538eec9 code=0x7ffc0000 [ 580.346015][ T43] usb 4-1: device descriptor read/64, error -71 [ 580.347745][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 580.365985][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 580.366294][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 580.456163][ T43] usb usb4-port1: attempt power cycle [ 580.487591][T12963] tipc: Enabled bearer , priority 0 [ 580.510686][T12963] tipc: Disabling bearer [ 580.520731][T12976] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 580.607726][T12983] netlink: 'syz.2.1905': attribute type 10 has an invalid length. [ 580.691855][T12983] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 580.727769][T12983] team0: Port device netdevsim0 added [ 580.795912][ T43] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 580.840025][ T43] usb 4-1: device descriptor read/8, error -71 [ 581.075936][ T43] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 581.114071][ T43] usb 4-1: device descriptor read/8, error -71 [ 581.239962][ T43] usb usb4-port1: unable to enumerate USB device [ 582.480584][ T5929] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 582.686191][T13016] fuse: Bad value for 'fd' [ 582.718958][ T5929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 582.728651][ T5929] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 582.781763][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'. [ 582.790742][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 582.798401][ T5929] usb 1-1: can't read configurations, error -71 [ 582.827739][ T982] IPVS: starting estimator thread 0... [ 582.939267][T13020] IPVS: using max 23 ests per chain, 55200 per kthread [ 582.967601][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.986309][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.026945][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.066269][ T10] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 583.075509][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.098183][ T10] usb 4-1: config 0 descriptor?? [ 583.518373][T13037] binder: BINDER_SET_CONTEXT_MGR already set [ 583.524469][T13037] binder: 13031:13037 ioctl 4018620d 200000000040 returned -16 [ 583.580169][ T10] hid-udraw 0003:20D6:CB17.0016: unbalanced collection at end of report description [ 583.598810][ T10] hid-udraw 0003:20D6:CB17.0016: parse failed [ 583.618611][ T10] hid-udraw 0003:20D6:CB17.0016: probe with driver hid-udraw failed with error -22 [ 583.805327][ T10] usb 4-1: USB disconnect, device number 90 [ 584.255875][ T5896] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 584.395857][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 584.419127][ T5896] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 584.427339][ T5896] usb 2-1: config 0 has no interface number 0 [ 584.433432][ T5896] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 584.446416][ T5896] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 584.465928][ T5896] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 584.475190][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.496844][ T5896] usb 2-1: config 0 descriptor?? [ 584.503932][T13048] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 584.528235][ T5896] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 584.547417][ T10] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 584.555450][ T10] usb 3-1: config 0 has no interface number 0 [ 584.586461][ T1606] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 584.594261][ T43] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 584.616098][ T10] usb 3-1: config 0 interface 5 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 584.635848][ T10] usb 3-1: config 0 interface 5 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 584.696291][ T10] usb 3-1: config 0 interface 5 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 584.715851][ T10] usb 3-1: config 0 interface 5 has no altsetting 0 [ 584.731211][ T5896] usb 2-1: USB disconnect, device number 84 [ 584.737992][ T10] usb 3-1: New USB device found, idVendor=12d1, idProduct=1429, bcdDevice= 0.00 [ 584.748174][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.748868][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 584.766899][ T10] usb 3-1: Product: syz [ 584.778446][ T1606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.779510][ T10] usb 3-1: Manufacturer: syz [ 584.793038][ T1606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.810063][ T1606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.820818][ T10] usb 3-1: SerialNumber: syz [ 584.829356][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.841376][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.848443][ T10] usb 3-1: config 0 descriptor?? [ 584.851573][ T1606] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.879973][ T43] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 584.889871][ T1606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.898434][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.910595][ T1606] usb 4-1: config 0 descriptor?? [ 584.926724][ T43] usb 5-1: config 0 descriptor?? [ 585.082982][ T10] usb-storage 3-1:0.5: USB Mass Storage device detected [ 585.158149][ T10] usb 3-1: USB disconnect, device number 64 [ 585.350509][ T43] usbhid 5-1:0.0: can't add hid device: -32 [ 585.356837][ T1606] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 585.369584][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 585.406073][ T1606] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 585.440064][T13070] netlink: 'syz.1.1932': attribute type 2 has an invalid length. [ 585.994472][ T10] usb 4-1: USB disconnect, device number 91 [ 586.141490][T13076] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1933'. [ 586.183020][ T5929] usb 5-1: USB disconnect, device number 35 [ 587.134484][T13101] fuse: Unknown parameter 'use00000000000000000000' [ 587.191729][T13107] tipc: Enabled bearer , priority 0 [ 587.201362][T13107] syzkaller0: entered promiscuous mode [ 587.207041][T13107] syzkaller0: entered allmulticast mode [ 587.627182][T13111] tipc: Resetting bearer [ 587.672435][T13105] tipc: Resetting bearer [ 587.708258][T13105] tipc: Disabling bearer [ 588.097271][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 588.213180][T13117] delete_channel: no stack [ 588.235987][ T10] usb 5-1: device descriptor read/64, error -71 [ 588.242395][ T5929] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 588.395890][ T5929] usb 3-1: device descriptor read/64, error -71 [ 588.506647][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 588.591995][T13137] input: syz1 as /devices/virtual/input/input52 [ 588.657267][ T5929] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 588.669562][ T10] usb 5-1: device descriptor read/64, error -71 [ 588.779677][T13141] dvmrp0: left allmulticast mode [ 588.784821][T13141] pimreg: left allmulticast mode [ 588.928604][ T10] usb usb5-port1: attempt power cycle [ 588.986711][ T5929] usb 3-1: device descriptor read/64, error -71 [ 589.106169][ T5929] usb usb3-port1: attempt power cycle [ 589.286117][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 589.307284][ T10] usb 5-1: device descriptor read/8, error -71 [ 589.445866][ T5929] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 589.467070][ T5929] usb 3-1: device descriptor read/8, error -71 [ 589.555865][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 589.590445][ T10] usb 5-1: device descriptor read/8, error -71 [ 589.706186][ T10] usb usb5-port1: unable to enumerate USB device [ 589.745866][ T5929] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 589.750845][T13153] fuse: Unknown parameter 'use00000000000000000000' [ 589.788317][ T5929] usb 3-1: device descriptor read/8, error -71 [ 589.896437][ T5929] usb usb3-port1: unable to enumerate USB device [ 590.333038][T13163] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1958'. [ 592.640343][T13190] Invalid logical block size (65279) [ 592.732375][T13193] fuse: Unknown parameter 'use00000000000000000000' [ 592.749676][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1969'. [ 592.858398][T13201] kernel profiling enabled (shift: 17) [ 592.867219][T13201] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 592.875113][T13201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1966'. [ 593.695862][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 593.960751][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 593.983455][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 593.998884][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.017735][ T10] usb 3-1: Product: syz [ 594.043569][ T10] usb 3-1: Manufacturer: syz [ 594.050025][ T10] usb 3-1: SerialNumber: syz [ 