last executing test programs: 56m13.290173422s ago: executing program 3 (id=550): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1a000, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) sendmsg$alg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002800)='a', 0x1}], 0x1, 0x0, 0x0, 0x20000044}, 0x24040011) 56m12.278816391s ago: executing program 3 (id=556): r0 = socket$inet(0x2, 0x5, 0x3) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3, 0x3, {0x2, 0xff, 0x392d39a281630aa1}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0081fc00000009040f0001e711e100090583010003"], 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x2, "c356"}, &(0x7f0000000200)=0xa) connect$inet(r0, 0x0, 0x0) 56m10.269278214s ago: executing program 3 (id=564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 56m7.417504355s ago: executing program 3 (id=573): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 56m6.382749954s ago: executing program 3 (id=578): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x22, &(0x7f0000000240)) syz_usbip_server_init(0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r3, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=[{0xc, 0x118, 0x8000}, {0xc, 0x84, 0x2}], 0x18}}], 0x1, 0x800) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) socket$tipc(0x1e, 0x0, 0x0) 13.346720139s ago: executing program 1 (id=9375): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0xfffffffffffffff0}], 0x1}, 0x0, 0x24004890}) 10.88522747s ago: executing program 4 (id=9379): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) r0 = syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x7ffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0xa, 0x4000, @fd_index, 0x8, 0x0, 0x0, 0x8}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 10.869562868s ago: executing program 0 (id=9380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) syz_emit_ethernet(0x46, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r4 = dup(r3) sendmmsg$inet(r4, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c012", 0x7e}, {&(0x7f00000002c0)="5bea4100000000000000", 0xa}, {&(0x7f00000005c0)="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", 0x1e8}], 0x3}}], 0x1, 0x400d5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) read$FUSE(r4, &(0x7f0000004a40)={0x2020}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000300)=r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x30010000, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3646959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc9d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6089ae6899d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec2c0911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8de7f4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c2715500b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017eef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f48451ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x35) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r8, 0x0, &(0x7f00000001c0)={{r9, r10+60000000}, {0x0, 0x989680}}, &(0x7f0000000200)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x823}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 10.527747612s ago: executing program 2 (id=9382): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4018aee3, &(0x7f0000000140)=@arm64_core={0x0, 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r8, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 8.751918991s ago: executing program 0 (id=9383): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r5, 0x8, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 8.719867257s ago: executing program 1 (id=9384): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xffffffff8602201a, 0x0, 0x7, 0x3}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x2b, 0x5, 0xffffffff2c000000, 0x4, 0x1, 0x1, 0xd, 0x0, 0x0, 0x0, 0x3}}, 0x50) creat(0x0, 0x182) rename(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @broadcast}, 0x3}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d030020000000000000130000004c00098007009365a4b8ffff0800"], 0x60}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r7, 0x331, 0x0, 0x25dfdbfe, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0x73, 0x9f, 0x20, 0x4a4, 0x14, 0xc957, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x4, 0xce, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0xa4, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3, 0xfc, 0x1, [@generic={0x7, 0x5, "910e3a85ea"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x7, 0x1}}]}}]}}]}}, 0x0) socket$inet6(0xa, 0xa, 0xfffffffe) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x3) 8.48456474s ago: executing program 2 (id=9385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20000800) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001800)=""/55, 0x37, 0x92c9) clock_getres(0x4, &(0x7f0000000300)) close(r3) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) unshare(0x20000400) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0xa, 0x0, 0x0) 7.665196331s ago: executing program 4 (id=9386): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.374389746s ago: executing program 5 (id=9387): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, 0xffffffffffffffff, 0xbf245000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x4, &(0x7f0000000140)={0x2b, 0x5, 0xfffffff9}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x6b, 0x6, "8c680fe5b7cc5e870a535e251457e91bf35c4d4fa9ac11e1f9a6b77dd91713851abcd32ae469013a05eb2c7eef7a3acc52bbdac5c8056696a9d4843783654a17d69e019eaf02cc58026463decfb76ed27cf6a26b97b9fd4de7b20d7181c6b8c56792004b9dcfd3"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x8}]}], {0x14}}, 0xe4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 6.753171098s ago: executing program 5 (id=9388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) 6.744615983s ago: executing program 0 (id=9389): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.47257451s