last executing test programs: 11.160849455s ago: executing program 4 (id=3011): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x9, 0x56, 0x8, 0x1000006, 0x20000004}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x60026, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000fcbe91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4074) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/13], 0x48) ftruncate(0xffffffffffffffff, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xd) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018028000100e000000108000200e00000010c0002800500010000000000180002801400018008000100ac19911a83f46331091e0001"], 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r7, @ANYBLOB="2c726f6f746d4f64653d3030303030303030303030303c30303030303430303035a86ef1d4c6c678d4db331e980d0b5484b37d615a7a2ccf4f8fd55bf02803ebf93058460f80062893261c", @ANYRESDEC=0x0, @ANYRES32=r4, @ANYRES16=r6], 0x0, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000004100)={0x2020}, 0x2020) 9.748046391s ago: executing program 0 (id=3016): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe, 0x2, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x81, 0x8, 0x5}}]}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) (async) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0xe, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.855049112s ago: executing program 4 (id=3022): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00ea73b51d5e52730190582b42de86e8520b4cc290582aca61b84654e698739e96276f3bbc65288d62c4692f81af839940ee11997b8edad23acdba49397439d2cad2a5579be51bb18e89099c5d85d2442c0add1bbbd866536f9bd7ddba947215583f663deb5fbf3e0c15adb4ce4ebfd85499b346a962db4f750f8892cc84d27f093546a8584da37398e6d517011862d3bdb342c74ba04236376ed6fe38af6953"]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 6.795520591s ago: executing program 1 (id=3023): syz_usb_connect(0x4, 0x24b, &(0x7f00000028c0)=ANY=[], 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xfc45, 0x1, 0x2, 0x0, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 6.548457198s ago: executing program 4 (id=3026): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xda, &(0x7f0000000180)=""/218, 0xf6054b9c49695e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x1, r0, 0x1, 0x1, 0x1]}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000600)="23e8d32682044b1aea93aa4555b24dafb496d785d0dbf07b4316168cc5a6a8dd21f376d97d75ce4960fc9312fb9bdc83b7949c4f2a43ab467980eeb1b152c47e352bd726a5133cd8015eb017ad81487f280481d1f9c4c0ce0b6b9fea711f5c639afeb7d2d788954750788986380c0a98ee1f118b24199ede4094292b9f6b62dd2a1913cc58fd7a3ac49f633632ac7e8c521596401e51844dae173a238d87f07168a59c64c68f5c5b64581739ebbd9df4b0834a26e2190aab93a140b21dbae9762b89d98b48399d1a365f028649b8f106c6c9d9b19b39bdbbca9022dffb05d58c9fee01cf884f4214", 0xe8}, {&(0x7f0000000940)="447ee3b4212bcf35d142a87fda51c05cb118230e7a8a5a6f798db6e01cacb544f783a87cf17cd21e4338f7de5c6650ac158eb6002be85f5b8ac59e399b42e5ce19a463fabafee56ad00b8ab03fd98a9dd0bcec9910762b65bfd84af48626bb83398890ed03555a7cfe19ad55a4acb18418366625066bad998fcec03d8e2299d8cb46dab90d5af855a252620a4263866013764f842f4f887a7b264257fe4b2bea9d83d004caa5907778082b6720553e7a5f069c4d19cf4198d0eaf78b190abd3b78aa8e27fec3aac72bbf1a0877b9786d9741a6d1dcaed3466123bf3946ac5b582c6333e11971a5fbc6388416e8a9595bf8faac17c0", 0xf5}, {&(0x7f0000000540)="7ac19d79dbd587f797c6100b33847253c4b3bfdb880c8f8ea479386ad5ac110de0863105748dd4c6bb2847ea8e6b2ecfdfc189b63f0c5f64a864c24880df3743f4cf78a1d1cb1e5a96d57cad2c62b0666a62dcd927ad3757ecc6453731e4be6a2ef2131d0ebd470581ee", 0x6a}, {&(0x7f0000000700)="1ebbfa809aed1fe935bf788625d5ba4ea092b3d1c3d4cacd94c6adf2e4564b2d80bcce66c257c4e27a16b51a407df5e40a6bb8f7e0c12d90e56c8490cbaffe39f9cdf808a45a7f667252ca016ca9b7c06ba1dd5dc86085f5dcc755484863496628abb0efb358af8c0373652cde4a", 0x6e}, {&(0x7f0000000b40)="7ad0cae1e9b01a041f8b8e06558723b7e0e152d139e7305d75ee8751154cba521dcf00be97c6df505776f5297b8e48763b84add2c0e8a4c5730ac79c91b69babfd7a7f2cd4151a026c962bf29308ac6d7dfb046ca03bc3af057f55e3270a955596edeae739422faca4a00b7a41711bc6405b022d1624fc2af8828d77efed532729e9eb814b853383a6320304865b082073c04d854f65cd47f17fdb03d82cb9776d2028d282e246622186461e236acbaf7b5780dff35e36096fb1b37488e06f4bb2809009890275f0aeebf48ba88802b3ffa010495e5c969a608556e14bcce9aa2a26d14d949afa6016c37e90eb14783194e4d7d7d498998aaa9e31091b748ca7d88deb07e18ecebd7437f1a5f036cd14717d359121220711deea0fa4e0f3ca57224b9f8f53dd1f56fce7dd402c161e8c2534efab29d6bd78ac06c9c8653e7a1f1bfa5635a340228161645216d7873351c889c08395541c6f2a4de54768b158bfff11a6c90426e56b5c9c8647a5238512f34a434c4028852f5249ed4a3a3d307a31bb1c9fa6f1fa842190499e832271c57bee9cab5dd392c3114bab3c6e5b081a2e54477e8ac3f2a20dada822ee6697e7474ce1b288c1efa6c6caea0866a34903f26f27f980c52a556306872f21b54320b21ce26ce3b1b0ac489bb139c2da6cc01d2e9323676d19dd9fe174b4d2baeaa5a4abc1bf6d7dcfb9d89de9544b3ab40be465a8aba1a12c60389d82885549f548753e4f42cbc409e5728e776f9ad44139cd685ef7bfb10773966fb6bfa319ec974f2af0f90eb9507221fd5387f8ed82bf6a83fd50311fb285cdf54f2d11cc6626d00aadafe4304395e68e439dbb6bf9ad21926baa33b0583bfbb8543bce8c6939a051e3dfb135845b59e4ed9b945f76a2e1f408da121f79dca5477268d882b36cffde8ddd884bb76d8fe92cdb541ece6f3ffa1a71c177d5fe5a3d3d3f441bc9861532c1e8ba4d73f7216290cf2d84bc2ed531341bf4b86e9347d1442b7982698a5ef59c3e1d7def22d8f17e761c75dc6c099e9e2df2173456de4b9f3895cbfbe0816bb3e28935b40a5d7ae54ce08b3158c5cc7d43a2b3dff03f1ebb0cbf17ea2f6265449b0ad8ab9c12eb110a68c595a7c80548d94541b5b7d0661a20f79d8741d9ddb2bd53554b67f8ec50028b8dc417be21788593081a6736a08e3f9c701e17a4415ad1e9cba95d23ffff6ba19d743eb3bb128f3eb3edb8cdd83433d488806b2b57248dcc3ac137260b5d352e99e38b853fe137bdd08c804237251ab2b2eb9bd7d19f32b1d09826e36e10d8a653a2cf665614311dabcd19d2e1ff0362877096f8007eafc5dde7004c4084a5f19ddac897bcfcc50e9fb8d094a7a935f3b296b078187e75447ae7c1dc341c7e69aafd9b457b95432f170110b3228f02998e3a585ba549fb0184db46a18a880e939ee52a35c9e93da57bd7c1b8069dd3b3787379a5a77f06059159a6ba2a2722b0081add9f8a5ec560342e0ea3991b33bfabe548c4ab722c8af6edfd5382a0dcfb645ea56f6d00192a6d33eb496da122bd763269c27fe1e50263c1f20420f5d979517b037c4cedfc73152be2faa58755b597e5ea7d03fede53479860474547ce0715c14dd4894fe33ed3ae58a6ddca004f1b3032b67639eff10e43ad7e95bf1e073471561ed422d1516355651c339b21a40d7a72d91405f8616140b4a8157eba6f5c35922964aab15f1d19e2b9a07b53315ad67a1a7b9badfb92fa12b482433d95695478a481f39194bd578c094f9cf4011d16fc79d2581d8ee78591f9dffde42168fd7a5375170b72d6833583dfc9cc295d24fb5cf6b1a48b1873f82349d5ca5770a749aad9c273bf7424a078ff55a1a51a9279d23bc87c424f5707ff211037a89c18eee662d96443be4dcb49f3bb35a7f745df11224f894fde7891662eb982aeefcff73640c38399e2540111c02db4f16481de69c1e7f7d41eb23dcd0cb0f01a4a3faef0c5dc441f08ff69c761663f6c8f579b2a8747a3398a3aa745f6df568e1332ef542efbcdf70b75794d0cd45b8e264b169779a60b9cfbc078641b9e3dbf184c2d2eeca343ac4e190e8ddc495243efc861ea4df176ec21543fee16d5aaec14e65cbafbb2587e87123d4ada9cf5f081052c4a44b3a4612de33afb19284347a3ec7d528d0476c85c015872f8e3606c91fef6", 0x610}, {0x0}, {0x0}], 0x7, &(0x7f0000001d00)=[{0x18, 0x109, 0x400, "df"}, {0xd0, 0x88, 0x101, "d5bf05e7729cfa9f9355fe9def836b05ede6f32877b284065ca11fc037ed04497d3106656f151acf318533b157e5578ec8c44fc3c765a13ba5e17708b493de3d70865cdec15b0c98bbbd21577673ec006b1eb5f59a50bf27d344ef928f2b8254b67ce224dabed9e17fa490bbfcacea439ce56c4c109944afbb9c6b11b66d6d2b0602a7e27322491b13a7ca28e04914b864f8e1df07a843cea5a1e6a2cb1444e2974113923f089931af26352852f4c74850d70d4757dbe2f31852"}, {0x90, 0x119, 0x0, "773e8e4df532d20f3c2f81f71ffb9cb18647f3351b5f678a5fe7e77a3be5aa8780a852fcd0e246eb3911827e9318699078038001c587f0b8200727c0909172bb699348b2a6a652995d09e4fb00c97a881e183bc8a344da683f281d5b995f0e7c3f8d3b4fb198eafe1366c5ce255b471ec1a4b0310eecb90c49"}, {0x20, 0x0, 0x8, "185f99848be7001ec8"}, {0x18, 0x52, 0x40000000, "b126e7"}, {0x60, 0x108, 0x7, "fa2200eb483cbe7f12c99314532740cde9a519987833fe8f12e197d59b0c6c815b87b16c714dbbb1c0e119f2228ee8350fde9e8f2e9f7bb8248ea0cc4e973365c3e4a06b93fd0f5764"}], 0x210}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb1", 0x11, 0x0, 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x8000) r6 = accept4(r4, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) 6.276361785s ago: executing program 2 (id=3027): syz_emit_ethernet(0x96, &(0x7f0000000140)={@broadcast, @link_local, @val={@val={0x88a8, 0x0, 0x1, 0x404}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x6c, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x96, &(0x7f0000000140)={@broadcast, @link_local, @val={@val={0x88a8, 0x0, 0x1, 0x404}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x6c, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}}, 0x20044000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) (async) r5 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x80, 0x0, 0x7fffffff}, 0xc) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) (async) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x2c08c0) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 5.720528208s ago: executing program 1 (id=3029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xb, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x4, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.712637898s ago: executing program 0 (id=3030): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x0, 0x2, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/file0\x00', &(0x7f00000000c0)={0x40040, 0x32, 0x2}, 0x18) r0 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='gid\x93\xea\x9a\x94(\xfcu\xb8\xa4@1\xe4&)g{\x82\xd4\x9a\xe5\x11x)\xef\xe5(Snr\xc5\x0eh\xff\r\xb1\xfah\x82\xcc\xb6\v\xd3\xf1}\xd5^W\x04\xb2\xbe\x1d\xca\xae\xb2\x81\xc4.\xe6\xee\xf7\xea\x0f8\xc5', &(0x7f0000000240)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6H\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\n\xea-\xfe8\x92\xac\x16T\x83\xb7U\xc1\x95\xfc\x8cE\xff\xd9\xae\xc0;O]\x82\xbaj\xb7\xcf\x92\xeau\xae\xc972\xfe/\x02 \xe5c\x12%\x14\xc0\x94\xc5\x94\\,\xeb\xc1\xbbU\r\xb2\x89vdv\x12\xf1\xc9t\x93bM\xaa\xed\x92\xbc\xee\'\xf4\xc9\x9f&\xaa\x93\xc0\xc1\xfe\x83\xda\xdb\x85\xb5~\x98\x1e\xa4\t\xf9\x95y5$t\x1c\t\x90\x1a\x82{\x1d\xe0\f\x80\xa9\xf0\xc8\xa0\x01u]g\xa8\x83\b\xa5\xdb:w\x1a\x916`\xcc\x83/\xd0^\b\x9b\x01\x11\xb1\xd2_\xf4\x8c\x02#Q}\xb9\xce\xdeYcK\xcd\xb8\xee5\xd9\xeamZ\x0f\x85\xde\x9ac\x04\"\xc2\x9e\xb2f9kB\xe3J\xb4\xb0\xe8\xd7\xc9^n', 0x0) 5.614498571s ago: executing program 2 (id=3032): syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) (async) 5.478055554s ago: executing program 0 (id=3033): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x3, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0xb76}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0x3, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x4, 0x8}], 0xe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0000000600008095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x32, &(0x7f0000000140)=""/50, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x4}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="cc", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x20000080) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @loopback, 0x8}, 0x1c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRESDEC=0x0, @ANYRES32=r8, @ANYBLOB="ceb35f7d6811e85437897a8f78510dc895f700"], 0x1c}}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="078861d9f4fbebfb79914667e12b9907dac63b79cbd778d4985bf5d6e6d60dc8e8f87cebf9095cbefc43478852edacf2dfd3441ced56c9c6e518282dbeedc927a93355d56fc5b8c84d6fb213ced8d63568eb1df171609093a46d09fb5480b5fb763db0df694e6242cc0218ba115b03e08116447320213f9b3cc83dee3548a4d88ebc94ed1a06ed68b5c8cdc4f64db897b7a5e6662ea16892064cc6f18de9e68160dc5b57b0db4e4e099914d2968f095d98cab7b38a8d1465e0492faac8b8f59f0248f74f11f48d96951eca983bd7107237e2b10e36"], 0x8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 5.471803544s ago: executing program 1 (id=3034): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0xd135a7d64b7fc6a, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r5, {0x9, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f0000000140)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x0, 0x80000}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r10, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r12 = dup2(r11, r9) fadvise64(r12, 0x9, 0x5e23, 0x4) write$char_usb(r12, &(0x7f0000000080)="32f91db1e05b393d2c4145c8e739b5572d986d3ee18ea84933b5334d47d8466c74c7001fe31ffd04a6728137445c19289e", 0x31) 5.437765116s ago: executing program 2 (id=3035): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008200)={0x14, 0x1e, 0x1, 0xfffffffc, 0x10000, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008200)={0x14, 0x1e, 0x1, 0xfffffffc, 0x10000, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x414800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/136, 0x88}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001100)=""/4096, 0x1000}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000001c0)={[0xeeee0000, 0x5000, 0x80a0000, 0xeeee8000], 0x9, 0x20, 0xffffffffffffffff}) 5.435984451s ago: executing program 4 (id=3036): mmap(&(0x7f0000881000/0x1000)=nil, 0x1000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket(0x2a, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x204, 0x801}) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x9, @local}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x9, @local}, 0x1c) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010055, 0x0, 0x200000000000e}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 5.267771015s ago: executing program 1 (id=3037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x20008000000000a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x18, 0x2, 0x0, "31010000001400000100b64c0000005c4b7c1500", 0x30323953}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x84, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xcd}, {0x6, 0x11, 0x7ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xb}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000014}, 0x40040) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="01002c9d7000ffdbdf2504"], 0x14}}, 0x800) close_range(r6, 0xffffffffffffffff, 0x0) 5.210240127s ago: executing program 3 (id=3039): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x7, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) (async, rerun: 64) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) (async) io_uring_enter(r3, 0x47f6, 0x0, 0x700000000000000, 0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) sendmmsg$inet(r6, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000980)="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", 0x5ad}], 0x1, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}}], 0x1, 0x880) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) dup3(r9, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.013739077s ago: executing program 3 (id=3040): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0xf5ff) syz_usb_connect(0x6, 0xe6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 4.880088937s ago: executing program 1 (id=3041): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6ae9d6d7aaf2849d00000ec320626799640315d2875841d26f9eed70000", 0x20) syz_usb_connect(0x0, 0x5d, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000000c0)) 4.443794755s ago: executing program 2 (id=3042): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xda, &(0x7f0000000180)=""/218, 0xf6054b9c49695e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x1, r0, 0x1, 0x1, 0x1]}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[{0x18, 0x109, 0x400, "df"}, {0xd0, 0x88, 0x101, "d5bf05e7729cfa9f9355fe9def836b05ede6f32877b284065ca11fc037ed04497d3106656f151acf318533b157e5578ec8c44fc3c765a13ba5e17708b493de3d70865cdec15b0c98bbbd21577673ec006b1eb5f59a50bf27d344ef928f2b8254b67ce224dabed9e17fa490bbfcacea439ce56c4c109944afbb9c6b11b66d6d2b0602a7e27322491b13a7ca28e04914b864f8e1df07a843cea5a1e6a2cb1444e2974113923f089931af26352852f4c74850d70d4757dbe2f31852"}, {0x90, 0x119, 0x0, "773e8e4df532d20f3c2f81f71ffb9cb18647f3351b5f678a5fe7e77a3be5aa8780a852fcd0e246eb3911827e9318699078038001c587f0b8200727c0909172bb699348b2a6a652995d09e4fb00c97a881e183bc8a344da683f281d5b995f0e7c3f8d3b4fb198eafe1366c5ce255b471ec1a4b0310eecb90c49"}, {0x20, 0x0, 0x8, "185f99848be7001ec8"}, {0x18, 0x52, 0x40000000, "b126e7"}, {0x60, 0x108, 0x7, "fa2200eb483cbe7f12c99314532740cde9a519987833fe8f12e197d59b0c6c815b87b16c714dbbb1c0e119f2228ee8350fde9e8f2e9f7bb8248ea0cc4e973365c3e4a06b93fd0f5764"}], 0x210}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb1", 0x11, 0x0, 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x8000) r6 = accept4(r4, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) 3.660549686s ago: executing program 4 (id=3043): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x1, @random="9e035679c612", 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, &(0x7f00000003c0)={0x1, 0x135d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x2c008095) r5 = syz_io_uring_setup(0xd86, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x1, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) memfd_create(&(0x7f00000000c0)=',+!