594.062961][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 594.069491][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 594.075985][ T1606] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 594.225899][ T1606] usb 5-1: Using ep0 maxpacket: 16 [ 594.456567][ T1606] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 594.470402][ T1606] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 594.479735][ T1606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.501205][ T1606] usb 5-1: config 0 descriptor?? [ 594.621116][ T1606] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input53 [ 594.808292][ T5195] bcm5974 5-1:0.0: could not read from device [ 594.814986][ T5195] bcm5974 5-1:0.0: could not read from device [ 594.835666][ T5195] bcm5974 5-1:0.0: could not read from device [ 594.850136][ T5195] bcm5974 5-1:0.0: could not read from device [ 594.953678][T13235] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1979'. [ 594.962794][T13235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1979'. [ 594.971824][T13235] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1979'. [ 594.990296][T13235] netlink: 'syz.0.1979': attribute type 2 has an invalid length. [ 594.990371][ T5195] bcm5974 5-1:0.0: could not read from device [ 595.028697][ T1606] usb 5-1: USB disconnect, device number 40 [ 595.045896][T13235] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1979'. [ 595.489980][T13250] fuse: Unknown parameter 'user_i00000000000000000000' [ 595.615871][ T43] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 595.714419][T13258] fuse: Unknown parameter 'use00000000000000000000' [ 595.765848][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 595.773004][ T43] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 595.781703][ T43] usb 2-1: config 4 has no interface number 0 [ 595.788085][ T43] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.795848][ T10] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 595.799738][ T43] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.817299][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 595.826664][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.838565][ T43] hub 2-1:4.128: USB hub found [ 595.958467][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.973594][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.006179][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.015712][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.032855][ T10] usb 1-1: Product: syz [ 596.038646][ T43] hub 2-1:4.128: 2 ports detected [ 596.043802][ T43] hub 2-1:4.128: Using single TT (err -22) [ 596.057558][ T10] usb 1-1: Manufacturer: syz [ 596.070739][ T10] usb 1-1: SerialNumber: syz [ 596.295047][T13254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.305600][T13254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.323041][T13269] loop9: detected capacity change from 0 to 7 [ 596.331628][ T1606] usb 1-1: USB disconnect, device number 98 [ 596.351273][T13269] Dev loop9: unable to read RDB block 7 [ 596.369105][T13269] loop9: AHDI p3 p4 [ 596.386072][T13269] loop9: partition table partially beyond EOD, truncated [ 596.394553][T13269] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 596.455535][ T10] r8152-cfgselector 3-1: USB disconnect, device number 69 [ 596.896367][ T43] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 596.903446][ T43] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 596.967682][ T43] usb 2-1: USB disconnect, device number 85 [ 597.730815][T13298] fuse: Unknown parameter 'user_i00000000000000000000' [ 597.825868][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 597.975740][T13305] pim6reg: entered allmulticast mode [ 597.985404][T13305] pim6reg: left allmulticast mode [ 598.085242][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 598.096209][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 598.105607][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.197108][ T10] usb 4-1: config 0 descriptor?? [ 598.212543][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 598.337318][ T5929] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 598.511298][ T5929] usb 1-1: config 0 has no interfaces? [ 598.511332][T13319] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 598.519739][ T5929] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 598.539206][T13320] fuse: Unknown parameter 'use00000000000000000000' [ 598.567951][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.595407][ T5929] usb 1-1: Product: syz [ 598.600857][ T5929] usb 1-1: Manufacturer: syz [ 598.605730][ T5929] usb 1-1: SerialNumber: syz [ 598.626887][ T5929] usb 1-1: config 0 descriptor?? [ 598.740564][T13324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.760206][T13324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.016196][ T43] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 600.207072][ T43] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 600.221151][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.234602][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 600.300806][ T43] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 600.311818][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.327559][ T43] usb 3-1: Product: syz [ 600.331914][ T43] usb 3-1: Manufacturer: syz [ 600.337247][ T43] usb 3-1: SerialNumber: syz [ 600.359674][ T43] usb 3-1: config 0 descriptor?? [ 600.371917][ T43] usb-storage 3-1:0.0: USB Mass Storage device detected [ 600.681438][ T43] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 600.700710][ T10] usb 4-1: Detected FT232A [ 600.706537][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 600.717423][ T10] usb 4-1: USB disconnect, device number 92 [ 600.771117][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 600.801560][ T43] usb 3-1: USB disconnect, device number 70 [ 601.005646][ T5929] usb 1-1: USB disconnect, device number 99 [ 601.048922][ T10] ftdi_sio 4-1:0.0: device disconnected [ 601.522533][T13351] fuse: Unknown parameter 'user_i00000000000000000000' [ 602.115910][ T43] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 602.257899][ T43] usb 3-1: device descriptor read/64, error -71 [ 602.506283][ T43] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 603.009358][ T43] usb 3-1: device descriptor read/64, error -71 [ 603.090392][T13364] syzkaller0: entered allmulticast mode [ 603.153024][ T43] usb usb3-port1: attempt power cycle [ 603.495913][ T43] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 603.526719][ T43] usb 3-1: device descriptor read/8, error -71 [ 603.765859][ T43] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 603.765865][ T5929] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 603.766040][ T982] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 603.796530][ T43] usb 3-1: device descriptor read/8, error -71 [ 603.906034][ T43] usb usb3-port1: unable to enumerate USB device [ 603.935851][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 603.942984][ T982] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 603.951304][ T982] usb 2-1: config 0 has no interface number 0 [ 603.957457][ T982] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 603.967457][ T982] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 603.978986][ T5929] usb 5-1: config 0 has no interfaces? [ 603.987346][ T982] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 603.996873][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.004870][ T982] usb 2-1: Product: syz [ 604.009359][ T982] usb 2-1: Manufacturer: syz [ 604.013998][ T982] usb 2-1: SerialNumber: syz [ 604.027399][ T982] usb 2-1: config 0 descriptor?? [ 604.033175][T13388] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 604.040446][T13388] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 604.059964][ T5929] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 604.069406][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.077955][ T5929] usb 5-1: Product: syz [ 604.082211][ T5929] usb 5-1: Manufacturer: syz [ 604.087327][ T5929] usb 5-1: SerialNumber: syz [ 604.094403][ T5929] usb 5-1: config 0 descriptor?? [ 604.249837][T13388] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 604.257545][T13388] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 604.316637][T13390] delete_channel: no stack [ 604.670664][ T982] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 604.681486][ T982] asix 2-1:0.251: probe with driver asix failed with error -524 [ 604.886490][ T982] usb 2-1: USB disconnect, device number 86 [ 605.057834][T13404] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 605.076297][T13403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 605.153327][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 