ago: executing program 2 (id=9390): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, 0xffffffffffffffff, 0xbf245000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x4, &(0x7f0000000140)={0x2b, 0x5, 0xfffffff9}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x6b, 0x6, "8c680fe5b7cc5e870a535e251457e91bf35c4d4fa9ac11e1f9a6b77dd91713851abcd32ae469013a05eb2c7eef7a3acc52bbdac5c8056696a9d4843783654a17d69e019eaf02cc58026463decfb76ed27cf6a26b97b9fd4de7b20d7181c6b8c56792004b9dcfd3"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x8}]}], {0x14}}, 0xe4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000200000000000000000060000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 6.103740356s ago: executing program 1 (id=9391): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x22, &(0x7f0000000240)) syz_usbip_server_init(0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r3, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=[{0xc, 0x118, 0x8000}, {0xc, 0x84, 0x2}], 0x18}}], 0x1, 0x800) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) socket$tipc(0x1e, 0x0, 0x0) 5.788943848s ago: executing program 5 (id=9392): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) ppoll(&(0x7f0000000140)=[{r5, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 5.74095744s ago: executing program 2 (id=9393): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x2}, 0xff}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x101640, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r4, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0xc005, &(0x7f0000000040)=0x1001, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010140)=ANY=[@ANYBLOB="20000000760007000000000000000000030000000000"], 0x20}}, 0x0) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f0000006240)={0x2020}, 0x2020) 4.809330218s ago: executing program 4 (id=9394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) syz_emit_ethernet(0x46, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r4 = dup(r3) sendmmsg$inet(r4, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c012", 0x7e}, {&(0x7f00000002c0)="5bea4100000000000000", 0xa}, {&(0x7f00000005c0)="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", 0x1e8}], 0x3}}], 0x1, 0x400d5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) read$FUSE(r4, &(0x7f0000004a40)={0x2020}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000300)=r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x30010000, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x35) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r8, 0x0, &(0x7f00000001c0)={{r9, r10+60000000}, {0x0, 0x989680}}, &(0x7f0000000200)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x823}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 3.896651547s ago: executing program 5 (id=9395): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) 3.812716111s ago: executing program 4 (id=9396): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3.6817974s ago: executing program 0 (id=9397): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501043) syz_open_dev$video(0x0, 0x7ff, 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0xa000, 0x0, 0x2, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x6, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x0, 0x0, 0x1, 0x0, "0db8247eceebb3d05ec15da61d21076fbb00ee13e6a1379ab9598563eafe88eb64f872005d8dd4f47aa107eff9eebd1723e78baf7759405fbd947f9f441ce2674b70ca3427f9d90c12e71d1d9074b239"}, 0xd8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 2.691379737s ago: executing program 1 (id=9398): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xffffffff8602201a, 0x0, 0x7, 0x3}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x2b, 0x5, 0xffffffff2c000000, 0x4, 0x1, 0x1, 0xd, 0x0, 0x0, 0x0, 0x3}}, 0x50) creat(0x0, 0x182) rename(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @broadcast}, 0x3}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="0d030020000000000000130000004c00098007009365a4b8ffff080002001d00"], 0x60}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r7, 0x331, 0x0, 0x25dfdbfe, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0x73, 0x9f, 0x20, 0x4a4, 0x14, 0xc957, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x4, 0xce, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0xa4, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3, 0xfc, 0x1, [@generic={0x7, 0x5, "910e3a85ea"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x7, 0x1}}]}}]}}]}}, 0x0) socket$inet6(0xa, 0xa, 0xfffffffe) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x3) 2.643937419s ago: executing program 2 (id=9399): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, 0xffffffffffffffff, 0xbf245000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x4, &(0x7f0000000140)={0x2b, 0x5, 0xfffffff9}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x6b, 0x6, "8c680fe5b7cc5e870a535e251457e91bf35c4d4fa9ac11e1f9a6b77dd91713851abcd32ae469013a05eb2c7eef7a3acc52bbdac5c8056696a9d4843783654a17d69e019eaf02cc58026463decfb76ed27cf6a26b97b9fd4de7b20d7181c6b8c56792004b9dcfd3"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x8}]}], {0x14}}, 0xe4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 2.057169287s ago: executing program 5 (id=9400): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20000800) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001800)=""/55, 0x37, 0x92c9) clock_getres(0x4, &(0x7f0000000300)) close(r3) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) unshare(0x20000400) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0xa, 0x0, 0x0) 1.886899752s ago: executing program 4 (id=9401): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r4, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) ppoll(&(0x7f0000000140)=[{r4, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r4, 0x0) 1.30456439s ago: executing program 2 (id=9402): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$inet_sctp(0x2, 0x5, 