\x00', 0x54083a3df9f55981) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0xc4, 0x6000, @fd_index=0x2, 0x8, 0x1ff, 0x2, 0x14, 0x0, {0x2}}) io_uring_enter(r5, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x1, 0x1}}, 0x2e) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r11, 0x40047435, &(0x7f0000000000)=0x2) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902950003010040000904000000010100000a2401000000020102132406912026082810e50163000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd09240305000000040007"], 0x0) 3.615062632s ago: executing program 3 (id=3044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xb, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x4, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.224344196s ago: executing program 3 (id=3045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x7, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xb, 0xb}, {0xa, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2405c0e1}, 0x4008000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x41, &(0x7f00000001c0)={0x11, 0x7, r11, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r16, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r17 = socket(0x1, 0x803, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 3.113204817s ago: executing program 2 (id=3046): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xda, &(0x7f0000000180)=""/218, 0xf6054b9c49695e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x1, r0, 0x1, 0x1, 0x1]}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000600)="23e8d32682044b1aea93aa4555b24dafb496d785d0dbf07b4316168cc5a6a8dd21f376d97d75ce4960fc9312fb9bdc83b7949c4f2a43ab467980eeb1b152c47e352bd726a5133cd8015eb017ad81487f280481d1f9c4c0ce0b6b9fea711f5c639afeb7d2d788954750788986380c0a98ee1f118b24199ede4094292b9f6b62dd2a1913cc58fd7a3ac49f633632ac7e8c521596401e51844dae173a238d87f07168a59c64c68f5c5b64581739ebbd9df4b0834a26e2190aab93a140b21dbae9762b89d98b48399d1a365f028649b8f106c6c9d9b19b39bdbbca9022dffb05d58c9fee01cf884f4214", 0xe8}, {&(0x7f0000000940)="447ee3b4212bcf35d142a87fda51c05cb118230e7a8a5a6f798db6e01cacb544f783a87cf17cd21e4338f7de5c6650ac158eb6002be85f5b8ac59e399b42e5ce19a463fabafee56ad00b8ab03fd98a9dd0bcec9910762b65bfd84af48626bb83398890ed03555a7cfe19ad55a4acb18418366625066bad998fcec03d8e2299d8cb46dab90d5af855a252620a4263866013764f842f4f887a7b264257fe4b2bea9d83d004caa5907778082b6720553e7a5f069c4d19cf4198d0eaf78b190abd3b78aa8e27fec3aac72bbf1a0877b9786d9741a6d1dcaed3466123bf3946ac5b582c6333e11971a5fbc6388416e8a9595bf8faac17c0", 0xf5}, {&(0x7f0000000540)="7ac19d79dbd587f797c6100b33847253c4b3bfdb880c8f8ea479386ad5ac110de0863105748dd4c6bb2847ea8e6b2ecfdfc189b63f0c5f64a864c24880df3743f4cf78a1d1cb1e5a96d57cad2c62b0666a62dcd927ad3757ecc6453731e4be6a2ef2131d0ebd470581ee", 0x6a}, {&(0x7f0000000700)="1ebbfa809aed1fe935bf788625d5ba4ea092b3d1c3d4cacd94c6adf2e4564b2d80bcce66c257c4e27a16b51a407df5e40a6bb8f7e0c12d90e56c8490cbaffe39f9cdf808a45a7f667252ca016ca9b7c06ba1dd5dc86085f5dcc755484863496628abb0efb358af8c0373652cde4a", 0x6e}, {&(0x7f0000000b40)="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", 0x610}, {0x0}, {0x0}], 0x7, &(0x7f0000001d00)=[{0x18, 0x109, 0x400, "df"}, {0xd0, 0x88, 0x101, "d5bf05e7729cfa9f9355fe9def836b05ede6f32877b284065ca11fc037ed04497d3106656f151acf318533b157e5578ec8c44fc3c765a13ba5e17708b493de3d70865cdec15b0c98bbbd21577673ec006b1eb5f59a50bf27d344ef928f2b8254b67ce224dabed9e17fa490bbfcacea439ce56c4c109944afbb9c6b11b66d6d2b0602a7e27322491b13a7ca28e04914b864f8e1df07a843cea5a1e6a2cb1444e2974113923f089931af26352852f4c74850d70d4757dbe2f31852"}, {0x90, 0x119, 0x0, "773e8e4df532d20f3c2f81f71ffb9cb18647f3351b5f678a5fe7e77a3be5aa8780a852fcd0e246eb3911827e9318699078038001c587f0b8200727c0909172bb699348b2a6a652995d09e4fb00c97a881e183bc8a344da683f281d5b995f0e7c3f8d3b4fb198eafe1366c5ce255b471ec1a4b0310eecb90c49"}, {0x20, 0x0, 0x8, "185f99848be7001ec8"}, {0x18, 0x52, 0x40000000, "b126e7"}, {0x60, 0x108, 0x7, "fa2200eb483cbe7f12c99314532740cde9a519987833fe8f12e197d59b0c6c815b87b16c714dbbb1c0e119f2228ee8350fde9e8f2e9f7bb8248ea0cc4e973365c3e4a06b93fd0f5764"}], 0x210}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb1", 0x11, 0x0, 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x8000) r6 = accept4(r4, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) 2.637576161s ago: executing program 3 (id=3047): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000000180), 0x80, 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000380), 0x2) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x8800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{0x304}, "3d186e85f3a07d09", "00fd00", "276dd157", "3800000081fd0182"}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r7) 2.304230426s ago: executing program 0 (id=3048): nanosleep(0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x48880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)={0x10000000, 0x2}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0xaee2, 0x2, 0x2, 0x1f7}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000400)=0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.82048156s ago: executing program 2 (id=3049): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x20, 0x24, 0xc3, {0xc3, 0x23, "0e47225514f9c3f1bf718dbf92c5fd2c04d6080a997a160239d0b362a04f6ee4393dbb7cea9f7a69cbd201f40debc7864bab2ebd26dd11c841d40bb92f93573676b506f741a82598543eae5489b3b00aa6a589f8fe9dae725e1ddb385831b3c6b1bef2465e4ed0013047ba4564295fa1e65edf061fa32fd97248fb113d860cd1cdc26d8f621e68607f46401ccc33fe8a674b1c72cd4c6b9d66b0e92cf5d6b479e2f96d77cc10ac099f327ee7b27ca64e7e52b7cac71886b22d247e2f070b17e5cc"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f0000000300)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x9, "c7c97753"}, @global=@item_012={0x1, 0x1, 0x5, "e3"}, @global=@item_012={0x1, 0x1, 0x8, 'i'}, @main=@item_012={0x1, 0x0, 0x8, "cd"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd15, 0x14, 0x1, {0x22, 0xf3e}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="000ec6000000f1cf84323c2dc44874b6592e7a0fdb14a29a22dc06a3c4c999f823aaae4aad6fde0bfeb1ff20d9aed8c9d1ef0feb84f4e1364c0830cd9f7d09298266e5d2d68c58a292c10a8d96eaf7f6db0860b8028da18a7fb79b4a63bf1e794216c6588be60fe374a4ae28f45ce10ecd2307b55841338db5b18272730802be5510a35674dbb051e31c0200000000000000410a0afdbf329b6458e4be385a11ebaf6a2be48cd30c4d6ef65d613ed59020b537e33239aa2f6f44c5838820cb9af4f27cf6ebe442db84a400e6176ade60342ab24c78"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xbc}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x1, 0x32, "3d14c17f72f98532ed273fed8e49d223a30dfb357c5647e28bf605ab55b481164970d87dc95f5ba5c5e0621fe882017f6ba1"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x25}}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022050052b5"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xd931d3864d39dd5f) close(r4) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={[0xfffffffffffffffd, &(0x7f0000000380)='GPL\x00']}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000140)={0x2, 0x40000000000009a, 0x0, 0x6, &(0x7f0000001600)}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0xfffffffe}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x108) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x12, r6}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) 1.679871739s ago: executing program 1 (id=3050): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r3, &(0x7f0000001300)=""/112, 0x70) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x6}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xfffffffffffffff6, 0x80000000440, 0x1, 0x5, 0xffffeffffffffffe, 0x2004c6, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x89b3, 0x2000, 0x4, 0x5], 0x3b390000, 0x200306}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f00000006c0)=""/77, 0x4d) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x2fd, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r6, @ANYBLOB="400000001000090600"/20, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa6867215b55c42d37b9a100eb2ec063287898534c013c8f11d376167badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x81) 897.235398ms ago: executing program 0 (id=3051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 582.821546ms ago: executing program 0 (id=3052): syz_usb_connect(0x6, 0xac2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x4, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0x1, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x40, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x9, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0xfff, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xb9a61c43}, 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r7 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r7, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000010000000059caf493d63c473dd8bcad97f80000", @ANYRES32=r2], 0x3c}}, 0x0) 339.151188ms ago: executing program 3 (id=3053): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0006000d0085a168d0bf46d3234565360064", 0x37, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(0xfffffffffffffffc, 0x9, 0x4, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0x28, "2948fe9732d44528ddf64c2f63430ccb39adee7ee149cf7b558560e1dca0453ad61021974c528f27"}, &(0x7f0000000640)=0x30) socket(0x10, 0x80002, 0x2) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x800, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x8, 0x9}, @hopopts={0x8}]}}}}}}}, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x2, 0x0, 0xa, &(0x7f0000000180)}) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0x9, 0x3ff}], 0xca, 0x1, 0x6, 0x3}}) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 0s ago: executing program 4 (id=3054): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f00000001c0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="000029bdb13105063c850c8df900", @ANYRES16=r5, @ANYBLOB="01000000000000000000050000000800090008000000180001801400020073697430000000000000000000000000050007"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aa"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): im4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.496439][T15837] Bluetooth: hci5: command tx timeout [ 807.539979][T15843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.555255][T15843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.671354][T15843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.705667][T15843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.808884][T15843] team0: Port device  removed [ 807.905374][T15843] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.940119][T15843] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.761653][T15843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 808.805320][T15843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 808.836209][T15843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 808.865779][T15843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 809.446369][T15843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.574158][T15837] Bluetooth: hci5: command tx timeout [ 809.580269][T15843] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.612071][T15949] loop3: detected capacity change from 0 to 7 [ 809.620781][T15949] Dev loop3: unable to read RDB block 7 [ 809.628381][T15949] loop3: unable to read partition table [ 809.634880][T15949] loop3: partition table beyond EOD, truncated [ 809.654237][T13571] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.661430][T13571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.702025][T13571] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.709185][T13571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.767988][T15949] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 809.794063][T15843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 809.859094][T15843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.961301][T15843] veth0_vlan: entered promiscuous mode [ 810.010598][T15843] veth1_vlan: entered promiscuous mode [ 810.064016][T15955] FAULT_INJECTION: forcing a failure. [ 810.064016][T15955] name failslab, interval 1, probability 0, space 0, times 0 [ 810.106779][T15955] CPU: 1 UID: 0 PID: 15955 Comm: syz.1.2604 Not tainted syzkaller #0 PREEMPT(full) [ 810.106806][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 810.106815][T15955] Call Trace: [ 810.106821][T15955] [ 810.106828][T15955] dump_stack_lvl+0x189/0x250 [ 810.106854][T15955] ? __pfx____ratelimit+0x10/0x10 [ 810.106875][T15955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.106893][T15955] ? __pfx__printk+0x10/0x10 [ 810.106910][T15955] ? __pfx_fib_rules_lookup+0x10/0x10 [ 810.106934][T15955] ? l3mdev_update_flow+0x29/0x640 [ 810.106953][T15955] should_fail_ex+0x414/0x560 [ 810.106979][T15955] should_failslab+0xa8/0x100 [ 810.106995][T15955] kmem_cache_alloc_noprof+0x74/0x6e0 [ 810.107013][T15955] ? __pfx_find_exception+0x10/0x10 [ 810.107034][T15955] ? dst_alloc+0x105/0x170 [ 810.107060][T15955] dst_alloc+0x105/0x170 [ 810.107079][T15955] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 810.107105][T15955] ? ip_route_output_key_hash+0xc1/0x280 [ 810.107125][T15955] ip_route_output_key_hash+0x174/0x280 [ 810.107146][T15955] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 810.107169][T15955] ? __pfx_call_rcu+0x10/0x10 [ 810.107189][T15955] ? percpu_counter_add_batch+0xea/0x1e0 [ 810.107211][T15955] ip_route_output_flow+0x2a/0x150 [ 810.107227][T15955] ? security_sk_classify_flow+0x70/0x180 [ 810.107252][T15955] __ip4_datagram_connect+0x9a5/0x1270 [ 810.107295][T15955] ip4_datagram_connect+0x2d/0x50 [ 810.107313][T15955] io_connect+0x1d9/0x640 [ 810.107334][T15955] ? __pfx_io_connect+0x10/0x10 [ 810.107350][T15955] ? __fget_files+0x2a/0x420 [ 810.107363][T15955] ? __fget_files+0x3a0/0x420 [ 810.107377][T15955] __io_issue_sqe+0x181/0x4b0 [ 810.107396][T15955] ? io_file_get_normal+0x101/0x2f0 [ 810.107415][T15955] io_issue_sqe+0x165/0x1060 [ 810.107440][T15955] io_submit_sqes+0xa54/0x1e60 [ 810.107479][T15955] __se_sys_io_uring_enter+0x2df/0x2b20 [ 810.107512][T15955] ? ksys_write+0x1cb/0x250 [ 810.107534][T15955] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 810.107551][T15955] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 810.107573][T15955] ? __pfx_vfs_write+0x10/0x10 [ 810.107594][T15955] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.107617][T15955] ? __fget_files+0x3a0/0x420 [ 810.107634][T15955] ? fput+0xa0/0xd0 [ 810.107649][T15955] ? ksys_write+0x22a/0x250 [ 810.107674][T15955] ? __pfx_ksys_write+0x10/0x10 [ 810.107695][T15955] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 810.107716][T15955] do_syscall_64+0xfa/0xfa0 [ 810.107735][T15955] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.107757][T15955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.107770][T15955] ? clear_bhb_loop+0x60/0xb0 [ 810.107787][T15955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.107800][T15955] RIP: 0033:0x7f465798f6c9 [ 810.107813][T15955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.107824][T15955] RSP: 002b:00007f46588e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 810.107839][T15955] RAX: ffffffffffffffda RBX: 00007f4657be5fa0 RCX: 00007f465798f6c9 [ 810.107849][T15955] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000009 [ 810.107858][T15955] RBP: 00007f46588e0090 R08: 0000000000000000 R09: 0000000000000000 [ 810.107866][T15955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.107874][T15955] R13: 00007f4657be6038 R14: 00007f4657be5fa0 R15: 00007f4657d0fa28 [ 810.107897][T15955] [ 810.508985][T15958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2603'. [ 810.522756][T15958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2603'. [ 810.560064][T15843] veth0_macvtap: entered promiscuous mode [ 810.589816][T15843] veth1_macvtap: entered promiscuous mode [ 810.689098][T15843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.870118][T15843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.915457][T13571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.924613][T13571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.938227][T13571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.989401][T13571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.252469][T15965] xt_CT: No such helper "pptp" [ 811.658582][T15837] Bluetooth: hci5: command tx timeout [ 811.829687][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.848598][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.922235][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.932051][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.514030][T15170] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 812.806584][T15170] usb 3-1: Using ep0 maxpacket: 8 [ 812.826403][T15170] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 812.826443][T15170] usb 3-1: config 0 has no interface number 1 [ 812.826508][T15170] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 813.099352][T15170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.114852][T15170] usb 3-1: config 0 descriptor?? [ 813.283746][ T5883] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 813.319725][T15170] qcserial 3-1:0.2: Qualcomm USB modem converter detected [ 813.567146][T15170] usb 3-1: USB disconnect, device number 96 [ 813.572556][T15170] qcserial 3-1:0.2: device disconnected [ 813.575922][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.575952][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.575975][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.576014][ T5883] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 813.576036][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.584153][ T5883] usb 2-1: config 0 descriptor?? [ 813.793474][ T5883] ryos 0003:1E7D:3232.