605.153339][ T30] audit: type=1326 audit(1759638179.820:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 605.300658][T13409] fuse: Unknown parameter '¨tÄŠX€tee¢ì' [ 605.408781][ T30] audit: type=1326 audit(1759638179.850:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 605.470627][ T30] audit: type=1326 audit(1759638179.860:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 605.534763][ T30] audit: type=1326 audit(1759638179.860:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 605.577349][ T30] audit: type=1326 audit(1759638179.970:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 605.604667][ T30] audit: type=1326 audit(1759638179.970:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 605.630026][ T30] audit: type=1326 audit(1759638179.970:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdae398ef03 code=0x7ffc0000 [ 605.665495][T13417] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2033'. [ 605.768261][T13418] loop6: detected capacity change from 0 to 2560 [ 605.775334][T13418] buffer_io_error: 11 callbacks suppressed [ 605.775352][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 605.784543][ T30] audit: type=1326 audit(1759638179.970:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 605.822924][ T30] audit: type=1326 audit(1759638179.970:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdae398ef87 code=0x7ffc0000 [ 605.846304][ T30] audit: type=1326 audit(1759638179.970:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13408 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae398eec9 code=0x7ffc0000 [ 605.877667][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 605.889005][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 605.926020][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 605.935302][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 605.944687][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 605.954412][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 605.967367][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 605.987134][T13418] ldm_validate_partition_table(): Disk read failed. [ 605.993910][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 606.002547][T13418] Buffer I/O error on dev loop6, logical block 0, async page read [ 606.067801][T13418] Dev loop6: unable to read RDB block 0 [ 606.073917][T13418] loop6: unable to read partition table [ 606.090701][T13418] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 606.106295][ T43] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 606.132656][ T5210] ldm_validate_partition_table(): Disk read failed. [ 606.140724][ T5210] Dev loop6: unable to read RDB block 0 [ 606.150589][ T5210] loop6: unable to read partition table [ 606.322580][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 606.336788][ T43] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 606.345317][ T43] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 606.361235][ T43] usb 4-1: config 8 has no interface number 0 [ 606.392649][ T43] usb 4-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 606.411265][ T43] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 606.422680][ T43] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 1023 [ 606.433653][ T43] usb 4-1: config 8 interface 203 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.447118][ T43] usb 4-1: config 8 interface 203 has no altsetting 0 [ 606.460374][ T43] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 606.473951][ T43] usb 4-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 606.482360][ T43] usb 4-1: Product: syz [ 606.486809][ T43] usb 4-1: Manufacturer: syz [ 606.491506][ T43] usb 4-1: SerialNumber: syz [ 606.508945][T13409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 606.597930][T13409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 606.675817][ T982] usb 5-1: USB disconnect, device number 41 [ 606.688032][T13430] fuse: Unknown parameter 'user_i00000000000000000000' [ 606.902717][T13439] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 606.909282][T13439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 606.929706][T13439] vhci_hcd vhci_hcd.0: Device attached [ 607.009325][T13439] netdevsim netdevsim0: Direct firmware load for nel/config failed with error -2 [ 607.020521][T13439] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/config [ 607.118796][ T982] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 607.165926][ T1606] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 607.315910][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 607.388361][ T982] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 607.424666][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.510700][ T982] usb 5-1: Product: syz [ 607.519442][ T982] usb 5-1: Manufacturer: syz [ 607.528280][ T982] usb 5-1: SerialNumber: syz [ 607.566495][ T982] usb 5-1: config 0 descriptor?? [ 607.612807][T13440] vhci_hcd: connection reset by peer [ 607.632760][ T1163] vhci_hcd: stop threads [ 607.649169][ T1163] vhci_hcd: release socket [ 607.651935][T13446] FAULT_INJECTION: forcing a failure. [ 607.651935][T13446] name failslab, interval 1, probability 0, space 0, times 0 [ 607.660775][ T1163] vhci_hcd: disconnect device [ 607.668288][T13446] CPU: 0 UID: 0 PID: 13446 Comm: syz.2.2043 Not tainted syzkaller #0 PREEMPT(full) [ 607.668314][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 607.668328][T13446] Call Trace: [ 607.668335][T13446] [ 607.668347][T13446] dump_stack_lvl+0x189/0x250 [ 607.668377][T13446] ? __pfx____ratelimit+0x10/0x10 [ 607.668405][T13446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.668429][T13446] ? __pfx__printk+0x10/0x10 [ 607.668471][T13446] should_fail_ex+0x414/0x560 [ 607.668499][T13446] should_failslab+0xa8/0x100 [ 607.668529][T13446] __kmalloc_cache_noprof+0x6f/0x6f0 [ 607.668555][T13446] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 607.668575][T13446] ? sctp_add_bind_addr+0x8c/0x370 [ 607.668601][T13446] sctp_add_bind_addr+0x8c/0x370 [ 607.668624][T13446] sctp_copy_local_addr_list+0x30b/0x4e0 [ 607.668648][T13446] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 607.668667][T13446] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 607.668689][T13446] ? sctp_v6_is_any+0x64/0x80 [ 607.668711][T13446] ? sctp_copy_one_addr+0x93/0x360 [ 607.668734][T13446] sctp_bind_addr_copy+0xb3/0x3c0 [ 607.668755][T13446] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 607.668787][T13446] sctp_connect_new_asoc+0x2e0/0x690 [ 607.668815][T13446] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 607.668838][T13446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 607.668866][T13446] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 607.668886][T13446] ? security_sctp_bind_connect+0x7e/0x2e0 [ 607.668918][T13446] sctp_sendmsg+0x155c/0x2810 [ 607.668954][T13446] ? __pfx_sctp_sendmsg+0x10/0x10 [ 607.668981][T13446] ? aa_sk_perm+0x81e/0x950 [ 607.669008][T13446] ? __pfx_aa_sk_perm+0x10/0x10 [ 607.669033][T13446] ? sock_rps_record_flow+0x19/0x410 [ 607.669063][T13446] ? inet_sendmsg+0x2f4/0x370 [ 607.669094][T13446] __sock_sendmsg+0x19c/0x270 [ 607.669124][T13446] ____sys_sendmsg+0x505/0x830 [ 607.669151][T13446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.669182][T13446] ? import_iovec+0x74/0xa0 [ 607.669204][T13446] ___sys_sendmsg+0x21f/0x2a0 [ 607.669228][T13446] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.669292][T13446] ? __fget_files+0x2a/0x420 [ 607.669320][T13446] ? __fget_files+0x3a0/0x420 [ 607.669358][T13446] __x64_sys_sendmsg+0x19b/0x260 [ 607.669382][T13446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 607.669413][T13446] ? __pfx_ksys_write+0x10/0x10 [ 607.669436][T13446] ? rcu_is_watching+0x15/0xb0 [ 607.669464][T13446] ? do_syscall_64+0xbe/0x3b0 [ 607.669485][T13446] do_syscall_64+0xfa/0x3b0 [ 607.669502][T13446] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.669528][T13446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.669547][T13446] ? clear_bhb_loop+0x60/0xb0 [ 607.669571][T13446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.669589][T13446] RIP: 0033:0x7fe25978eec9 [ 607.669607][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.669625][T13446] RSP: 002b:00007fe2579f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.669646][T13446] RAX: ffffffffffffffda RBX: 00007fe2599e5fa0 RCX: 00007fe25978eec9 [ 607.669662][T13446] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 607.669675][T13446] RBP: 00007fe2579f6090 R08: 0000000000000000 R09: 0000000000000000 [ 607.669687][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.669699][T13446] R13: 00007fe2599e6038 R14: 00007fe2599e5fa0 R15: 00007fe259b0fa28 [ 607.669730][T13446] [ 607.823439][ T982] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 608.200149][ T43] port100 4-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 608.220132][ T43] usb 4-1: USB disconnect, device number 93 [ 609.400206][T13471] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2050'. [ 609.594986][ T982] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 609.608149][ T982] usb 5-1: USB disconnect, device number 42 [ 610.308866][T13477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 610.324160][T13477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 610.365993][T13477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 610.373486][T13477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.381257][T13477] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 610.626154][ T43] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 610.777633][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 610.788754][ T43] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 610.797909][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.811610][ T43] usb 4-1: config 0 descriptor?? [ 610.822823][T13481] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 610.881712][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.891322][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.899206][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.907114][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.914599][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.923883][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.931757][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.940171][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.947709][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.955492][ T10] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 610.964514][ T10] hid-generic 00A0:0006:0003.0018: hidraw0: HID v0.05 Device [syz1] on syz0 [ 611.043451][T13481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.052360][T13481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.082630][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 611.096301][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 611.126047][ T982] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 611.157505][ T43] usb 4-1: USB disconnect, device number 94 [ 611.372003][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 611.385138][ T982] usb 3-1: config 0 has no interfaces? [ 611.390739][ T982] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 611.400255][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.410970][ T982] usb 3-1: config 0 descriptor?? [ 611.537332][T12969] Bluetooth: hci0: command 0x0406 tx timeout [ 611.873624][T13514] sctp: [Deprecated]: syz.1.2062 (pid 13514) Use of int in maxseg socket option. [ 611.873624][T13514] Use struct sctp_assoc_value instead [ 611.922457][T13504] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 611.929110][T13504] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 612.066102][T13504] vhci_hcd vhci_hcd.0: Device attached [ 612.229441][ T10] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 612.240112][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.258482][ T10] usb 5-1: config 0 has no interface number 0 [ 612.267162][ T10] usb 5-1: config 0 interface 109 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.314948][T13524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.326520][T13524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.377018][ T1606] vhci_hcd: vhci_device speed not set [ 612.405220][T12969] Bluetooth: hci2: command 0x0406 tx timeout [ 612.433878][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 612.440062][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 612.446624][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 612.506253][ T982] usb 38-1: SetAddress Request (2) to port 0 [ 612.513519][ T982] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 612.785783][ T10] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 612.811694][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 612.843574][ T10] usb 5-1: Manufacturer: syz [ 612.978037][ T10] usb 5-1: config 0 descriptor?? [ 613.050908][ T10] cxacru 5-1:0.109: usbatm_usb_probe: bind failed: -19! [ 613.546464][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2068'. [ 613.879442][T13517] vhci_hcd: connection reset by peer [ 613.885033][ T1163] vhci_hcd: stop threads [ 613.889433][ T1163] vhci_hcd: release socket [ 613.908861][ T43] usb 3-1: USB disconnect, device number 75 [ 613.985482][T13551] : entered promiscuous mode [ 614.015917][ T1606] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 614.072541][ T1163] vhci_hcd: disconnect device [ 614.096925][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 614.147101][ T1606] usb 4-1: device descriptor read/64, error -71 [ 614.248055][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.259826][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.272862][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 614.283555][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 614.301648][T13560] input: syz0 as /devices/virtual/input/input55 [ 614.311211][ T10] usb 1-1: SerialNumber: syz [ 614.396583][ T1606] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 614.546176][ T1606] usb 4-1: device descriptor read/64, error -71 [ 614.557012][ T10] usb 1-1: 0:2 : does not exist [ 614.576629][ T10] usb 1-1: USB disconnect, device number 100 [ 614.674534][ T6752] udevd[6752]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.705114][ T1606] usb usb4-port1: attempt power cycle [ 615.095872][ T1606] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 615.119179][ T1606] usb 4-1: device descriptor read/8, error -71 [ 615.366010][ T1606] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 615.470275][ T1606] usb 4-1: device descriptor read/8, error -71 [ 615.588019][ T1606] usb usb4-port1: unable to enumerate USB device [ 615.743347][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2076'. [ 615.888349][ T30] kauditd_printk_skb: 515 callbacks suppressed [ 615.888362][ T30] audit: type=1326 audit(1759638190.550:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 615.933952][ T30] audit: type=1326 audit(1759638190.550:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 615.957780][ T30] audit: type=1326 audit(1759638190.550:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 615.986825][ T30] audit: type=1326 audit(1759638190.550:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 616.260243][ T30] audit: type=1326 audit(1759638190.550:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 616.325630][ T30] audit: type=1326 audit(1759638190.550:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 616.569080][ T30] audit: type=1326 audit(1759638190.550:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 616.612034][ T30] audit: type=1326 audit(1759638190.550:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 616.666310][ T30] audit: type=1326 audit(1759638190.550:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 616.879335][ T30] audit: type=1326 audit(1759638190.550:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13565 comm="syz.1.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504558eec9 code=0x7ffc0000 [ 617.625967][ T982] usb 38-1: device descriptor read/8, error -110 [ 618.026626][ T982] usb usb38-port1: attempt power cycle [ 618.640784][ T982] usb usb38-port1: unable to enumerate USB device [ 619.160207][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'. [ 620.014559][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 620.024500][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 620.047845][T13607] netlink: 'syz.3.2085': attribute type 18 has an invalid length. [ 620.091998][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 620.107090][ T1163] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.137413][ T1163] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.150635][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 620.177170][ T1163] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.261775][T13607] netlink: 'syz.3.2085': attribute type 18 has an invalid length. [ 620.547794][ T10] usb 5-1: USB disconnect, device number 43 [ 620.676574][ T982] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 620.825889][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 620.832466][ T982] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 620.841767][ T982] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.865651][ T982] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.943246][ T982] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 621.023215][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.031765][ T982] usb 2-1: Product: syz [ 621.039808][ T982] usb 2-1: Manufacturer: syz [ 621.044670][ T982] usb 2-1: SerialNumber: syz [ 621.467113][ T982] usb 2-1: 0:2 : does not exist [ 621.883563][ T982] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 621.918654][ T982] usb 2-1: USB disconnect, device number 87 [ 622.095837][ T10] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 622.268051][ T10] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 622.277420][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.290254][ T10] usb 1-1: config 0 descriptor?? [ 622.385875][ T43] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 622.520141][T13654] fuse: Bad value for 'fd' [ 622.540304][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.553553][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.598472][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 622.616238][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.631518][ T43] usb 4-1: config 0 descriptor?? [ 623.188687][ T10] hid_parser_main: 4 callbacks suppressed [ 623.188714][ T10] chicony 0003:04F2:1236.0019: unknown main item tag 0x0 [ 623.205933][ T10] chicony 0003:04F2:1236.0019: unknown main item tag 0x0 [ 623.216141][ T10] chicony 0003:04F2:1236.0019: unknown main item tag 0x0 [ 623.223340][ T10] chicony 0003:04F2:1236.0019: unknown main item tag 0x0 [ 623.247508][ T10] chicony 0003:04F2:1236.0019: unknown main item tag 0x0 [ 623.275436][ T10] chicony 0003:04F2:1236.0019: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.0-1/input0 [ 623.316440][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 623.322465][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 623.345156][ T43] usb 4-1: USB disconnect, device number 99 [ 623.411829][ T10] usb 1-1: USB disconnect, device number 101 [ 623.502424][T13659] fido_id[13659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 623.805845][ T982] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 623.945970][ T982] usb 2-1: device descriptor read/64, error -71 [ 624.205966][ T982] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 624.346242][ T982] usb 2-1: device descriptor read/64, error -71 [ 624.354123][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.415925][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.458213][ T982] usb usb2-port1: attempt power cycle [ 624.545944][ T5931] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 624.715837][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 624.722535][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.733820][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.744035][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 624.757602][ T5931] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 624.766898][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.782765][ T5931] usb 4-1: config 0 descriptor?? [ 624.816237][ T982] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 624.836990][ T982] usb 2-1: device descriptor read/8, error -71 [ 625.193320][ T982] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 625.226763][ T982] usb 2-1: device descriptor read/8, error -71 [ 625.333695][ T5931] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 625.345827][ T982] usb usb2-port1: unable to enumerate USB device [ 625.352546][ T5931] microsoft 0003:045E:07DA.001A: no inputs found [ 625.359694][ T5931] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 625.504252][ T5931] usb 4-1: USB disconnect, device number 100 [ 626.199799][T13713] netlink: 'syz.3.2116': attribute type 2 has an invalid length. [ 626.836637][ T43] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 627.041726][ T43] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 627.053692][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.091068][ T1606] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 627.117147][ T43] usb 4-1: config 0 has no interface number 0 [ 627.135661][ T43] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 627.159038][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.175850][ T43] usb 4-1: Product: syz [ 627.180709][ T43] usb 4-1: Manufacturer: syz [ 627.186210][ T43] usb 4-1: SerialNumber: syz [ 627.273704][ T1606] usb 1-1: config 0 has no interfaces? [ 627.329221][ T43] usb 4-1: config 0 descriptor?? [ 627.339326][ T1606] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 627.386209][ T1606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.394380][ T1606] usb 1-1: Product: syz [ 627.399740][ T1606] usb 1-1: Manufacturer: syz [ 627.470578][ T1606] usb 1-1: SerialNumber: syz [ 627.484748][ T1606] usb 1-1: config 0 descriptor?? [ 627.612800][ T43] qmi_wwan 4-1:0.207: probe with driver qmi_wwan failed with error -22 [ 627.626762][ T43] usb 4-1: USB disconnect, device number 101 [ 627.774604][T13730] delete_channel: no stack [ 628.287627][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 628.996077][ T43] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 629.174576][T13760] fuse: Bad value for 'fd' [ 629.292358][ T43] usb 2-1: config 0 has no interfaces? [ 629.305551][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 629.322634][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.339904][ T43] usb 2-1: Product: syz [ 629.348411][ T43] usb 2-1: Manufacturer: syz [ 629.357205][ T43] usb 2-1: SerialNumber: syz [ 629.380436][ T43] usb 2-1: config 0 descriptor?? [ 629.579489][ T982] usb 1-1: USB disconnect, device number 102 [ 629.664515][T13752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.680064][T13752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.055823][ T982] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 630.185858][ T982] usb 1-1: device descriptor read/64, error -71 [ 630.436006][ T982] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 630.565853][ T982] usb 1-1: device descriptor read/64, error -71 [ 630.810972][ T982] usb usb1-port1: attempt power cycle [ 631.277153][ T982] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 631.317237][ T982] usb 1-1: device descriptor read/8, error -71 [ 631.469365][ T10] usb 2-1: USB disconnect, device number 92 [ 631.735911][ T982] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 631.756466][ T982] usb 1-1: device descriptor read/8, error -71 [ 631.866352][ T982] usb usb1-port1: unable to enumerate USB device [ 631.924141][T13795] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2137'. [ 632.413353][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'. [ 633.165942][ T43] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 633.325891][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 633.447798][ T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 633.475968][ T43] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 633.498185][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.506490][ T43] usb 5-1: Product: syz [ 633.510668][ T43] usb 5-1: Manufacturer: syz [ 633.515269][ T43] usb 5-1: SerialNumber: syz [ 633.573761][ T43] usb 5-1: config 0 descriptor?? [ 633.595602][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 633.648122][ T10] usb 4-1: config 0 has no interfaces? [ 633.658225][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 633.874684][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'. [ 633.926055][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.033258][ T10] usb 4-1: Product: syz [ 634.146188][ T43] gspca_ov534_9: reg_w failed -110 [ 634.221779][ T10] usb 4-1: Manufacturer: syz [ 634.237887][ T10] usb 4-1: SerialNumber: syz [ 634.348299][ T10] usb 4-1: config 0 descriptor?? [ 634.625842][ T43] gspca_ov534_9: Unknown sensor 0000 [ 634.625909][ T43] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 634.701427][ T43] usb 5-1: USB disconnect, device number 44 [ 635.605884][ T43] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 635.756267][ T1606] usb 4-1: USB disconnect, device number 102 [ 635.785870][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 635.794103][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 635.815451][ T43] usb 1-1: config 0 has no interface number 0 [ 635.850437][ T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 635.893856][ T43] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 635.948466][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.977830][ T43] usb 1-1: config 0 descriptor?? [ 636.003024][ T43] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 636.197681][ T43] usb 1-1: USB disconnect, device number 107 [ 636.653844][T13851] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2156'. [ 636.876249][T13859] macvtap0: entered allmulticast mode [ 636.881667][T13859] veth0_macvtap: entered allmulticast mode [ 637.962177][T13871] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 