0x84) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r2, 0x200004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) ppoll(&(0x7f0000000140)=[{r5, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d1) 459.654762ms ago: executing program 0 (id=9403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) 309.244194ms ago: executing program 0 (id=9404): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) ppoll(&(0x7f0000000140)=[{r5, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 232.104242ms ago: executing program 1 (id=9405): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 197.308312ms ago: executing program 5 (id=9406): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000086000/0x1000)=nil, 0x1000, 0x3000001) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x2000006, @remote, 0x1}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r7, 0x5) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 0s ago: executing program 4 (id=9407): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xffffffff8602201a, 0x0, 0x7, 0x3}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x2b, 0x5, 0xffffffff2c000000, 0x4, 0x1, 0x1, 0xd, 0x0, 0x0, 0x0, 0x3}}, 0x50) creat(0x0, 0x182) rename(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @broadcast}, 0x3}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="0d030020000000000000130000004c00098007009365a4b8ffff080002001d00"], 0x60}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r7, 0x331, 0x0, 0x25dfdbfe, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0x73, 0x9f, 0x20, 0x4a4, 0x14, 0xc957, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x4, 0xce, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0xa4, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3, 0xfc, 0x1, [@generic={0x7, 0x5, "910e3a85ea"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x7, 0x1}}]}}]}}]}}, 0x0) socket$inet6(0xa, 0xa, 0xfffffffe) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x3) kernel console output (not intermixed with test programs): onfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3322.724324][ T30] audit: type=1326 audit(1765243134.423:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3322.951967][ T30] audit: type=1326 audit(1765243134.423:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3323.444681][ T30] audit: type=1326 audit(1765243134.423:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3323.714809][ T30] audit: type=1326 audit(1765243134.423:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3323.792298][ T30] audit: type=1326 audit(1765243134.423:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3323.842977][ T30] audit: type=1326 audit(1765243134.423:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3323.904658][ T30] audit: type=1326 audit(1765243134.423:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3324.037517][ T30] audit: type=1326 audit(1765243134.423:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3324.107370][ T30] audit: type=1326 audit(1765243134.423:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3324.198114][ T30] audit: type=1326 audit(1765243134.423:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3324.264439][ T30] audit: type=1326 audit(1765243134.423:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3324.271844][T13834] vivid-007: ================= START STATUS ================= [ 3324.325670][ T30] audit: type=1326 audit(1765243134.423:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3324.356542][T13834] vivid-007: Enable Output Cropping: true [ 3324.364858][T13834] vivid-007: Enable Output Composing: true [ 3324.388560][T13834] vivid-007: Enable Output Scaler: true [ 3324.398185][T13834] vivid-007: Tx RGB Quantization Range: Automatic [ 3324.405353][ T30] audit: type=1326 audit(1765243134.423:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3324.428418][T13834] vivid-007: Transmit Mode: HDMI [ 3324.435857][T13834] vivid-007: Hotplug Present: 0x00000000 [ 3324.443571][T13834] vivid-007: RxSense Present: 0x00000000 [ 3324.461348][T13834] vivid-007: EDID Present: 0x00000000 [ 3324.472783][T13834] vivid-007: ================== END STATUS ================== [ 3324.490914][ T30] audit: type=1326 audit(1765243134.423:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.0.8853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3324.537825][T13850] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8858'. [ 3324.824646][T12602] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 3325.014699][T12602] usb 3-1: Using ep0 maxpacket: 32 [ 3325.041388][T12602] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 3325.054595][T12602] usb 3-1: config 0 has no interface number 0 [ 3325.085570][T12602] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3325.140346][T12602] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3325.153857][T12602] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3325.166807][T12602] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3325.178434][T12602] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3325.194053][T13864] xt_connbytes: Forcing CT accounting to be enabled [ 3325.206492][T13864] xt_TPROXY: Can be used only with -p tcp or -p udp [ 3325.236117][T12602] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3325.275784][T12602] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3325.319747][T12602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3325.328160][T12602] usb 3-1: Product: syz [ 3325.332661][T12602] usb 3-1: Manufacturer: syz [ 3325.429855][T12602] usb 3-1: SerialNumber: syz [ 3325.463262][T12602] usb 3-1: config 0 descriptor?? [ 3325.486396][T13850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3325.497253][T13850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3325.556031][T12602] ipaq 3-1:0.19: PocketPC PDA converter detected [ 3325.582536][T12602] usb 3-1: active config #0 != 1 ?? [ 3325.826122][T13459] usb 3-1: USB disconnect, device number 85 [ 3326.173205][T13879] input: syz0 as /devices/virtual/input/input173 [ 3326.365071][T13880] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 3326.371615][T13880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3326.788743][T13880] vhci_hcd vhci_hcd.0: Device attached [ 3327.324616][T12602] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 3327.464891][T13894] syz.2.8866(13894): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 3327.706001][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.712286][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3329.196709][T13913] net_ratelimit: 5 callbacks suppressed [ 3329.196721][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3329.210544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3329.897767][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 3329.897784][ T30] audit: type=1326 audit(1765243142.103:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.0.8871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3329.972827][T13921] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8873'. [ 3330.042495][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8873'. [ 3330.736817][ T30] audit: type=1326 audit(1765243142.943:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13929 comm="syz.1.8875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 3330.796645][ T30] audit: type=1326 audit(1765243142.963:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13929 comm="syz.1.8875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 3330.907211][ T30] audit: type=1326 audit(1765243142.963:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13929 comm="syz.1.8875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 3330.933603][ T30] audit: type=1326 audit(1765243142.963:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13929 comm="syz.1.8875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 3330.964599][T13459] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 3331.015565][T13932] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8876'. [ 3331.184710][T13459] usb 1-1: Using ep0 maxpacket: 32 [ 3331.205327][T13459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3331.218278][ T30] audit: type=1326 audit(1765243142.963:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13929 comm="syz.1.8875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 3331.242681][T13459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3331.262082][T13459] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3331.274368][T13459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3331.282603][ T30] audit: type=1326 audit(1765243142.963:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13929 comm="syz.1.8875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 3331.312433][T13459] usb 1-1: config 0 descriptor?? [ 3331.327536][T13459] hub 1-1:0.0: USB hub found [ 3331.338095][ T30] audit: type=1326 audit(1765243142.963:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13929 comm="syz.1.8875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 3331.452472][ T30] audit: type=1326 audit(1765243142.963:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13929 comm="syz.1.8875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 3331.532825][ T30] audit: type=1326 audit(1765243142.963:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13929 comm="syz.1.8875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 3333.237129][T13459] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 3333.306566][T13459] usbhid 1-1:0.0: can't add hid device: -71 [ 3333.324613][T13459] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3333.376507][T13459] usb 1-1: USB disconnect, device number 97 [ 3334.079161][T13961] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 3334.085718][T13961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3334.105701][T13961] vhci_hcd vhci_hcd.0: Device attached [ 3334.365763][T13459] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 3336.286135][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 3336.286153][ T30] audit: type=1326 audit(1765243148.493:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3336.494602][ T30] audit: type=1326 audit(1765243148.493:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3336.635655][ T30] audit: type=1326 audit(1765243148.493:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3336.835148][ T30] audit: type=1326 audit(1765243148.493:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3337.121207][ T30] audit: type=1326 audit(1765243148.493:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3337.794273][ T30] audit: type=1326 audit(1765243148.493:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3337.822865][ T30] audit: type=1326 audit(1765243148.493:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3337.935386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3337.944888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3337.973964][ T30] audit: type=1326 audit(1765243148.493:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3338.032090][ T30] audit: type=1326 audit(1765243148.493:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3338.054680][ T30] audit: type=1326 audit(1765243148.493:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13977 comm="syz.1.8884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3338.156431][T14011] vhci_hcd vhci_hcd.0: port 0 already used [ 3338.167913][T14017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3338.527034][T14019] hub 9-0:1.0: USB hub found [ 3338.534831][T14019] hub 9-0:1.0: 1 port detected [ 3339.406813][T14024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8892'. [ 3340.467814][T14031] vhci_hcd vhci_hcd.0: port 0 already used [ 3341.135270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3341.143959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3341.606591][T14050] vivid-007: ================= START STATUS ================= [ 3341.614431][T14050] vivid-007: Enable Output