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 814.618747][T15999] loop3: detected capacity change from 0 to 7 [ 814.655387][T15999] Dev loop3: unable to read RDB block 7 [ 814.687826][T15999] loop3: unable to read partition table [ 814.708613][T15999] loop3: partition table beyond EOD, truncated [ 814.755331][T15999] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 815.030204][T15168] usb 2-1: USB disconnect, device number 118 [ 815.522236][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.530702][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.532339][T16006] loop7: detected capacity change from 0 to 7 [ 815.565810][ C0] blk_print_req_error: 5 callbacks suppressed [ 815.565872][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.581213][ C0] buffer_io_error: 5 callbacks suppressed [ 815.581301][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.613648][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.622888][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.633827][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.653779][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.662955][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.675529][T16011] tipc: Enabled bearer , priority 0 [ 815.685055][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.694300][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.703665][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.712863][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.721624][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.730908][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.748166][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.757350][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.765728][T16006] ldm_validate_partition_table(): Disk read failed. [ 815.774423][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.783650][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.791760][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 815.800918][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.821154][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 815.830339][T16006] Dev loop7: unable to read RDB block 0 [ 815.837127][T16011] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 815.855623][T16006] loop7: unable to read partition table [ 815.865249][T16011] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 815.903948][T16006] loop7: partition table beyond EOD, truncated [ 815.930301][T16006] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 815.972207][T16011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2618'. [ 816.017515][ T5199] ldm_validate_partition_table(): Disk read failed. [ 816.027912][ T5199] Dev loop7: unable to read RDB block 0 [ 816.028463][T16012] tipc: Resetting bearer [ 816.044400][ T5199] loop7: unable to read partition table [ 816.050297][ T5199] loop7: partition table beyond EOD, truncated [ 816.747428][T16020] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 816.904511][T16029] netlink: 'syz.1.2620': attribute type 13 has an invalid length. [ 817.271334][T16032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.316369][T16032] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 818.347576][T16046] IPv6: Can't replace route, no match found [ 818.406498][T16050] program syz.1.2630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 818.801041][T16045] syz.2.2626 (16045): drop_caches: 2 [ 820.645367][T16052] netlink: 'syz.0.2629': attribute type 13 has an invalid length. [ 820.675581][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 820.985717][T16058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.012486][T16058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.028716][T16058] netlink: 'syz.3.2632': attribute type 11 has an invalid length. [ 821.061998][T16058] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2632'. [ 821.424285][T16067] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 821.589688][T16069] input: syz1 as /devices/virtual/input/input67 [ 821.613241][T16071] program syz.0.2635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.644778][T16074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 821.746726][ T5883] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 821.804626][T16083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2637'. [ 821.964064][ T5883] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 821.973292][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.998875][T16092] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2639'. [ 822.155709][ T5883] usb 2-1: Product: syz [ 822.160034][ T5883] usb 2-1: Manufacturer: syz [ 822.165529][ T5883] usb 2-1: SerialNumber: syz [ 822.173486][ T5883] usb 2-1: config 0 descriptor?? [ 822.209213][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 822.454961][ T9] usb 3-1: device descriptor read/64, error -71 [ 822.501983][ T5883] usb 2-1: USB disconnect, device number 119 [ 822.693858][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 822.709152][T16065] input: syz0 as /devices/virtual/input/input66 [ 822.797106][T16065] tap0: tun_chr_ioctl cmd 1074025678 [ 822.802554][T16065] tap0: group set to 0 [ 822.833794][ T9] usb 3-1: device descriptor read/64, error -71 [ 822.982689][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2642'. [ 822.992082][ T9] usb usb3-port1: attempt power cycle [ 823.614018][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 823.694563][ T9] usb 3-1: device descriptor read/8, error -71 [ 823.973859][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 824.006903][ T9] usb 3-1: device descriptor read/8, error -71 [ 824.184261][ T9] usb usb3-port1: unable to enumerate USB device [ 824.283959][T16111] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 824.343824][T13100] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 824.406150][ T5883] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 824.504213][T13100] usb 2-1: Using ep0 maxpacket: 16 [ 824.511260][T13100] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 824.521031][T13100] usb 2-1: config 0 has no interface number 0 [ 824.527627][T13100] usb 2-1: config 0 interface 237 has no altsetting 0 [ 824.537876][T13100] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 824.611073][T16119] x_tables: ip_tables: osf match: only valid for protocol 6 [ 824.621238][ T5883] usb 1-1: device descriptor read/64, error -71 [ 825.073214][T13100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.081663][T13100] usb 2-1: Product: syz [ 825.086287][T13100] usb 2-1: Manufacturer: syz [ 825.090957][T13100] usb 2-1: SerialNumber: syz [ 825.123922][ T5883] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 825.141812][T13100] usb 2-1: config 0 descriptor?? [ 825.151658][T13100] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 found [ 825.275813][ T5883] usb 1-1: device descriptor read/64, error -71 [ 825.394054][T13100] snd_usb_podhd 2-1:0.237: cannot get proper max packet size [ 825.401803][T13100] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 now disconnected [ 825.409887][ T5883] usb usb1-port1: attempt power cycle [ 825.430822][T16125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2649'. [ 825.442695][T16125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2649'. [ 825.515500][T13100] snd_usb_podhd 2-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 825.598164][T15170] usb 2-1: USB disconnect, device number 120 [ 825.763727][ T5883] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 825.823915][ T5883] usb 1-1: device descriptor read/8, error -71 [ 826.111331][ T5883] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 826.140232][ T5883] usb 1-1: device descriptor read/8, error -71 [ 826.264200][ T5883] usb usb1-port1: unable to enumerate USB device [ 826.732806][T16141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.877872][T16147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2655'. [ 827.576100][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 827.576122][ T30] audit: type=1326 audit(1762627200.358:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 827.715806][ T30] audit: type=1326 audit(1762627200.358:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 827.939183][ T30] audit: type=1326 audit(1762627200.458:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 828.108292][T16167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2661'. [ 828.170954][ T30] audit: type=1326 audit(1762627200.458:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 828.240207][ T30] audit: type=1326 audit(1762627200.458:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 828.493399][ T30] audit: type=1326 audit(1762627200.458:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 828.530514][ T30] audit: type=1326 audit(1762627200.458:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 828.906199][ T30] audit: type=1326 audit(1762627200.458:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 828.960548][ T30] audit: type=1326 audit(1762627200.458:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 829.081111][ T30] audit: type=1326 audit(1762627200.478:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.4.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 829.416708][T16184] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2665'. [ 829.725797][T16186] loop3: detected capacity change from 0 to 7 [ 829.748908][T16186] Dev loop3: unable to read RDB block 7 [ 829.759314][T16186] loop3: unable to read partition table [ 829.773202][T16186] loop3: partition table beyond EOD, truncated [ 829.794101][T16186] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 832.806528][T16225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2677'. [ 833.223861][T13100] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 833.346332][T16241] macsec3: entered promiscuous mode [ 833.358407][T16241] macsec0: entered promiscuous mode [ 833.364424][T13100] usb 2-1: device descriptor read/64, error -71 [ 833.473210][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.513931][T15168] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 833.520256][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.543090][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.575835][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.636289][T13100] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 833.694004][T15168] usb 5-1: device descriptor read/64, error -71 [ 833.786851][T13100] usb 2-1: device descriptor read/64, error -71 [ 833.854002][T15170] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 833.959809][T13100] usb usb2-port1: attempt power cycle [ 834.063494][T15168] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 834.208635][T15170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.220694][T15170] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 834.241107][T15170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.275700][T15168] usb 5-1: device descriptor read/64, error -71 [ 834.306347][T15170] usb 3-1: config 0 descriptor?? [ 834.380669][T13100] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 834.396798][T15168] usb usb5-port1: attempt power cycle [ 834.515879][T13100] usb 2-1: device descriptor read/8, error -71 [ 834.766559][T16258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.777058][T16258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.786930][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2686'. [ 834.818833][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.827455][T13100] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 834.855670][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.868462][T13100] usb 2-1: device descriptor read/8, error -71 [ 834.884103][T15168] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 834.886456][T16245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.942368][T16258] fuse: Unknown parameter 'rootmod' [ 834.948139][T16245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.979976][T16245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.989082][T15168] usb 5-1: device descriptor read/8, error -71 [ 834.989611][T13100] usb usb2-port1: unable to enumerate USB device [ 835.065851][T16245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.243885][T15168] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 835.285292][T15170] usbhid 3-1:0.0: can't add hid device: -71 [ 835.504601][T15168] usb 5-1: device descriptor read/8, error -71 [ 835.521378][T15170] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 835.585464][T15170] usb 3-1: USB disconnect, device number 101 [ 835.684117][T15168] usb usb5-port1: unable to enumerate USB device [ 836.423733][ T1213] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 836.593824][ T1213] usb 3-1: Using ep0 maxpacket: 32 [ 836.610619][ T1213] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 836.620503][ T1213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.643311][ T1213] usb 3-1: config 0 has no interface number 0 [ 836.666281][ T1213] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 836.695141][ T1213] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 836.704813][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.712978][ T1213] usb 3-1: Product: syz [ 836.731303][ T1213] usb 3-1: Manufacturer: syz [ 836.748959][ T1213] usb 3-1: SerialNumber: syz [ 836.782109][ T1213] usb 3-1: config 0 descriptor?? [ 836.817078][ T1213] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 836.870128][ T1213] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 837.063703][ T1213] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 837.161557][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 837.161614][ T30] audit: type=1326 audit(1762627209.948:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 837.271462][ T30] audit: type=1326 audit(1762627209.958:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 837.293999][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.411337][ T1213] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 837.444297][ T1213] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 837.482360][ T30] audit: type=1326 audit(1762627209.958:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 837.527877][ T1213] usb 3-1: USB disconnect, device number 102 [ 837.581096][ T1213] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 837.754035][ T30] audit: type=1326 audit(1762627209.968:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 837.776522][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.871219][ T30] audit: type=1326 audit(1762627209.968:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 837.893758][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.933502][ T30] audit: type=1326 audit(1762627209.968:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 838.101173][ T30] audit: type=1326 audit(1762627209.968:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 838.220717][ T30] audit: type=1326 audit(1762627209.988:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 838.258942][ T30] audit: type=1326 audit(1762627209.988:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 838.339738][ T30] audit: type=1326 audit(1762627210.038:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.1.