637.984917][T13871] syzkaller1: entered promiscuous mode [ 637.990579][T13871] syzkaller1: entered allmulticast mode [ 638.000017][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 638.000034][ T30] audit: type=1800 audit(1759638212.670:750): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2161" name="SYSV798dd816" dev="tmpfs" ino=0 res=0 errno=0 [ 638.441484][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2165'. [ 638.525872][ T43] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 638.709537][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 638.720567][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2169'. [ 638.780872][ T43] usb 3-1: config 0 has no interfaces? [ 638.800855][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 638.825878][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.833959][ T43] usb 3-1: Product: syz [ 638.838329][ T43] usb 3-1: Manufacturer: syz [ 638.842939][ T43] usb 3-1: SerialNumber: syz [ 638.851473][ T43] usb 3-1: config 0 descriptor?? [ 638.857255][T13895] bond4 (unregistering): Released all slaves [ 640.265873][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 640.427338][ T10] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 640.435580][ T10] usb 4-1: config 1 has no interface number 0 [ 640.442018][ T10] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 640.454461][ T10] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 640.464904][ T10] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 640.481156][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 640.490983][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.499416][ T10] usb 4-1: Product: syz [ 640.503706][ T10] usb 4-1: Manufacturer: syz [ 640.508346][ T10] usb 4-1: SerialNumber: syz [ 640.516828][T13924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 640.727038][T13924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 640.737092][ T10] usb 4-1: No status endpoint found [ 640.939546][ T982] usb 4-1: USB disconnect, device number 103 [ 641.185882][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 641.214330][ T43] usb 3-1: USB disconnect, device number 76 [ 641.608608][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 641.933625][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 641.962471][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 641.970124][ T10] usb 5-1: can't read configurations, error -71 [ 642.682605][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'. [ 642.746298][ T5896] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 643.088377][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 643.103363][ T5896] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 643.125854][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.134269][ T5896] usb 2-1: Product: syz [ 643.138561][ T5896] usb 2-1: Manufacturer: syz [ 643.144241][ T5896] usb 2-1: SerialNumber: syz [ 643.159354][ T5896] usb 2-1: config 0 descriptor?? [ 643.388986][ T5896] usb_8dev 2-1:0.0 can0: sending command message failed [ 643.396863][ T5896] usb_8dev 2-1:0.0 can0: can't get firmware version [ 643.499674][ T5896] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 643.573980][ T5896] usb 2-1: USB disconnect, device number 93 [ 643.708333][T13970] loop6: detected capacity change from 0 to 2560 [ 643.716763][ T6752] buffer_io_error: 27 callbacks suppressed [ 643.716780][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.731691][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.739769][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.747813][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.756025][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.763996][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.774366][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.775995][ T10] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 643.793629][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.831069][ T6752] ldm_validate_partition_table(): Disk read failed. [ 643.839237][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.847515][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.856612][ T6752] Dev loop6: unable to read RDB block 0 [ 643.862802][ T6752] loop6: unable to read partition table [ 643.888091][T13970] ldm_validate_partition_table(): Disk read failed. [ 643.907358][T13976] netdevsim netdevsim3: Direct firmware load for . [ 643.907358][T13976] failed with error -2 [ 643.918289][T13976] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 643.918289][T13976] [ 643.971566][T13970] Dev loop6: unable to read RDB block 0 [ 643.978107][T13970] loop6: unable to read partition table [ 644.045947][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 645.074794][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.102851][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.155200][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.164570][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.178447][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'. [ 645.187800][ T10] usb 1-1: Product: syz [ 645.191954][ T10] usb 1-1: Manufacturer: syz [ 645.197245][ T10] usb 1-1: SerialNumber: syz [ 645.212002][T13970] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 645.732974][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2198'. [ 645.806670][ T10] usb 1-1: 0:2 : does not exist [ 645.815165][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 646.001799][ T10] usb 1-1: USB disconnect, device number 108 [ 646.826534][ T1606] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 646.987298][ T1606] usb 1-1: config 253 has no interfaces? [ 647.026663][ T1606] usb 1-1: New USB device found, idVendor=0572, idProduct=589e, bcdDevice=d4.02 [ 647.041603][ T1606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.095865][ T982] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 647.184907][ T1606] usb 1-1: Product: ÐŽ [ 647.196031][ T1606] usb 1-1: Manufacturer: 둵묮麜呭뤙酛蕠兴櫃㶞䃮劺ᬡâ¤ã ‡ä°ì¨‰ìµ¥á‡”ì«é…»æ˜´ë˜»ë¨“ÛŠÝ⵷ꡙꡔè˜èˆˆá§®â¥µå…“ïˆâ£¡â†—䓌㳎ឫ傉촤넱å«ã‡µâŸ€ì¹›éªºåƒï€„ì šå…¶é³ë·”깄云醙暗ᨣ멉᲼ç§èŠ‡î€ç°¼åˆèŒŒî˜™ä¦¸å肜೎韉쉉㙇⡼⣠⨫̊銓າæ­ï•©à¶»íƒ²í‡©êˆ½éŸ²èµä›äŒ‡ë¦œã¾ˆâºµâ™‘ꉎᣘ꘭áŠì™ï‰îšê‡ƒä¿Šæ¨´ä ƒã¿ŽâŽ¡è¬¯ê¹Šã—£à¬±â¿ˆç€’ë€ì„½ [ 647.356101][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 647.512420][ T1606] usb 1-1: SerialNumber: ïŽç€á‰žá¢¤îƒ¼é‹«æžáª§ä¤¾á‚ᆉ尿핀⹸佋䈉✨ɔ㷈苟â¾å¶´ë¾¬é½ä‘«ì¼ƒä¬å…ƒâ¶©à¥ à¼¨æŠƒæ¯æ›Ñ–êºà§”쬳尓⥕஘턾閤ۈ㜻䊑࿵䜔樈â„圅ퟢᷘ踩é†éƒºîº–Ꞟ⅚ଗ헑궶 [ 647.627960][ T982] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 647.653468][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.673472][ T982] usb 5-1: Product: syz [ 647.679585][ T982] usb 5-1: Manufacturer: syz [ 647.687622][ T982] usb 5-1: SerialNumber: syz [ 647.713994][ T982] usb 5-1: config 0 descriptor?? [ 647.774633][ T1606] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 647.867762][ T1606] usb 1-1: no configuration chosen from 1 choice [ 648.045845][ T982] usb_8dev 5-1:0.0 can0: sending command message failed [ 648.052852][ T982] usb_8dev 5-1:0.0 can0: can't get firmware version [ 648.257590][ T982] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 648.290647][ T982] usb 5-1: USB disconnect, device number 47 [ 648.337399][ T1606] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 648.516726][ T1606] usb 2-1: Using ep0 maxpacket: 8 [ 648.527748][ T1606] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 648.545868][ T1606] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 648.565871][ T1606] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 648.595874][ T1606] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.621949][ T1606] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 648.638270][ T1606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.877211][ T1606] usb 2-1: GET_CAPABILITIES returned 0 [ 648.888560][ T1606] usbtmc 2-1:16.0: can't read capabilities [ 649.027990][T14049] loop6: detected capacity change from 0 to 2560 [ 649.036397][ T6752] buffer_io_error: 27 callbacks suppressed [ 649.036409][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.050916][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.060126][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.070130][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.081531][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.090237][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.098649][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.125519][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.135361][ T6752] ldm_validate_partition_table(): Disk read failed. [ 649.202833][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.226439][ T6752] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.279531][ T6752] Dev