Cropping: true [ 3341.620602][T14050] vivid-007: Enable Output Composing: true [ 3341.626536][T14050] vivid-007: Enable Output Scaler: true [ 3341.632124][T14050] vivid-007: Tx RGB Quantization Range: Automatic [ 3341.638627][T14050] vivid-007: Transmit Mode: HDMI [ 3341.643612][T14050] vivid-007: Hotplug Present: 0x00000000 [ 3341.649537][T14050] vivid-007: RxSense Present: 0x00000000 [ 3341.655284][T14050] vivid-007: EDID Present: 0x00000000 [ 3341.660693][T14050] vivid-007: ================== END STATUS ================== [ 3344.843803][T14086] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 3344.851544][T14086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3345.380398][T12783] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 3345.676716][T12783] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 3345.747657][T12783] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 3345.796539][T12783] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3345.866642][T12783] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3345.935684][T12783] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3345.943866][T12783] usb 3-1: Product: syz [ 3345.985210][T12783] usb 3-1: Manufacturer: syz [ 3345.990050][T12783] usb 3-1: SerialNumber: syz [ 3346.495632][T12783] usb 3-1: config 0 descriptor?? [ 3346.635230][T14089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3346.668491][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8908'. [ 3346.684823][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8908'. [ 3346.696643][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8908'. [ 3346.842101][T12783] usb 3-1: selecting invalid altsetting 0 [ 3347.086089][T14113] vhci_hcd vhci_hcd.0: port 0 already used [ 3347.148077][T14117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8909'. [ 3348.379073][T12783] usb 3-1: USB disconnect, device number 86 [ 3348.768360][T14126] input: syz1 as /devices/virtual/input/input174 [ 3354.164855][T14183] EXT4-fs: Conflicting test_dummy_encryption options [ 3354.788106][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 3354.788123][ T30] audit: type=1326 audit(1765243166.983:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14177 comm="syz.0.8920" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3355.542114][T14198] vhci_hcd vhci_hcd.0: port 0 already used [ 3356.879825][T12783] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 3357.003201][T14212] netlink: 'syz.2.8927': attribute type 10 has an invalid length. [ 3357.034635][T12783] usb 6-1: Using ep0 maxpacket: 32 [ 3357.087629][T14212] netlink: 'syz.2.8927': attribute type 10 has an invalid length. [ 3357.096019][T14212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8927'. [ 3357.110864][T12783] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3357.120234][T12783] usb 6-1: config 0 has no interface number 0 [ 3357.127496][T12783] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3357.187590][T12783] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3357.263134][T12783] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3357.293620][T12783] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3357.339702][T12783] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3357.354641][T12783] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3357.392440][T12783] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3357.410505][T12783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3357.422993][T12783] usb 6-1: Product: syz [ 3357.430745][T12783] usb 6-1: Manufacturer: syz [ 3357.436959][T12783] usb 6-1: SerialNumber: syz [ 3357.699993][T12783] usb 6-1: config 0 descriptor?? [ 3357.737988][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8929'. [ 3357.784313][T14204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3357.804349][T14204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3357.883447][T12783] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3358.284956][T12783] usb 6-1: active config #0 != 1 ?? [ 3358.634433][T12783] usb 6-1: USB disconnect, device number 106 [ 3360.545230][ T30] audit: type=1326 audit(1765243172.753:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.4.8932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 3361.050344][T14247] vhci_hcd vhci_hcd.0: port 0 already used [ 3362.113146][T14249] vhci_hcd vhci_hcd.0: port 0 already used [ 3363.175303][T14276] wg1: Caught tx_queue_len zero misconfig [ 3364.274631][T12604] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 3364.288069][T14290] vhci_hcd vhci_hcd.0: port 0 already used [ 3364.444848][T12604] usb 6-1: Using ep0 maxpacket: 32 [ 3364.527127][T12604] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3364.547402][T12604] usb 6-1: config 0 has no interface number 0 [ 3364.575042][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3364.586546][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3364.596734][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3364.755772][T12604] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3364.814847][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3364.863676][T12604] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3364.937474][T12604] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3364.954588][T12604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3365.054771][T12604] usb 6-1: Product: syz [ 3365.058959][T12604] usb 6-1: Manufacturer: syz [ 3365.090765][T12604] usb 6-1: SerialNumber: syz [ 3365.178804][T12604] usb 6-1: config 0 descriptor?? [ 3365.199700][T14286] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3365.211979][T14286] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3365.260779][T12604] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3365.269899][T12604] usb 6-1: active config #0 != 1 ?? [ 3365.475499][T12604] usb 6-1: USB disconnect, device number 107 [ 3365.730665][T14307] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 3365.793450][T14307] bond0 (unregistering): Released