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 838.831814][T16307] sg_write: data in/out 134217696/14 bytes for SCSI command 0x0-- guessing data in; [ 838.831814][T16307] program syz.3.2699 not setting count and/or reply_len properly [ 840.385405][T15170] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 840.557816][T15170] usb 5-1: Using ep0 maxpacket: 32 [ 840.586165][T15170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.642327][T15170] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 840.682699][T15170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.758529][T15170] usb 5-1: config 0 descriptor?? [ 840.910349][T16325] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 841.746265][T15170] asus 0003:048D:CE50.0017: unknown main item tag 0x3 [ 841.791873][T15170] asus 0003:048D:CE50.0017: item fetching failed at offset 4/7 [ 841.811604][T15170] asus 0003:048D:CE50.0017: Asus hid parse failed: -22 [ 841.874331][T15170] asus 0003:048D:CE50.0017: probe with driver asus failed with error -22 [ 841.980577][T15170] usb 5-1: USB disconnect, device number 16 [ 842.275443][T16337] ip6tnl0: Caught tx_queue_len zero misconfig [ 842.513728][T15170] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 843.118713][T16359] xt_CT: No such helper "pptp" [ 843.184607][ T1213] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 843.346143][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 843.360595][ T1213] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 843.376163][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.393490][ T1213] usb 3-1: Product: syz [ 843.402713][ T1213] usb 3-1: Manufacturer: syz [ 843.411843][ T1213] usb 3-1: SerialNumber: syz [ 843.456223][ T1213] usb 3-1: config 0 descriptor?? [ 843.669721][T16361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.679505][T16361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.970964][ T1213] usb 3-1: USB disconnect, device number 103 [ 844.142649][T12952] udevd[12952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.655696][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 844.656790][ T30] audit: type=1326 audit(1762627217.368:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 844.827861][ T30] audit: type=1326 audit(1762627217.368:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 844.850579][ C1] vkms_vblank_simulate: vblank timer overrun [ 844.869156][ T30] audit: type=1326 audit(1762627217.368:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 844.895579][ T30] audit: type=1326 audit(1762627217.368:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 844.919749][ T30] audit: type=1326 audit(1762627217.368:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 845.060427][ T30] audit: type=1326 audit(1762627217.368:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 845.082912][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.203124][ T30] audit: type=1326 audit(1762627217.368:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 845.426003][ T30] audit: type=1326 audit(1762627217.368:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 845.448290][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.644347][T16382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2718'. [ 845.656219][T16382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2718'. [ 845.784394][T13100] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 845.869236][ T30] audit: type=1326 audit(1762627217.368:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 845.957165][T13100] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 846.113717][ T30] audit: type=1326 audit(1762627217.368:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.4.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f659418f6c9 code=0x7ffc0000 [ 846.117353][T13100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.308646][T13100] usb 2-1: Product: syz [ 846.318826][T13100] usb 2-1: Manufacturer: syz [ 846.328966][T13100] usb 2-1: SerialNumber: syz [ 846.427697][T15168] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 846.429863][T13100] usb 2-1: config 0 descriptor?? [ 846.492498][T13100] hub 2-1:0.0: bad descriptor, ignoring hub [ 846.533011][T13100] hub 2-1:0.0: probe with driver hub failed with error -5 [ 846.565034][T13100] f81232 2-1:0.0: f81534a converter detected [ 846.624627][T15168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.674026][T15168] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 846.720046][T15168] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 846.749030][T13100] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 846.761864][T13100] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 846.785819][T15168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.855950][T13100] usb 2-1: USB disconnect, device number 126 [ 846.865613][T15168] usb 1-1: config 0 descriptor?? [ 846.889128][T13100] f81232 2-1:0.0: device disconnected [ 847.059077][T16393] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 847.143652][T15168] usb 1-1: USB disconnect, device number 20 [ 847.583750][T15168] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 847.797494][T15168] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 847.825624][T15168] usb 5-1: config 0 has no interface number 0 [ 847.842209][T15168] usb 5-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 847.864131][T15168] usb 5-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.875763][T15168] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 847.889407][T15168] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 847.898654][T15168] usb 5-1: Manufacturer: syz [ 848.041180][T15168] usb 5-1: config 0 descriptor?? [ 848.081878][T16418] kvm: pic: non byte write [ 848.087510][T16418] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 848.196024][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2728'. [ 848.208176][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2728'. [ 848.277176][T15168] cxacru 5-1:0.109: cxacru_bind: interface has incorrect endpoints [ 848.434219][T15168] cxacru 5-1:0.109: usbatm_usb_probe: bind failed: -19! [ 848.645962][T15168] usb 5-1: USB disconnect, device number 17 [ 849.481328][T16435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.500865][T16435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.634241][T16438] x_tables: ip_tables: osf match: only valid for protocol 6 [ 850.320998][T15170] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 850.447693][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.457481][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.493688][T15170] usb 3-1: Using ep0 maxpacket: 32 [ 850.508017][T15170] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 850.526310][T15170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.566637][T15170] usb 3-1: config 0 descriptor?? [ 850.744158][T15168] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 850.795355][T15170] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 850.807054][T15170] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 850.809055][T15170] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 850.809116][T15170] usb 3-1: media controller created [ 850.903932][T15168] usb 5-1: Using ep0 maxpacket: 32 [ 850.905978][T15168] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 850.906010][T15168] usb 5-1: config 0 has no interface number 0 [ 850.906060][T15168] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 850.908751][T15168] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 850.908786][T15168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.908808][T15168] usb 5-1: Product: syz [ 850.908825][T15168] usb 5-1: Manufacturer: syz [ 850.908842][T15168] usb 5-1: SerialNumber: syz [ 850.912631][T15168] usb 5-1: config 0 descriptor?? [ 850.991860][T15170] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.181839][T16445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 851.205064][T15170] DVB: Unable to find symbol dib7000p_attach() [ 851.205087][T15170] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 851.555949][T16445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 851.613789][T15168] net1080 5-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 5a:f8:a5:36:1b:2f [ 851.633454][T15170] rc_core: IR keymap rc-dib0700-rc5 not found [ 851.633479][T15170] Registered IR keymap rc-empty [ 851.752090][T16460] x_tables: ip_tables: osf match: only valid for protocol 6 [ 851.784247][ T1213] usb 5-1: USB disconnect, device number 18 [ 851.808660][ T1213] net1080 5-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 852.502182][T16473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.515300][T16473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.261964][ T1213] IPVS: starting estimator thread 0... [ 853.349433][T16498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.385659][T16493] IPVS: using max 30 ests per chain, 72000 per kthread [ 853.394304][T16498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.344352][ T5898] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 854.523956][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 854.536196][ T5898] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 854.557425][ T5898] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 854.663978][ T5898] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 854.683620][ T5898] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 854.734670][ T5898] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 854.864114][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.023631][ T5898] usb 1-1: Product: syz [ 855.027913][ T5898] usb 1-1: Manufacturer: syz [ 855.134808][ T5898] usb 1-1: SerialNumber: syz [ 855.207441][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 855.218389][T16524] x_tables: ip_tables: osf match: only valid for protocol 6 [ 855.267413][ T5898] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input69 [ 855.464121][ T5898] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 855.472456][ T5898] (id 0x00) [ 855.586806][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2749'. [ 855.626942][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2749'. [ 856.073655][ T5898] rc_core: IR keymap rc-imon-pad not found [ 856.080442][T15170] dvb-usb: could not initialize remote control. [ 856.090852][T15170] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 856.099153][ T5898] Registered IR keymap rc-empty [ 856.144841][ T5898] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 856.183828][ T5898] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 856.221089][ T5898] imon:send_packet: packet tx failed (-71) [ 856.244335][ T5898] imon 1-1:155.0: remote input dev register failed [ 856.251185][ T5898] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 856.301759][T13100] usb 3-1: USB disconnect, device number 104 [ 856.344031][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 856.408613][ T5898] imon 1-1:155.0: unable to initialize intf0, err 0 [ 856.427872][T13100] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 856.450986][ T5898] imon:imon_probe: failed to initialize context! [ 856.494222][ T5898] imon 1-1:155.0: unable to register, err -19 [ 856.504504][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 856.527607][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.531866][ T5898] usb 1-1: USB disconnect, device number 21 [ 856.550885][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 856.604383][ T9] usb 2-1: New USB device found, idVendor=05dd, idProduct=020a, bcdDevice=86.c2 [ 856.624357][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.700655][ T9] usb 2-1: config 0 descriptor?? [ 856.968863][T16537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.000594][T16537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.188156][T16537] xt_cgroup: invalid path, errno=-2 [ 857.269478][ T9] usb 2-1: USB disconnect, device number 127 [ 857.670983][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2756'. [ 857.699474][T16549] vim2m vim2m.0: vidioc_s_fmt queue busy [ 858.519018][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 858.519037][ T30] audit: type=1326 audit(1762627231.308:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 858.613522][ T30] audit: type=1326 audit(1762627231.308:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 858.737675][ T30] audit: type=1326 audit(1762627231.308:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 858.828924][ T30] audit: type=1326 audit(1762627231.308:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 858.946492][ T30] audit: type=1326 audit(1762627231.308:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x7ffc0000 [ 859.279794][T16568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.295423][T16567] netlink: 'syz.1.2763': attribute type 4 has an invalid length. [ 859.316271][T16568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.336563][T16569] netlink: 'syz.1.2763': attribute type 4 has an invalid length. [ 859.414249][ T9] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 859.496773][T16578] usb usb8: usbfs: process 16578 (syz.1.2765) did not claim interface 0 before use [ 859.507238][T16578] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 859.519123][T16578] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2765'. [ 859.544339][ T9] usb 3-1: device descriptor read/64, error -71 [ 859.640224][T16579] netlink: 372 bytes leftover after parsing attributes in process `syz.0.2757'. [ 859.669728][T16579] netlink: 'syz.0.2757': attribute type 13 has an invalid length. [ 859.785194][ T9] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 859.924635][ T9] usb 3-1: device descriptor read/64, error -71 [ 860.045025][ T9] usb usb3-port1: attempt power cycle [ 860.112037][T16584] x_tables: ip_tables: osf match: only valid for protocol 6 [ 860.594282][ T9] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 860.896798][ T9] usb 3-1: device descriptor read/8, error -71 [ 861.194541][T13100] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 861.202371][ T9] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 861.265023][ T1213] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 861.289091][ T9] usb 3-1: device descriptor read/8, error -71 [ 861.356525][T13100] usb 5-1: not running at top speed; connect to a high speed hub [ 861.366352][T13100] usb 5-1: config 1 has an invalid interface number: 74 but max is 0 [ 861.384873][T13100] usb 5-1: config 1 has no interface number 0 [ 861.420508][T13100] usb 5-1: config 1 interface 74 has no altsetting 0 [ 861.436667][ T9] usb usb3-port1: unable to enumerate USB device [ 861.514208][T13100] usb 5-1: New USB device found, idVendor=046d, idProduct=6890, bcdDevice=22.be [ 861.530392][T16602] rtc_cmos 00:00: Alarms can be up to one day in the future [ 861.538752][T13100] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=17 [ 861.548073][T13100] usb 5-1: Product: syz [ 861.555920][T13100] usb 5-1: Manufacturer: syz [ 861.560573][T13100] usb 5-1: SerialNumber: syz [ 861.581968][ T1213] usb 2-1: config 0 has no interfaces? [ 861.595876][ T1213] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 861.614218][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.623356][ T1213] usb 2-1: Product: syz [ 861.632169][ T1213] usb 2-1: Manufacturer: syz [ 861.637399][ T1213] usb 2-1: SerialNumber: syz [ 861.696846][ T1213] usb 2-1: config 0 descriptor?? [ 861.924196][T13100] usb 5-1: unknown interface protocol 0x55, assuming v1 [ 861.980970][T16608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2771'. [ 862.000395][T13100] usb 5-1: cannot find UAC_HEADER [ 862.756042][T16595] tipc: Disabling bearer [ 862.770969][T16610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2771'. [ 862.801327][T13100] snd-usb-audio 5-1:1.74: probe with driver snd-usb-audio failed with error -22 [ 862.827479][T13100] usb 5-1: USB disconnect, device number 19 [ 863.032145][T12936] udevd[12936]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.223280][T16595] netdevsim netdevsim1 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 863.438645][T16616] xt_cgroup: invalid path, errno=-2 [ 863.797271][T13100] IPVS: starting estimator thread 0... [ 863.934345][T16624] IPVS: using max 38 ests per chain, 91200 per kthread [ 865.017142][T15177] usb 2-1: USB disconnect, device number 2 [ 865.450045][T16649] netlink: 'syz.0.2783': attribute type 10 has an invalid length. [ 865.491450][T16649] batman_adv: batadv0: Adding interface: netdevsim0 [ 865.588133][T16649] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.675209][T16649] batman_adv: batadv0: Interface activated: netdevsim0 [ 865.955889][T16652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.965004][T16652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.974013][T16652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.171603][T16638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.245186][T16638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.472331][ T1213] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 867.644270][ T1213] usb 1-1: Using ep0 maxpacket: 32 [ 867.664610][ T1213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.667258][ T1213] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 867.667285][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.667301][ T1213] usb 1-1: Product: syz [ 867.667313][ T1213] usb 1-1: Manufacturer: syz [ 867.667325][ T1213] usb 1-1: SerialNumber: syz [ 867.669616][ T1213] usb 1-1: config 0 descriptor?? [ 867.673498][ T1213] usb 1-1: bad CDC descriptors [ 867.706728][ T1213] usb 1-1: unsupported MDLM descriptors [ 868.061789][T16676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.097874][T16676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.153717][ T30] audit: type=1326 audit(1762627240.938:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 868.200166][T15177] usb 1-1: USB disconnect, device number 22 [ 868.238554][ T30] audit: type=1326 audit(1762627240.968:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 868.264604][T16699] openvswitch: netlink: Duplicate key (type 21). [ 868.265594][ T30] audit: type=1326 audit(1762627240.968:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 868.323679][ T30] audit: type=1326 audit(1762627240.968:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 868.348364][ T30] audit: type=1326 audit(1762627240.978:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 868.383036][ T30] audit: type=1326 audit(1762627240.978:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 868.408996][ T30] audit: type=1326 audit(1762627240.978:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 868.431487][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.439157][ T30] audit: type=1326 audit(1762627240.978:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 868.611463][ T30] audit: type=1326 audit(1762627240.978:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 868.633939][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.853712][ T30] audit: type=1326 audit(1762627240.978:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee7db8f6c9 code=0x7ffc0000 [ 869.164172][ T5494] netdevsim netdevsim1 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 869.334690][ T1213] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 869.518215][ T1213] usb 1-1: Using ep0 maxpacket: 16 [ 869.526308][ T1213] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 869.535626][ T1213] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 869.709657][ T1213] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 869.733150][ T1213] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 869.751868][ T1213] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 869.774158][ T1213] usb 1-1: config 0 has no interface number 0 [ 869.805270][ T1213] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 869.857807][ T1213] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 869.914244][ T1213] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 869.937039][ T1213] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.032249][ T1213] usb 1-1: config 0 interface 125 has no altsetting 0 [ 870.046170][ T1213] usb 1-1: config 0 interface 125 has no altsetting 2 [ 870.077715][ T1213] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 870.099769][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.154865][ T1213] usb 1-1: Product: syz [ 870.176742][ T1213] usb 1-1: Manufacturer: syz [ 870.194821][ T1213] usb 1-1: SerialNumber: syz [ 870.235287][ T1213] usb 1-1: config 0 descriptor?? [ 870.290018][ T1213] usb 1-1: selecting invalid altsetting 2 [ 870.424232][T13100] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 870.554194][T13100] usb 3-1: device descriptor read/64, error -71 [ 870.794405][T13100] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 870.999417][T13100] usb 3-1: device descriptor read/64, error -71 [ 871.114148][T13100] usb usb3-port1: attempt power cycle [ 871.193678][T15177] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 871.334671][ T1213] get_1284_register timeout [ 871.343691][T15177] usb 2-1: Using ep0 maxpacket: 8 [ 871.350597][ C0] usb 1-1: async_complete: urb error -104 [ 871.356534][ C0] usb 1-1: async_complete: urb error -104 [ 871.362379][ C0] usb 1-1: async_complete: urb error -104 [ 871.368218][ C0] usb 1-1: async_complete: urb error -104 [ 871.392892][T15177] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 871.424012][T15177] usb 2-1: can't read configurations, error -61 [ 871.444206][ T1213] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 871.465517][T13100] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 871.495282][T13100] usb 3-1: device descriptor read/8, error -71 [ 871.584098][T15177] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 871.737392][T13100] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 871.763646][T15177] usb 2-1: Using ep0 maxpacket: 8 [ 871.765147][T13100] usb 3-1: device descriptor read/8, error -71 [ 871.776317][T15177] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 871.793308][T15177] usb 2-1: can't read configurations, error -61 [ 871.817896][T15177] usb usb2-port1: attempt power cycle [ 871.894128][T13100] usb usb3-port1: unable to enumerate USB device [ 872.006630][T16745] tipc: Failed to remove unknown binding: 66,1,1/0:3435202201/3435202203 [ 872.020048][ T5898] usb 1-1: USB disconnect, device number 23 [ 872.096962][T16745] tipc: Failed to remove unknown binding: 66,1,1/0:3435202201/3435202203 [ 872.215209][T15177] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 872.315739][T15177] usb 2-1: Using ep0 maxpacket: 8 [ 872.338441][T15177] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 872.363624][T15177] usb 2-1: can't read configurations, error -61 [ 872.523705][T15177] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 872.604569][T15177] usb 2-1: Using ep0 maxpacket: 8 [ 872.614393][ T1213] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 872.625941][T15177] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 872.633904][T15177] usb 2-1: can't read configurations, error -61 [ 872.712909][T15177] usb usb2-port1: unable to enumerate USB device [ 872.723662][T16753] random: crng reseeded on system resumption [ 872.846373][ T1213] usb 5-1: unable to get BOS descriptor or descriptor too short [ 872.855019][ T1213] usb 5-1: not running at top speed; connect to a high speed hub [ 872.866722][ T1213] usb 5-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 872.881738][ T1213] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 873.029974][ T1213] usb 5-1: config 1 interface 0 has no altsetting 0 [ 873.064986][ T1213] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 873.080436][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.095712][ T1213] usb 5-1: Product: syz [ 873.102458][ T1213] usb 5-1: Manufacturer: syz [ 873.108058][ T1213] usb 5-1: SerialNumber: syz [ 873.385221][ T1213] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input71 [ 873.430655][ T5184] bcm5974 5-1:1.0: could not read from device [ 873.459862][ T5184] bcm5974 5-1:1.0: could not read from device [ 873.478863][ T5184] bcm5974 5-1:1.0: could not read from device [ 873.512789][ T1213] usb 5-1: USB disconnect, device number 20 [ 873.601076][ T5184] bcm5974 5-1:1.0: could not read from device [ 873.899235][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'. [ 874.225281][T16785] netlink: 'syz.4.2814': attribute type 13 has an invalid length. [ 875.874990][T16780] lo: Caught tx_queue_len zero misconfig [ 876.674420][T16809] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20004 [ 876.688208][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'. [ 876.701375][T16809] netlink: 'syz.0.2818': attribute type 30 has an invalid length. [ 876.712964][ T5898] IPVS: starting estimator thread 0... [ 876.787721][ T7837] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.802384][ T7837] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.820668][ T1090] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.825137][T16810] IPVS: using max 28 ests per chain, 67200 per kthread [ 876.857761][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.867006][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.873583][ T1090] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.194607][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.289902][T16812] xt_CT: No such helper "pptp" [ 877.325285][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.880222][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2823'. [ 878.383700][ T1213] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 878.544964][ T1213] usb 3-1: device descriptor read/64, error -71 [ 878.784338][ T1213] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 878.952622][ T1213] usb 3-1: device descriptor read/64, error -71 [ 879.074860][ T1213] usb usb3-port1: attempt power cycle [ 879.250092][T16841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2827'. [ 879.416468][ T1213] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 879.451020][ T1213] usb 3-1: device descriptor read/8, error -71 [ 879.693997][ T1213] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 879.714513][ T1213] usb 3-1: device descriptor read/8, error -71 [ 879.824578][ T1213] usb usb3-port1: unable to enumerate USB device [ 880.544342][T15177] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 880.696826][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.711545][T15177] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 880.728697][T15177] usb 2-1: config 0 has no interface number 0 [ 880.736383][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.751295][T15177] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 880.796072][T15177] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 880.823625][T15177] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 880.842119][T15177] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 880.859839][T15177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.871425][T15177] usb 2-1: config 0 descriptor?? [ 880.879731][T16848] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 880.989623][T15177] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input72 [ 881.106747][ T1213] usb 2-1: USB disconnect, device number 7 [ 881.724373][T15177] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 881.764556][T16873] random: crng reseeded on system resumption [ 881.840131][T16875] xt_cgroup: invalid path, errno=-2 [ 881.914573][T16879] binder: BINDER_SET_CONTEXT_MGR already set [ 881.928480][T15177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.935376][T16878] binder_alloc: binder_alloc_mmap_handler: 16876 200000ffd000-200001000000 already mapped failed -16 [ 881.939817][T15177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.981038][T16879] binder: 16876:16879 ioctl 4018620d 2000000002c0 returned -16 [ 881.997292][T16879] binder: BINDER_SET_CONTEXT_MGR already set [ 882.010382][T16879] binder: 16876:16879 ioctl 4018620d 2000000002c0 returned -16 [ 882.221806][T15177] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 882.276720][T15177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.290270][T15177] usb 3-1: config 0 descriptor?? [ 882.854315][T15177] uclogic 0003:5543:0042.0018: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 882.971534][T15177] usb 3-1: USB disconnect, device number 117 [ 883.129445][T16908] x_tables: ip_tables: osf match: only valid for protocol 6 [ 883.213066][T16903] fido_id[16903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 883.534015][T15168] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 883.683712][T15168] usb 2-1: Using ep0 maxpacket: 32 [ 883.691420][T15168] usb 2-1: unable to get BOS descriptor or descriptor too short [ 883.702524][T15168] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 883.729291][T15168] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 883.744376][T15168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.759769][T15168] usb 2-1: Product: syz [ 883.782567][T15168] usb 2-1: Manufacturer: syz [ 883.788088][T15168] usb 2-1: SerialNumber: syz [ 884.377654][T15168] usb 2-1: Cannot retrieve CPort count: -110 [ 884.386642][T15168] usb 2-1: Cannot retrieve CPort count: -110 [ 884.409153][T15168] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 884.552029][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.627745][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.230230][T16927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2849'. [ 885.248907][T16927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2849'. [ 885.914419][T13100] usb 4-1: USB disconnect, device number 43 [ 886.302752][T15168] usb 2-1: USB disconnect, device number 8 [ 886.454281][T16938] vxcan2: entered allmulticast mode [ 886.828571][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 886.844644][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 886.853469][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 886.862513][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 886.896919][T16951] tipc: Can't bind to reserved service type 2 [ 886.974172][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.284428][T16961] kvm: user requested TSC rate below hardware speed [ 888.671136][T16961] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 888.962654][T16954] chnl_net:caif_netlink_parms(): no params data found [ 889.014162][ T5149] Bluetooth: hci3: command tx timeout [ 890.176093][T13995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.844892][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 890.980072][T16954] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.008248][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.020069][ T9] usb 3-1: config 0 has no interfaces? [ 891.032807][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 891.042558][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.058694][ T9] usb 3-1: Product: syz [ 891.073355][T16954] bridge_slave_0: entered allmulticast mode [ 891.089744][ T9] usb 3-1: Manufacturer: syz [ 891.101634][ T9] usb 3-1: SerialNumber: syz [ 891.104917][T15837] Bluetooth: hci3: command tx timeout [ 891.119527][T16954] bridge_slave_0: entered promiscuous mode [ 891.214903][ T9] usb 3-1: config 0 descriptor?? [ 891.261098][T13995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.303740][ T1213] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 891.460803][ T1213] usb 5-1: device descriptor read/64, error -71 [ 891.759847][T16954] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.782416][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.806005][T16954] bridge_slave_1: entered allmulticast mode [ 891.814252][ T1213] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 891.824888][T16954] bridge_slave_1: entered promiscuous mode [ 891.944313][ T1213] usb 5-1: device descriptor read/64, error -71 [ 891.968277][T13995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.055149][ T1213] usb usb5-port1: attempt power cycle [ 892.118385][T13995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.201154][T16954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.254358][ T5883] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 892.258173][T16954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.361140][T16954] team0: Port device team_slave_0 added [ 892.404275][ T1213] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 892.416240][ T5883] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 892.425387][ T5883] usb 2-1: config 0 has no interface number 0 [ 892.431890][ T1213] usb 5-1: device descriptor read/8, error -71 [ 892.443399][ T5883] usb 2-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 892.453392][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.502336][ T5883] usb 2-1: Product: syz [ 892.529302][T16954] team0: Port device team_slave_1 added [ 892.529528][ T5883] usb 2-1: Manufacturer: syz [ 892.548801][ T5883] usb 2-1: SerialNumber: syz [ 892.585058][ T5883] usb 2-1: config 0 descriptor?? [ 892.675083][ T1213] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 892.705014][ T1213] usb 5-1: device descriptor read/8, error -71 [ 892.769098][T16954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.796960][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.835921][ T1213] usb usb5-port1: unable to enumerate USB device [ 892.872681][T16998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.887611][T16998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.928674][ T5883] pl2303 2-1:0.161: required interrupt-in endpoint missing [ 892.938499][T16954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.957100][T16954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.967994][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.997996][ T5883] usb 2-1: USB disconnect, device number 9 [ 893.071045][T16954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.184055][T15837] Bluetooth: hci3: command tx timeout [ 893.294551][T15168] usb 3-1: USB disconnect, device number 118 [ 893.369315][T17005] binder: 17002:17005 ioctl 4018620d 0 returned -22 [ 893.676921][T13995] team0: Port device geneve0 removed [ 893.901233][T13995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.917910][T13995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.931340][T13995] bond0 (unregistering): Released all slaves [ 893.960444][T13995] bond1 (unregistering): Released all slaves [ 894.079100][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2870'. [ 894.144065][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2870'. [ 894.220955][T13995] bond2 (unregistering): Released all slaves [ 894.385842][T17025] x_tables: ip_tables: osf match: only valid for protocol 6 [ 894.823454][T13995] bond3 (unregistering): Released all slaves [ 894.996102][T16954] hsr_slave_0: entered promiscuous mode [ 895.007752][T16954] hsr_slave_1: entered promiscuous mode [ 895.045376][T16954] debugfs: 'hsr0' already exists in 'hsr' [ 895.051150][T16954] Cannot create hsr debugfs directory [ 895.070275][T17013] veth0_to_bond: entered allmulticast mode [ 895.254289][T15837] Bluetooth: hci3: command tx timeout [ 896.026427][T15168] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 896.276498][T15168] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 896.301901][T15168] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 896.343283][T15168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 896.362784][T15168] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 896.404774][T15168] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 896.444659][T15168] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 896.571955][T15168] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 896.650951][T15168] usb 3-1: Product: syz [ 896.664284][T15168] usb 3-1: Manufacturer: syz [ 896.724246][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 