loop6: unable to read RDB block 0 [ 649.291405][ T6752] loop6: unable to read partition table [ 649.308614][T14049] ldm_validate_partition_table(): Disk read failed. [ 649.340862][T14049] Dev loop6: unable to read RDB block 0 [ 649.392736][ T1606] usb 1-1: USB disconnect, device number 109 [ 650.033385][T14061] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 650.110122][T14049] loop6: unable to read partition table [ 650.406218][T14049] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 650.484789][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 650.527899][ T5210] ldm_validate_partition_table(): Disk read failed. [ 650.534768][ T5210] Dev loop6: unable to read RDB block 0 [ 650.541011][ T5210] loop6: unable to read partition table [ 651.124497][ T10] usb 2-1: USB disconnect, device number 94 [ 651.962324][T14090] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2222'. [ 652.883158][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 652.892983][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 652.901392][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 652.919083][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 652.927315][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 653.415951][ T43] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 653.621062][T14100] chnl_net:caif_netlink_parms(): no params data found [ 653.670667][T14111] loop6: detected capacity change from 0 to 2560 [ 653.687470][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 653.695619][ T43] usb 5-1: config 0 has no interface number 0 [ 653.721509][ T6752] ldm_validate_partition_table(): Disk read failed. [ 653.732659][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 653.747686][ T6752] Dev loop6: unable to read RDB block 0 [ 653.756596][ T6752] loop6: unable to read partition table [ 653.762699][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 653.774699][T14111] ldm_validate_partition_table(): Disk read failed. [ 653.808355][T14111] Dev loop6: unable to read RDB block 0 [ 653.846777][T14111] loop6: unable to read partition table [ 653.849361][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 653.864944][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.865047][T14111] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 653.876283][ T43] usb 5-1: config 0 descriptor?? [ 653.941250][T14105] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 653.969867][ T43] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 654.144278][T14100] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.154035][T14100] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.161550][T14100] bridge_slave_0: entered allmulticast mode [ 654.171015][T14100] bridge_slave_0: entered promiscuous mode [ 654.182039][T14100] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.191830][T14100] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.199277][T14100] bridge_slave_1: entered allmulticast mode [ 654.207920][T14100] bridge_slave_1: entered promiscuous mode [ 654.272955][T14100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.275906][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 654.299416][T14100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.333073][ T43] usb 5-1: USB disconnect, device number 48 [ 654.389832][T14100] team0: Port device team_slave_0 added [ 654.398202][T14100] team0: Port device team_slave_1 added [ 654.426957][T14100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.438057][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.468118][T14100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.483641][T14100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.490894][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.505886][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 654.523672][T14100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.554432][ T10] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 654.573803][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.586482][ T10] usb 3-1: Product: syz [ 654.590824][ T10] usb 3-1: Manufacturer: syz [ 654.595439][ T10] usb 3-1: SerialNumber: syz [ 654.610958][ T10] usb 3-1: config 0 descriptor?? [ 654.632629][T14100] hsr_slave_0: entered promiscuous mode [ 654.641323][T14100] hsr_slave_1: entered promiscuous mode [ 654.641638][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 654.649149][T14100] debugfs: 'hsr0' already exists in 'hsr' [ 654.661617][T14100] Cannot create hsr debugfs directory [ 654.789030][T14126] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 654.976076][T12969] Bluetooth: hci4: command tx timeout [ 655.079826][T14100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 655.099245][T14100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 655.129938][ T10] gspca_ov534_9: reg_w failed -71 [ 655.152039][T14100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 655.172071][T14100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 655.574842][T14100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.595897][ T10] gspca_ov534_9: Unknown sensor 0000 [ 655.596086][ T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 655.615664][T14100] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.685807][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.694910][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.710297][ T10] usb 3-1: USB disconnect, device number 77 [ 655.734374][T14142] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.734489][T14142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.943324][T14100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.986961][T14100] veth0_vlan: entered promiscuous mode [ 656.003768][T14100] veth1_vlan: entered promiscuous mode [ 656.101012][T14100] veth0_macvtap: entered promiscuous mode [ 656.214761][T14100] veth1_macvtap: entered promiscuous mode [ 656.245548][T14100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.293704][T14100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.309306][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.321497][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.331754][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.342502][T12859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.436701][ T10] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 656.469297][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.477347][ T1606] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 656.491756][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.564965][T12859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.574310][T12859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.646263][ T1606] usb 5-1: Using ep0 maxpacket: 16 [ 656.658022][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 656.678269][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 656.684924][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 656.694298][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.740843][ T10] usb 3-1: config 0 descriptor?? [ 656.753409][T14144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 656.774347][ T1606] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 656.793027][ T1606] usb 5-1: config 0 has no interface number 0 [ 656.802310][ T1606] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 656.842992][ T1606] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 656.854972][ T1606] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 656.864884][ T1606] usb 5-1: Product: syz [ 656.869444][ T1606] usb 5-1: SerialNumber: syz [ 656.882542][ T1606] usb 5-1: config 0 descriptor?? [ 656.901347][ T1606] cm109 5-1:0.8: invalid payload size 3, expected 4 [ 657.005950][ T1606] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input58 [ 657.057516][T12969] Bluetooth: hci4: command tx timeout [ 657.224926][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 657.249423][T14150] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 657.261546][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 657.382730][ T10] usb 3-1: USB disconnect, device number 78 [ 657.450086][T14150] usb 4-1: config 0 has no interfaces? [ 657.455503][T14150] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 657.455535][T14150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.455556][T14150] usb 4-1: Product: syz [ 657.455572][T14150] usb 4-1: Manufacturer: syz [ 657.455588][T14150] usb 4-1: SerialNumber: syz [ 657.466846][T14150] usb 4-1: config 0 descriptor?? [ 658.080696][ T1606] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 658.243983][ T1606] usb 1-1: Using ep0 maxpacket: 8 [ 658.252415][ T1606] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 658.252436][ T1606] usb 1-1: config 0 has no interface number 