896.743189][T15168] cdc_wdm 3-1:1.0: skipping garbage [ 896.783369][T15168] cdc_wdm 3-1:1.0: skipping garbage [ 896.800935][T13995] tipc: Left network mode [ 896.817868][T15168] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 896.854954][T15168] cdc_wdm 3-1:1.0: Unknown control protocol [ 896.884825][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 896.904921][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.932289][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 896.943000][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.967760][ T10] usb 3-1: USB disconnect, device number 119 [ 896.989894][ T9] usb 1-1: config 0 descriptor?? [ 897.330797][T16954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 897.364802][T16954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 897.434190][ T10] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 897.447196][T16954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 897.569855][T16954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 897.596433][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 897.610012][ T10] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 897.653028][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.702685][ T10] usb 3-1: Product: syz [ 897.716926][ T10] usb 3-1: Manufacturer: syz [ 897.738804][ T10] usb 3-1: SerialNumber: syz [ 897.788893][ T10] usb 3-1: config 0 descriptor?? [ 897.836988][ T10] as10x_usb: device has been detected [ 897.848920][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 897.927604][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 897.951967][T13995] hsr_slave_0: left promiscuous mode [ 897.970119][T13995] hsr_slave_1: left promiscuous mode [ 898.007572][T13995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.036464][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 898.036557][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 898.048564][T13995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.049456][ T9] usb 1-1: USB disconnect, device number 24 [ 898.058698][T13995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.058727][T13995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.071050][ T10] as10x_usb: error during firmware upload part1 [ 898.071730][ T10] Registered device Sky IT Digital Key (green led) [ 898.120776][T13995] veth1_macvtap: left promiscuous mode [ 898.120903][T13995] veth0_macvtap: left promiscuous mode [ 898.121114][T13995] veth1_vlan: left promiscuous mode [ 898.121255][T13995] veth0_vlan: left promiscuous mode [ 898.164856][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.169747][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.270025][T15170] usb 3-1: USB disconnect, device number 120 [ 898.298616][T15170] Unregistered device Sky IT Digital Key (green led) [ 898.301760][T15170] as10x_usb: device has been disconnected [ 898.580684][T17098] x_tables: ip_tables: osf match: only valid for protocol 6 [ 898.687116][T13995] pim6reg (unregistering): left allmulticast mode [ 898.834268][T17101] binder: 17099:17101 ioctl 400c6615 200000000080 returned -22 [ 899.941644][T13995] team0 (unregistering): Port device team_slave_1 removed [ 899.959496][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 900.315049][T13995] team0 (unregistering): Port device team_slave_0 removed [ 901.074216][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 901.074239][ T30] audit: type=1326 audit(1762627273.858:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.1.2890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f465798f6c9 code=0x0 [ 901.437136][T13995] team0 (unregistering): Port device dummy0 removed [ 901.629769][T16954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.921096][T16954] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.051427][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.058732][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.232526][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.239777][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.441132][T16954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 902.505125][T16954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 902.685341][T13995] IPVS: stop unused estimator thread 0... [ 902.740777][T16954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.908660][T17152] xt_CT: No such helper "pptp" [ 902.932754][T17155] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 902.982168][T16954] veth0_vlan: entered promiscuous mode [ 903.057301][T16954] veth1_vlan: entered promiscuous mode [ 903.315186][T15168] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 903.318987][T16954] veth0_macvtap: entered promiscuous mode [ 903.493073][T16954] veth1_macvtap: entered promiscuous mode [ 903.518541][T15168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 903.555934][T15168] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 903.580038][T15168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 903.580072][T15168] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 903.621898][T15168] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 903.621930][T15168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.621946][T15168] usb 3-1: Product: syz [ 903.621957][T15168] usb 3-1: Manufacturer: syz [ 903.621969][T15168] usb 3-1: SerialNumber: syz [ 903.634571][T15168] usb 3-1: config 0 descriptor?? [ 903.637499][T15168] kvaser_usb 3-1:0.0: error -EMSGSIZE: Cannot get software info [ 903.637594][T15168] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 903.673714][T16954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.680816][T16954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.741398][T13997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.741491][T13997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.741963][T13997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.743502][T13997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.012880][T13997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.012908][T13997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.364998][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.365016][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.065390][T17205] xt_cgroup: invalid path, errno=-2 [ 906.055858][ T10] usb 3-1: USB disconnect, device number 121 [ 906.175582][T17214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2912'. [ 907.060192][T17235] xt_CT: No such helper "pptp" [ 907.379406][T17242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.693972][T15168] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 907.723684][ T5898] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 907.839602][T17247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2919'. [ 907.884000][ T5898] usb 2-1: device descriptor read/64, error -71 [ 907.899938][T15168] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.923668][T15168] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 907.942419][T15168] usb 3-1: config 0 interface 0 has no altsetting 0 [ 907.950004][T15168] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 907.960486][T15168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.984501][T15168] usb 3-1: config 0 descriptor?? [ 908.093665][T15170] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 908.123900][ T5898] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 908.199096][T15168] usb 3-1: string descriptor 0 read error: -71 [ 908.234396][T15168] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input74 [ 908.263706][ T5898] usb 2-1: device descriptor read/64, error -71 [ 908.264388][ T5184] bcm5974 3-1:0.0: could not read from device [ 908.283073][T15170] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 908.498942][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 908.511679][ T5898] usb usb2-port1: attempt power cycle [ 908.521479][ T5184] bcm5974 3-1:0.0: could not read from device [ 908.528282][T15170] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.553641][T15168] usb 3-1: USB disconnect, device number 122 [ 908.560362][ T5184] bcm5974 3-1:0.0: could not read from device [ 908.569152][T15170] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 908.580984][T15170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 908.601158][T15170] usb 5-1: SerialNumber: syz [ 908.627614][T12847] udevd[12847]: Error opening device "/dev/input/event4": No such file or directory [ 908.639038][T12847] udevd[12847]: Unable to EVIOCGABS device "/dev/input/event4" [ 908.650018][T12847] udevd[12847]: Unable to EVIOCGABS device "/dev/input/event4" [ 908.658636][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 908.669032][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 908.679095][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.688040][ T10] usb 4-1: Product: syz [ 908.692467][ T10] usb 4-1: Manufacturer: syz [ 908.698092][ T10] usb 4-1: SerialNumber: syz [ 908.703311][T12847] udevd[12847]: Unable to EVIOCGABS device "/dev/input/event4" [ 908.723864][T12847] udevd[12847]: Unable to EVIOCGABS device "/dev/input/event4" [ 908.731720][ T10] usb 4-1: config 0 descriptor?? [ 908.856971][T15170] usb 5-1: 0:2 : does not exist [ 908.864922][ T5898] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 908.904920][ T5898] usb 2-1: device descriptor read/8, error -71 [ 908.925119][T15170] usb 5-1: USB disconnect, device number 25 [ 908.968052][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 909.114793][T12847] udevd[12847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 909.201794][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 909.243701][ T5898] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 909.244233][ T10] usb 4-1: USB disconnect, device number 44 [ 909.272994][ T5898] usb 2-1: device descriptor read/8, error -71 [ 909.404065][ T5898] usb usb2-port1: unable to enumerate USB device [ 909.438883][T17263] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 910.251831][T17283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.327507][T17283] bond0: (slave bond1): Enslaving as an active interface with an up link [ 910.455724][T17283] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2929'. [ 910.878724][T17283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.922656][T17283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.953081][T17283] bond0 (unregistering): (slave bond1): Releasing backup interface [ 910.977629][T17283] bond0 (unregistering): Released all slaves [ 911.673285][T17307] loop3: detected capacity change from 0 to 7 [ 911.688554][T12936] Dev loop3: unable to read RDB block 7 [ 911.696696][T12936] loop3: unable to read partition table [ 911.703098][T12936] loop3: partition table beyond EOD, truncated [ 911.715767][T17307] Dev loop3: unable to read RDB block 7 [ 911.723380][T17307] loop3: unable to read partition table [ 911.729596][T17307] loop3: partition table beyond EOD, truncated [ 911.743817][T17307] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 912.293919][T15837] Bluetooth: hci5: command 0x0c1a tx timeout [ 912.296987][T17280] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 913.092445][T17280] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 913.109686][T17280] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 913.125433][T17280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 913.131650][T17280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 913.139507][T17280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 913.393794][T15176] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 913.414115][T15170] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 913.627195][T15176] usb 5-1: unable to get BOS descriptor or descriptor too short [ 913.636416][T15176] usb 5-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 913.677783][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2940'. [ 913.699025][T15176] usb 5-1: config 1 interface 0 has no altsetting 0 [ 913.706525][T15170] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.721337][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2940'. [ 913.761397][T15170] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 913.785507][T15176] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 913.803221][T15170] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 913.812609][T15176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.832500][T15176] usb 5-1: Product: syz [ 913.838628][T15170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.848865][T15176] usb 5-1: Manufacturer: syz [ 913.860217][T15176] usb 5-1: SerialNumber: syz [ 913.872793][T15170] usb 2-1: config 0 descriptor?? [ 913.884497][T15170] usb 2-1: can't set config #0, error -71 [ 913.904736][T15170] usb 2-1: USB disconnect, device number 14 [ 914.106081][T15176] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input75 [ 914.154552][T15176] usb 5-1: USB disconnect, device number 26 [ 914.155955][ C0] pxrc 5-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 914.413704][T15837] Bluetooth: hci5: command 0x0c1a tx timeout [ 914.790601][T17342] xt_CT: No such helper "pptp" [ 914.944034][ T10] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 915.173851][T15837] Bluetooth: hci3: command 0x0c1a tx timeout [ 915.271906][ T10] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 915.310812][ T10] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 915.370786][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 915.510067][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 915.520050][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.551027][ T10] usb 3-1: Product: 䮋❪崖촶ờୄۍට౜ꠜ찘⎞⓲ⵊʠ먵핽Ϸࠍ꘶쫐놴㨦琎瀟᪢᫕ஐᴀ⮾⛯ḣ緅穅㒚⥮犹풵᡻䨀菭趂鐔簬臅ዑ᭴퇖ﳣꋺፑᦌ蕩棛鳕잼؜瞜⸜它抴㎟ [ 915.681349][T17354] binder: 17353:17354 ioctl c0306201 200000000640 returned -22 [ 915.690923][ T10] usb 3-1: Manufacturer:   [ 915.708690][ T10] usb 3-1: SerialNumber: ㅛ곖욤跇௯涠๥ꁏ傍ナ礀폠ゕ봡ඝ㽍擟㼩魈桷ᛦ䛇뻢檏✷侂ὗӵℲᡝ炝⮿赥岊賭㔸ჹ馐ݗ컉뱄갷津좿鷴탺꫒糷㝾ࣂᐌὀ簬ꩋ⌙嫪禠ࡆ䭉鈖ힸ機⿬﹓콕뻕 [ 915.732293][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.822905][T17347] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 915.831189][T17347] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 916.268892][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 123 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 916.290918][T17364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2949'. [ 916.314334][ T10] usb 3-1: USB disconnect, device number 123 [ 916.359989][T17364] IPv6: sit1: Disabled Multicast RS [ 916.378085][ T10] usblp0: removed [ 916.400890][T17364] sit1: entered allmulticast mode [ 916.455416][T15837] Bluetooth: hci5: command 0x0c1a tx timeout [ 916.535292][T13100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.589929][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2951'. [ 916.613232][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'. [ 916.888312][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2955'. [ 917.128848][T15176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.142716][T17393] macsec1: entered promiscuous mode [ 917.157726][T17393] macsec0: entered promiscuous mode [ 917.174668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.185703][T15176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.253645][T15837] Bluetooth: hci3: command 0x0c1a tx timeout [ 917.339397][T17395] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2959'. [ 917.735547][T13100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.793764][T15176] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 918.147407][T15176] usb 2-1: config 2 has an invalid interface number: 207 but max is 1 [ 918.156004][T15176] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 918.179341][T15176] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 918.190134][T15170] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 918.215418][T15176] usb 2-1: config 2 has no interface number 0 [ 918.228770][T15176] usb 2-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 918.259755][T17401] xt_CT: No such helper "pptp" [ 918.266595][T15176] usb 2-1: config 2 interface 207 has no altsetting 0 [ 918.276588][T15176] usb 2-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 918.296281][T15176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.329962][T15176] usb 2-1: Product: syz [ 918.344864][T15176] usb 2-1: Manufacturer: syz [ 918.354150][T15170] usb 5-1: Using ep0 maxpacket: 16 [ 918.366229][T15170] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 918.403454][T15176] usb 2-1: SerialNumber: syz [ 918.433591][T15170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.454854][T15170] usb 5-1: Product: syz [ 918.459108][T15170] usb 5-1: Manufacturer: syz [ 918.483622][T15170] usb 5-1: SerialNumber: syz [ 918.502484][T15170] usb 5-1: config 0 descriptor?? [ 918.523841][T15170] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 918.634503][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.643851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.688724][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2961'. [ 918.732738][T15170] usb 5-1: Detected FT-X [ 918.774152][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.812620][T15170] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 918.821472][T15170] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 918.845651][T15170] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 918.905165][T15170] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 918.926139][T15170] usb 5-1: USB disconnect, device number 27 [ 918.950637][T15170] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 919.050226][T17398] loop2: detected capacity change from 0 to 7 [ 919.073841][T15170] ftdi_sio 5-1:0.0: device disconnected [ 919.104625][T17398] Dev loop2: unable to read RDB block 7 [ 919.133727][T17398] loop2: AHDI p1 p2 p3 [ 919.158316][T17398] loop2: partition table partially beyond EOD, truncated [ 919.214968][T17398] loop2: p1 start 1601398130 is beyond EOD, truncated [ 919.222452][T17398] loop2: p2 start 1702059890 is beyond EOD, truncated [ 919.383840][T15837] Bluetooth: hci3: command 0x0c1a tx timeout [ 919.480095][T15176] qmi_wwan 2-1:2.207: skipping garbage [ 919.485734][T15176] qmi_wwan 2-1:2.207: skipping garbage [ 919.493883][T15176] qmi_wwan 2-1:2.207: bogus CDC Union: master=0, slave=0 [ 919.504476][T15176] qmi_wwan 2-1:2.207: probe with driver qmi_wwan failed with error -22 [ 919.542889][T15176] usb 2-1: USB disconnect, device number 15 [ 919.814593][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.863727][T17429] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2968'. [ 919.923391][T17429] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2968'. [ 920.226039][T15176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.506259][T17439] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 920.637255][T17441] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 920.914086][T17455] xt_CT: No such helper "pptp" [ 921.118293][T17464] netlink: 'syz.0.2977': attribute type 9 has an invalid length. [ 921.147802][T17464] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2977'. [ 921.229878][T17471] netlink: 'syz.3.2978': attribute type 4 has an invalid length. [ 921.335320][T17472] netlink: 'syz.3.2978': attribute type 4 has an invalid length. [ 921.416679][T15176] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 921.613936][T15176] usb 5-1: Using ep0 maxpacket: 16 [ 921.621148][T15176] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.631631][T15176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 921.643300][T15176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 921.673688][T15176] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 921.704474][T15176] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.751400][T15176] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 921.760794][T15176] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 921.764433][T13100] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 921.768849][T15176] usb 5-1: Manufacturer: syz [ 921.851107][T15176] usb 5-1: config 0 descriptor?? [ 921.894717][ T5883] net_ratelimit: 2 callbacks suppressed [ 921.894734][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.909436][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 921.934444][T13100] usb 3-1: Using ep0 maxpacket: 32 [ 922.066250][T13100] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 922.077053][T13100] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 922.086779][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 922.104990][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 922.128580][T13100] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 922.169975][T13100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.179984][ T10] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 922.190656][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.211398][ T10] usb 1-1: Product: syz [ 922.224286][T13100] usb 3-1: config 0 descriptor?? [ 922.249425][ T10] usb 1-1: Manufacturer: syz [ 922.264431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.280594][ T10] usb 1-1: SerialNumber: syz [ 922.301265][ T10] usb 1-1: config 0 descriptor?? [ 922.364249][T15176] rc_core: IR keymap rc-hauppauge not found [ 922.371591][T15176] Registered IR keymap rc-empty [ 922.377008][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.414299][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.498098][T15176] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 922.576193][T15176] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input76 [ 922.620665][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.652499][T17482] veth0_to_team: Caught tx_queue_len zero misconfig [ 922.659595][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.689093][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.717601][T17483] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 922.717601][T17483] The task syz.2.2980 (17483) triggered the difference, watch for misbehavior. [ 922.746647][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.783938][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.837171][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.883752][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.907173][T13100] usb 3-1: string descriptor 0 read error: -71 [ 922.915777][T13100] usb 3-1: USB disconnect, device number 124 [ 922.923298][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 922.937924][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.954310][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 923.013215][T15176] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 923.038541][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2984'. [ 923.057406][T15176] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 923.069941][T15176] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 923.086035][T15176] usb 5-1: USB disconnect, device number 28 [ 923.093799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.231228][T17493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.253370][T17493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.263951][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.284574][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 923.434339][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 923.450491][ T10] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 923.555871][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.555901][ T10] usb 2-1: config 0 has no interface number 0 [ 923.555946][ T10] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 923.555972][ T10] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 923.555998][ T10] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 923.556024][ T10] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 923.556051][ T10] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 923.556075][ T10] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 923.556100][ T10] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 923.556125][ T10] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 923.556149][ T10] usb 2-1: config 0 interface 239 has no altsetting 0 [ 923.559386][ T10] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 923.559419][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.559441][ T10] usb 2-1: Product: syz [ 923.559457][ T10] usb 2-1: Manufacturer: syz [ 923.559474][ T10] usb 2-1: SerialNumber: syz [ 923.562439][ T10] usb 2-1: config 0 descriptor?? [ 923.563222][T17491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 923.563492][T17491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 923.589310][T15837] Bluetooth: hci0: urb ffff88801ab9df00 submission failed (90) [ 923.731639][T17498] fuse: Unknown parameter '000000000000000000040xffffffffffffffff00000000000000000000' [ 923.939777][ T10] usb 2-1: USB disconnect, device number 16 [ 923.991193][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.688286][T17518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.690515][T17518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.015181][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.056404][ T10] usb 1-1: USB disconnect, device number 25 [ 925.076188][T13100] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 925.229913][T17526] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20000 [ 925.239340][T13100] usb 2-1: Using ep0 maxpacket: 8 [ 925.261857][T13100] usb 2-1: config 179 has an invalid interface number: 97 but max is 0 [ 925.332784][T13100] usb 2-1: config 179 has no interface number 0 [ 925.375048][T13100] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 925.386466][T17526] bridge1: entered promiscuous mode [ 925.477606][T13100] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 925.509695][T15176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.611780][T17538] xt_CT: No such helper "pptp" [ 925.784395][T13100] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 925.834925][T13100] usb 2-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 925.882649][T13100] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 925.912692][T13100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.941206][T17547] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 925.941206][T17547] program syz.3.2997 not setting count and/or reply_len properly [ 926.028302][T17521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 926.262936][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2991'. [ 926.464977][ T30] audit: type=1326 audit(1762627299.258:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17553 comm="syz.3.2998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x0 [ 926.664026][ T5898] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 926.823699][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 926.830701][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 926.860206][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 926.899300][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 926.933068][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 926.967464][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 926.970314][T17565] loop3: detected capacity change from 0 to 7 [ 926.992155][T12936] Dev loop3: unable to read RDB block 7 [ 926.992279][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 926.997982][T12936] loop3: unable to read partition table [ 926.998224][T12936] loop3: partition table beyond EOD, truncated [ 927.023275][T17565] Dev loop3: unable to read RDB block 7 [ 927.030540][T17565] loop3: unable to read partition table [ 927.040040][T17565] loop3: partition table beyond EOD, truncated [ 927.045150][ T5898] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 927.047486][T17565] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 927.055854][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.055879][ T5898] usb 5-1: Product: syz [ 927.055896][ T5898] usb 5-1: Manufacturer: syz [ 927.055912][ T5898] usb 5-1: SerialNumber: syz [ 927.075085][ T5898] usb 5-1: config 0 descriptor?? [ 927.099145][T13100] net_ratelimit: 2 callbacks suppressed [ 927.099164][T13100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.307783][ T5898] usb 5-1: USB disconnect, device number 29 [ 927.320330][ T30] audit: type=1326 audit(1762627300.108:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 927.392054][ T30] audit: type=1326 audit(1762627300.108:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 927.415112][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.426100][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.438133][ T30] audit: type=1326 audit(1762627300.108:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 927.467310][ T30] audit: type=1326 audit(1762627300.108:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 927.491565][ T30] audit: type=1326 audit(1762627300.108:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 927.514050][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.520809][ T30] audit: type=1326 audit(1762627300.108:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 927.554491][ T30] audit: type=1326 audit(1762627300.108:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 927.578878][ T30] audit: type=1326 audit(1762627300.108:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 927.601359][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.613438][ T30] audit: type=1326 audit(1762627300.108:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.3.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 927.619123][T17575] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 927.642474][T17576] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 927.649309][T17576] syzkaller1: linktype set to 32 [ 927.694884][ T5883] usb 2-1: USB disconnect, device number 17 [ 927.733843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.745515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.136691][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.263664][ T5898] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 928.423642][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 928.440144][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 928.455695][ T5898] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 928.465654][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.475853][ T5898] usb 5-1: Product: syz [ 928.483332][ T5898] usb 5-1: Manufacturer: syz [ 928.489943][ T5898] usb 5-1: SerialNumber: syz [ 928.516067][ T5898] usb 5-1: config 0 descriptor?? [ 928.530748][ T5898] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 928.538774][T15176] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 928.583159][ T5898] usb 5-1: Detected FT232R [ 928.745332][T15176] usb 3-1: Using ep0 maxpacket: 16 [ 928.774633][T15176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 928.786676][T15176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 928.803350][T15176] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 928.812865][T15176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.821423][T15176] usb 3-1: Product: syz [ 928.839258][T15176] usb 3-1: Manufacturer: syz [ 928.849803][T15176] usb 3-1: SerialNumber: syz [ 928.867569][ T5898] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 928.968337][ T5898] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 928.995910][ T5898] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 929.006079][T15176] usb 3-1: config 0 descriptor?? [ 929.057781][T15176] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 929.080405][ T5898] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 929.159197][T15176] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB1 [ 929.174849][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.202867][ T5898] usb 5-1: USB disconnect, device number 30 [ 929.222413][T15176] usb 3-1: USB disconnect, device number 125 [ 929.238255][ T5898] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 929.248898][ T5898] ftdi_sio 5-1:0.0: device disconnected [ 929.257902][T15176] kobil ttyUSB1: KOBIL USB smart card terminal converter now disconnected from ttyUSB1 [ 929.269873][T15176] kobil_sct 3-1:0.0: device disconnected [ 929.344551][T15177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.729090][ T5898] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 929.831272][T17611] loop3: detected capacity change from 0 to 7 [ 929.867939][T17611] Dev loop3: unable to read RDB block 7 [ 929.882732][T17611] loop3: unable to read partition table [ 929.904516][T17611] loop3: partition table beyond EOD, truncated [ 929.920121][T17611] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 929.940622][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.965497][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.986843][ T5898] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 930.001367][ T5898] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 930.014432][ T5898] usb 5-1: Manufacturer: syz [ 930.049898][ T5898] usb 5-1: config 0 descriptor?? [ 930.215879][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.477250][T15176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.535427][T17624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3015'. [ 930.548429][T17624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3015'. [ 930.650606][T17626] xt_hashlimit: max too large, truncated to 1048576 [ 930.708606][ T5883] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 930.729961][T17626] fuse: Unknown parameter '000000000000000000040x0000000000000008' [ 930.898358][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 930.906385][ T5883] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 930.929922][ T5883] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 930.971102][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 930.986561][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 931.297086][T13100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.339634][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.455643][ T5883] usb 1-1: config 0 descriptor?? [ 931.808539][T17618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.858568][ T5883] usbhid 1-1:0.0: can't add hid device: -71 [ 931.873819][ T5883] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 931.900169][T17618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.142990][ T5883] usb 1-1: USB disconnect, device number 26 [ 932.374467][T13100] net_ratelimit: 1 callbacks suppressed [ 932.374488][T13100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.514207][ T5883] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 932.674171][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 932.681855][ T5883] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 932.703185][ T5883] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 932.770825][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 932.809929][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 932.856192][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.958831][ T5883] usb 1-1: config 0 descriptor?? [ 933.025293][ T5883] hub 1-1:0.0: bad descriptor, ignoring hub [ 933.061791][ T5883] hub 1-1:0.0: probe with driver hub failed with error -5 [ 933.166392][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 933.175978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.203713][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 933.271810][ T5898] usb 5-1: USB disconnect, device number 31 [ 933.414034][T13100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.442072][T17648] loop3: detected capacity change from 0 to 7 [ 933.452994][T16954] Dev loop3: unable to read RDB block 7 [ 933.464296][T16954] loop3: unable to read partition table [ 933.469026][ T5883] lg-g15 0003:046D:C225.0019: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 933.470268][T16954] loop3: partition table beyond EOD, truncated [ 933.494802][T15170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.498039][T17648] Dev loop3: unable to read RDB block 7 [ 933.509816][T17648] loop3: unable to read partition table [ 933.517627][T17648] loop3: partition table beyond EOD, truncated [ 933.525760][T17648] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 933.627390][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 933.627408][ T30] audit: type=1326 audit(1762627306.408:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.627457][ T30] audit: type=1326 audit(1762627306.408:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.760311][T15170] usb 1-1: USB disconnect, device number 27 [ 933.781204][ T30] audit: type=1326 audit(1762627306.418:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.781258][ T30] audit: type=1326 audit(1762627306.418:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.781298][ T30] audit: type=1326 audit(1762627306.468:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.781367][ T30] audit: type=1326 audit(1762627306.488:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.781413][ T30] audit: type=1326 audit(1762627306.498:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.781459][ T30] audit: type=1326 audit(1762627306.498:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.781517][ T30] audit: type=1326 audit(1762627306.498:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.781572][ T30] audit: type=1326 audit(1762627306.498:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17652 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338a18f6c9 code=0x7ffc0000 [ 933.827558][T17650] fido_id[17650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 933.989391][T17659] lo: Caught tx_queue_len zero misconfig [ 934.416819][T17668] syzkaller0: entered promiscuous mode [ 934.416837][T17668] syzkaller0: entered allmulticast mode [ 934.455103][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.688934][T17686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.699782][T17686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.869717][T17695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.878846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.890278][T17695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.895045][ T5883] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 934.923942][T15177] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 934.937935][T17695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.946730][T15170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.056372][ T5883] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 935.075468][T15177] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 935.083871][T15177] usb 5-1: config 0 has no interface number 0 [ 935.084578][ T5883] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 935.106704][T15177] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 935.131265][ T5883] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 935.143338][T15177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.154881][ T5883] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 935.166967][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.198565][T15177] usb 5-1: config 0 descriptor?? [ 935.218196][T15177] usb 5-1: selecting invalid altsetting 1 [ 935.228498][T17681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 935.260148][T15177] dvb_ttusb_budget: ttusb_init_controller: error [ 935.276499][T15177] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 935.415230][T15177] DVB: Unable to find symbol cx22700_attach() [ 935.542481][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 935.704327][T15177] DVB: Unable to find symbol tda10046_attach() [ 935.724418][ T10] usb 2-1: device descriptor read/64, error -71 [ 935.762054][T15177] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 935.817336][ T9] usb 5-1: USB disconnect, device number 32 [ 935.984227][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 936.114242][ T10] usb 2-1: device descriptor read/64, error -71 [ 936.224632][ T10] usb usb2-port1: attempt power cycle [ 936.568480][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 936.585297][ T10] usb 2-1: device descriptor read/8, error -71 [ 936.884172][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 936.915039][ T10] usb 2-1: device descriptor read/8, error -71 [ 936.951278][T17720] syzkaller0: entered promiscuous mode [ 936.978163][T17720] syzkaller0: entered allmulticast mode [ 937.033890][ T9] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 937.044464][ T10] usb usb2-port1: unable to enumerate USB device [ 937.216084][ T9] usb 5-1: config index 0 descriptor too short (expected 149, got 148) [ 937.216117][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.216138][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.217837][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 937.217860][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 937.217876][ T9] usb 5-1: SerialNumber: syz [ 937.259640][ T9] usb 5-1: 0:2 : does not exist [ 937.259752][ T9] usb 5-1: unit 4 not found! [ 937.574480][ T10] net_ratelimit: 4 callbacks suppressed [ 937.574507][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.593353][ T5883] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 937.595180][ T5883] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input77 [ 937.696991][T17726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.697716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.714616][T17726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3047'. [ 937.755041][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 937.755064][ T5883] usb 1-1: USB disconnect, device number 28 [ 937.880974][T17729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3047'. [ 938.305342][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.311827][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.604063][ T10] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 938.648064][T17711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.955463][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 938.981216][T15177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.002908][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.025831][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.040465][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 939.069870][ T10] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 939.111936][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.302458][ T10] usb 3-1: config 0 descriptor?? [ 939.654394][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.717241][T17746] input: syz1 as /devices/virtual/input/input78 [ 939.797120][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input79 [ 939.861046][ T10] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 939.896700][ T10] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 939.957503][T17711] usb 5-1: USB disconnect, device number 33 [ 940.164550][T17753] x_tables: ip_tables: osf match: only valid for protocol 6 [ 940.218595][T17735] random: crng reseeded on system resumption [ 940.276441][ T9] usb 3-1: USB disconnect, device number 126 [ 940.286440][ T5883] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 940.299759][ T9] ------------[ cut here ]------------ [ 940.305227][ T9] workqueue: work disable count underflowed [ 940.311345][ T9] WARNING: CPU: 0 PID: 9 at kernel/workqueue.c:4355 enable_work+0x2b1/0x2c0 [ 940.320122][ T9] Modules linked in: [ 940.324383][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 940.333508][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 940.343594][ T9] Workqueue: usb_hub_wq hub_event [ 940.348720][ T9] RIP: 0010:enable_work+0x2b1/0x2c0 [ 940.353947][ T9] Code: 41 5e 41 5f 5d e9 cf e0 be 09 cc e8 09 fd bb 09 e8 b4 b2 35 00 c6 05 d9 99 dc 0d 01 90 48 c7 c7 c0 ef 69 8b e8 a0 cc f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 940.373585][ T9] RSP: 0018:ffffc900000e7040 EFLAGS: 00010046 [ 940.379673][ T9] RAX: 5585d11eb8c27400 RBX: ffff88807d396738 RCX: 0000000000100000 [ 940.387692][ T9] RDX: ffffc90018e46000 RSI: 000000000000a084 RDI: 000000000000a085 [ 940.395716][ T9] RBP: ffffc900000e70f8 R08: 0000000000000003 R09: 0000000000000004 [ 940.403713][ T9] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff9200001ce0c [ 940.411706][ T9] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 940.419703][ T9] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 940.428635][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.435223][ T9] CR2: 000020000035d030 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 940.443194][ T9] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 940.451168][ T9] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 940.459154][ T9] Call Trace: [ 940.462448][ T9] [ 940.465398][ T9] ? __pfx_enable_work+0x10/0x10 [ 940.470349][ T9] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 940.476347][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.481573][ T9] __cancel_work_sync+0xf7/0x110 [ 940.486520][ T9] thermal_zone_device_unregister+0x23e/0x3f0 [ 940.492596][ T9] power_supply_unregister+0xf9/0x140 [ 940.498041][ T9] ? __pfx_shield_remove+0x10/0x10 [ 940.503230][ T9] shield_remove+0x72/0x120 [ 940.507765][ T9] hid_device_remove+0x228/0x370 [ 940.512763][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 940.518239][ T9] device_release_driver_internal+0x46f/0x800 [ 940.524368][ T9] bus_remove_device+0x34d/0x410 [ 940.529314][ T9] device_del+0x511/0x8e0 [ 940.533699][ T9] ? __pfx_device_del+0x10/0x10 [ 940.538566][ T9] hid_destroy_device+0x6b/0x1b0 [ 940.543546][ T9] usbhid_disconnect+0x9f/0xc0 [ 940.548386][ T9] usb_unbind_interface+0x26e/0x910 [ 940.553635][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 940.559372][ T9] device_release_driver_internal+0x4d9/0x800 [ 940.565466][ T9] bus_remove_device+0x34d/0x410 [ 940.570413][ T9] device_del+0x511/0x8e0 [ 940.574776][ T9] ? __pfx_device_del+0x10/0x10 [ 940.579635][ T9] ? kobject_put+0x446/0x480 [ 940.584327][ T9] usb_disable_device+0x3e9/0x8a0 [ 940.589366][ T9] usb_disconnect+0x330/0x950 [ 940.594104][ T9] hub_event+0x1cf5/0x4a20 [ 940.598540][ T9] ? do_raw_spin_lock+0x121/0x290 [ 940.603625][ T9] ? register_lock_class+0x51/0x320 [ 940.608845][ T9] ? __pfx_hub_event+0x10/0x10 [ 940.613641][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 940.619383][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 940.624661][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 940.630387][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 940.636119][ T9] process_scheduled_works+0xae1/0x17b0 [ 940.641727][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.647731][ T9] worker_thread+0x8a0/0xda0 [ 940.652344][ T9] kthread+0x711/0x8a0 [ 940.656480][ T9] ? __pfx_worker_thread+0x10/0x10 [ 940.661603][ T9] ? __pfx_kthread+0x10/0x10 [ 940.666213][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 940.671434][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.676648][ T9] ? __pfx_kthread+0x10/0x10 [ 940.681260][ T9] ret_from_fork+0x4bc/0x870 [ 940.685870][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 940.691011][ T9] ? __switch_to_asm+0x39/0x70 [ 940.695870][ T9] ? __switch_to_asm+0x33/0x70 [ 940.700641][ T9] ? __pfx_kthread+0x10/0x10 [ 940.705242][ T9] ret_from_fork_asm+0x1a/0x30 [ 940.710029][ T9] [ 940.713083][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 940.720583][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 940.729698][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 940.739758][ T9] Workqueue: usb_hub_wq hub_event [ 940.744799][ T9] Call Trace: [ 940.748082][ T9] [ 940.751029][ T9] dump_stack_lvl+0x99/0x250 [ 940.755662][ T9] ? __asan_memcpy+0x40/0x70 [ 940.760324][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.765564][ T9] ? __pfx__printk+0x10/0x10 [ 940.770173][ T9] vpanic+0x237/0x6d0 [ 940.774223][ T9] ? __pfx_vpanic+0x10/0x10 [ 940.778770][ T9] panic+0xb9/0xc0 [ 940.782516][ T9] ? __pfx_panic+0x10/0x10 [ 940.786967][ T9] __warn+0x31b/0x4b0 [ 940.790964][ T9] ? enable_work+0x2b1/0x2c0 [ 940.795600][ T9] ? enable_work+0x2b1/0x2c0 [ 940.800228][ T9] report_bug+0x2be/0x4f0 [ 940.804685][ T9] ? enable_work+0x2b1/0x2c0 [ 940.809319][ T9] ? enable_work+0x2b1/0x2c0 [ 940.813950][ T9] ? enable_work+0x2b3/0x2c0 [ 940.818575][ T9] handle_bug+0x84/0x160 [ 940.822847][ T9] exc_invalid_op+0x1a/0x50 [ 940.827382][ T9] asm_exc_invalid_op+0x1a/0x20 [ 940.832261][ T9] RIP: 0010:enable_work+0x2b1/0x2c0 [ 940.837498][ T9] Code: 41 5e 41 5f 5d e9 cf e0 be 09 cc e8 09 fd bb 09 e8 b4 b2 35 00 c6 05 d9 99 dc 0d 01 90 48 c7 c7 c0 ef 69 8b e8 a0 cc f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 940.857224][ T9] RSP: 0018:ffffc900000e7040 EFLAGS: 00010046 [ 940.863313][ T9] RAX: 5585d11eb8c27400 RBX: ffff88807d396738 RCX: 0000000000100000 [ 940.871335][ T9] RDX: ffffc90018e46000 RSI: 000000000000a084 RDI: 000000000000a085 [ 940.879312][ T9] RBP: ffffc900000e70f8 R08: 0000000000000003 R09: 0000000000000004 [ 940.887376][ T9] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff9200001ce0c [ 940.895353][ T9] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 940.903350][ T9] ? __pfx_enable_work+0x10/0x10 [ 940.908299][ T9] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 940.914198][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.919410][ T9] __cancel_work_sync+0xf7/0x110 [ 940.924361][ T9] thermal_zone_device_unregister+0x23e/0x3f0 [ 940.930448][ T9] power_supply_unregister+0xf9/0x140 [ 940.935833][ T9] ? __pfx_shield_remove+0x10/0x10 [ 940.940951][ T9] shield_remove+0x72/0x120 [ 940.945460][ T9] hid_device_remove+0x228/0x370 [ 940.950408][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 940.955916][ T9] device_release_driver_internal+0x46f/0x800 [ 940.961999][ T9] bus_remove_device+0x34d/0x410 [ 940.966950][ T9] device_del+0x511/0x8e0 [ 940.971294][ T9] ? __pfx_device_del+0x10/0x10 [ 940.976161][ T9] hid_destroy_device+0x6b/0x1b0 [ 940.981116][ T9] usbhid_disconnect+0x9f/0xc0 [ 940.985900][ T9] usb_unbind_interface+0x26e/0x910 [ 940.991108][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 940.996832][ T9] device_release_driver_internal+0x4d9/0x800 [ 941.002935][ T9] bus_remove_device+0x34d/0x410 [ 941.007884][ T9] device_del+0x511/0x8e0 [ 941.012230][ T9] ? __pfx_device_del+0x10/0x10 [ 941.017133][ T9] ? kobject_put+0x446/0x480 [ 941.021760][ T9] usb_disable_device+0x3e9/0x8a0 [ 941.026789][ T9] usb_disconnect+0x330/0x950 [ 941.031490][ T9] hub_event+0x1cf5/0x4a20 [ 941.035924][ T9] ? do_raw_spin_lock+0x121/0x290 [ 941.040973][ T9] ? register_lock_class+0x51/0x320 [ 941.046205][ T9] ? __pfx_hub_event+0x10/0x10 [ 941.050973][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 941.056702][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 941.061922][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 941.067654][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 941.073395][ T9] process_scheduled_works+0xae1/0x17b0 [ 941.078991][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 941.084995][ T9] worker_thread+0x8a0/0xda0 [ 941.089623][ T9] kthread+0x711/0x8a0 [ 941.093701][ T9] ? __pfx_worker_thread+0x10/0x10 [ 941.098816][ T9] ? __pfx_kthread+0x10/0x10 [ 941.103412][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 941.108627][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 941.113847][ T9] ? __pfx_kthread+0x10/0x10 [ 941.118449][ T9] ret_from_fork+0x4bc/0x870 [ 941.123047][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 941.128167][ T9] ? __switch_to_asm+0x39/0x70 [ 941.132937][ T9] ? __switch_to_asm+0x33/0x70 [ 941.137702][ T9] ? __pfx_kthread+0x10/0x10 [ 941.142313][ T9] ret_from_fork_asm+0x1a/0x30 [ 941.147090][ T9] [ 941.150627][ T9] Kernel Offset: disabled [ 941.154968][ T9] Rebooting in 86400 seconds..