0 [ 658.252460][ T1606] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 658.252474][ T1606] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 658.252489][ T1606] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 658.252520][ T1606] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 658.252546][ T1606] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 658.252559][ T1606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.258182][ T1606] usb 1-1: config 0 descriptor?? [ 658.267832][ T1606] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 658.590959][T14179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2245'. [ 658.644610][ T10] usb 1-1: USB disconnect, device number 110 [ 658.644720][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 658.666790][T14177] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 658.667421][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 659.145876][T12969] Bluetooth: hci4: command tx timeout [ 659.402647][T14184] netlink: 'syz.5.2247': attribute type 2 has an invalid length. [ 659.428130][T14184] sctp: [Deprecated]: syz.5.2247 (pid 14184) Use of int in max_burst socket option. [ 659.428130][T14184] Use struct sctp_assoc_value instead [ 660.106642][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 660.107142][ T5954] usb 5-1: USB disconnect, device number 49 [ 660.113621][ C1] ------------[ cut here ]------------ [ 660.113636][ C1] URB ffff88814cc32300 submitted while active [ 660.114464][ C1] WARNING: CPU: 1 PID: 23 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830 [ 660.140371][ C1] Modules linked in: [ 660.144520][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 660.153704][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 660.163784][ C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 660.169327][ C1] Code: 44 89 f2 e8 a1 30 3f fa e9 13 fc ff ff e8 47 9f d1 fa c6 05 73 34 59 08 01 90 48 c7 c7 00 e2 ef 8b 48 89 de e8 10 0e 95 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 21 9f d1 fa eb 11 e8 1a 9f d1 fa bd [ 660.188922][ C1] RSP: 0018:ffffc900001d7588 EFLAGS: 00010046 [ 660.194983][ C1] RAX: 9ded839390a11400 RBX: ffff88814cc32300 RCX: 0000000000040000 [ 660.202946][ C1] RDX: ffffc90002391000 RSI: 0000000000002c89 RDI: 0000000000002c8a [ 660.210917][ C1] RBP: 000000000000000f R08: ffff8880b8924293 R09: 1ffff11017124852 [ 660.218901][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: dffffc0000000000 [ 660.226863][ C1] R13: ffff8880660e0030 R14: ffff88814cc32308 R15: 0000000000000820 [ 660.234823][ C1] FS: 0000000000000000(0000) GS:ffff888126488000(0000) knlGS:0000000000000000 [ 660.243739][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 660.250305][ C1] CR2: 00002000003f0030 CR3: 000000007dd8e000 CR4: 00000000003526f0 [ 660.258271][ C1] Call Trace: [ 660.261547][ C1] [ 660.264474][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 660.270357][ C1] ? kcov_remote_start+0x97/0x7f0 [ 660.275374][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 660.280732][ C1] __usb_hcd_giveback_urb+0x373/0x540 [ 660.286112][ C1] dummy_timer+0x862/0x4550 [ 660.290615][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 660.295987][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.300907][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.305834][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.310775][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 660.315973][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 660.321673][ C1] ? read_tsc+0x9/0x20 [ 660.325733][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 660.330850][ C1] handle_softirqs+0x283/0x870 [ 660.335601][ C1] ? run_ksoftirqd+0x9b/0x100 [ 660.340295][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 660.345571][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 660.350589][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 660.355710][ C1] run_ksoftirqd+0x9b/0x100 [ 660.360231][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 660.365340][ C1] smpboot_thread_fn+0x542/0xa60 [ 660.370266][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 660.375281][ C1] kthread+0x70e/0x8a0 [ 660.379366][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 660.384827][ C1] ? __pfx_kthread+0x10/0x10 [ 660.389403][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.394588][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.399774][ C1] ? __pfx_kthread+0x10/0x10 [ 660.404352][ C1] ret_from_fork+0x436/0x7d0 [ 660.408932][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 660.414033][ C1] ? __switch_to_asm+0x39/0x70 [ 660.418780][ C1] ? __switch_to_asm+0x33/0x70 [ 660.423527][ C1] ? __pfx_kthread+0x10/0x10 [ 660.428104][ C1] ret_from_fork_asm+0x1a/0x30 [ 660.432865][ C1] [ 660.435877][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 660.443145][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 660.452322][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 660.462367][ C1] Call Trace: [ 660.465637][ C1] [ 660.468556][ C1] dump_stack_lvl+0x99/0x250 [ 660.473133][ C1] ? __asan_memcpy+0x40/0x70 [ 660.477707][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.482893][ C1] ? __pfx__printk+0x10/0x10 [ 660.487482][ C1] vpanic+0x237/0x6d0 [ 660.491448][ C1] ? __pfx_vpanic+0x10/0x10 [ 660.495938][ C1] panic+0xb9/0xc0 [ 660.499669][ C1] ? __pfx_panic+0x10/0x10 [ 660.504077][ C1] __warn+0x31b/0x4b0 [ 660.508045][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 660.512974][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 660.517894][ C1] report_bug+0x2be/0x4f0 [ 660.522219][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 660.527167][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 660.532097][ C1] ? usb_submit_urb+0xfc3/0x1830 [ 660.537018][ C1] handle_bug+0x84/0x160 [ 660.541271][ C1] exc_invalid_op+0x1a/0x50 [ 660.545761][ C1] asm_exc_invalid_op+0x1a/0x20 [ 660.550607][ C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 660.556137][ C1] Code: 44 89 f2 e8 a1 30 3f fa e9 13 fc ff ff e8 47 9f d1 fa c6 05 73 34 59 08 01 90 48 c7 c7 00 e2 ef 8b 48 89 de e8 10 0e 95 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 21 9f d1 fa eb 11 e8 1a 9f d1 fa bd [ 660.575749][ C1] RSP: 0018:ffffc900001d7588 EFLAGS: 00010046 [ 660.581834][ C1] RAX: 9ded839390a11400 RBX: ffff88814cc32300 RCX: 0000000000040000 [ 660.589850][ C1] RDX: ffffc90002391000 RSI: 0000000000002c89 RDI: 0000000000002c8a [ 660.597813][ C1] RBP: 000000000000000f R08: ffff8880b8924293 R09: 1ffff11017124852 [ 660.605776][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: dffffc0000000000 [ 660.613751][ C1] R13: ffff8880660e0030 R14: ffff88814cc32308 R15: 0000000000000820 [ 660.621724][ C1] ? usb_submit_urb+0xfc0/0x1830 [ 660.626669][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 660.632554][ C1] ? kcov_remote_start+0x97/0x7f0 [ 660.637570][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 660.642957][ C1] __usb_hcd_giveback_urb+0x373/0x540 [ 660.648316][ C1] dummy_timer+0x862/0x4550 [ 660.652819][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 660.658197][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.663126][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.668053][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 660.672991][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 660.678190][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 660.683904][ C1] ? read_tsc+0x9/0x20 [ 660.687968][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 660.693069][ C1] handle_softirqs+0x283/0x870 [ 660.697818][ C1] ? run_ksoftirqd+0x9b/0x100 [ 660.702481][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 660.707755][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 660.712769][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 660.717776][ C1] run_ksoftirqd+0x9b/0x100 [ 660.722284][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 660.727385][ C1] smpboot_thread_fn+0x542/0xa60 [ 660.732308][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 660.737327][ C1] kthread+0x70e/0x8a0 [ 660.741383][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 660.746827][ C1] ? __pfx_kthread+0x10/0x10 [ 660.751403][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.756601][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.761829][ C1] ? __pfx_kthread+0x10/0x10 [ 660.766410][ C1] ret_from_fork+0x436/0x7d0 [ 660.770990][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 660.776093][ C1] ? __switch_to_asm+0x39/0x70 [ 660.780853][ C1] ? __switch_to_asm+0x33/0x70 [ 660.785619][ C1] ? __pfx_kthread+0x10/0x10 [ 660.790199][ C1] ret_from_fork_asm+0x1a/0x30 [ 660.794957][ C1] [ 660.798239][ C1] Kernel Offset: disabled [ 660.802558][ C1] Rebooting in 86400 seconds..