all slaves [ 3367.374178][ T30] audit: type=1326 audit(1765243179.573:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.5.8947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3368.010895][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8951'. [ 3368.027433][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8951'. [ 3368.713090][T14333] binder: 14330:14333 ioctl c018620c 800002c0 returned -1 [ 3369.294761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3369.303460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3369.330002][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8953'. [ 3369.981246][T14322] vhci_hcd vhci_hcd.0: port 0 already used [ 3370.315017][T14354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8954'. [ 3372.106162][T21757] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 3372.264616][T21757] usb 2-1: Using ep0 maxpacket: 32 [ 3372.407541][T21757] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 3372.424670][T21757] usb 2-1: config 0 has no interface number 0 [ 3372.430971][T21757] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3372.462942][T21757] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3372.475086][T21757] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3372.494818][T21757] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3372.495176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3372.514812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3372.588152][T21757] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3372.680107][T21757] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3372.707757][T21757] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3372.717070][T21757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3372.725188][T21757] usb 2-1: Product: syz [ 3372.729367][T21757] usb 2-1: Manufacturer: syz [ 3372.738592][T21757] usb 2-1: SerialNumber: syz [ 3372.774609][T21757] usb 2-1: config 0 descriptor?? [ 3372.793349][T14367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3372.807615][T14367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3372.829268][T14380] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[14380] [ 3372.851735][T21757] ipaq 2-1:0.19: PocketPC PDA converter detected [ 3372.872386][T21757] usb 2-1: active config #0 != 1 ?? [ 3372.971613][T14380] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8959'. [ 3373.149444][T12604] usb 2-1: USB disconnect, device number 8 [ 3376.011677][T14415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3376.224885][T14415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3376.234868][T14415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3376.244339][T14415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3376.260791][T14415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3376.289785][T14415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3376.428828][ T30] audit: type=1326 audit(1765243188.633:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14409 comm="syz.5.8966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3376.463168][T14420] tun1: tun_chr_ioctl cmd 1074025675 [ 3376.469995][T14420] tun1: persist enabled [ 3376.482276][T14420] tun1: tun_chr_ioctl cmd 1074025675 [ 3376.501206][T14420] tun1: persist disabled [ 3376.854660][T21757] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 3377.073776][T21757] usb 2-1: config 86 has an invalid interface number: 125 but max is 1 [ 3377.125209][T21757] usb 2-1: config 86 has an invalid interface descriptor of length 5, skipping [ 3377.148691][T21757] usb 2-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 3377.180088][T21757] usb 2-1: config 86 has no interface number 0 [ 3377.196311][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8969'. [ 3377.294866][T21757] usb 2-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 3377.349950][T14437] hub 9-0:1.0: USB hub found [ 3377.356267][T14437] hub 9-0:1.0: 1 port detected [ 3377.367338][T21757] usb 2-1: config 86 interface 125 has no altsetting 0 [ 3377.393378][T21757] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 3377.407059][T21757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3377.416970][T21757] usb 2-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 3377.741932][T21757] usb 2-1: USB disconnect, device number 9 [ 3379.827807][T14457] vhci_hcd vhci_hcd.0: port 0 already used [ 3380.413869][T14472] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 3382.259302][T12604] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 3382.504626][T12604] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 3382.517472][T12604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.560134][T12604] usb 2-1: Product: syz [ 3382.594807][T12604] usb 2-1: Manufacturer: syz [ 3382.599516][T12604] usb 2-1: SerialNumber: syz [ 3382.881661][T12604] rtl8150 2-1:1.0: couldn't reset the device [ 3383.005283][T12604] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 3383.203687][T12604] usb 2-1: USB disconnect, device number 10 [ 3383.614914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.623563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.631984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.640336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.648754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.657047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.665274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.673520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.681759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.690019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3384.264081][T14513] hub 9-0:1.0: USB hub found [ 3384.288653][T14513] hub 9-0:1.0: 1 port detected [ 3384.729485][T14527] wg1: Caught tx_queue_len zero misconfig [ 3386.904652][T12604] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 3386.956967][T14548] netlink: 'syz.4.8993': attribute type 2 has an invalid length. [ 3387.065182][T14546] vhci_hcd vhci_hcd.0: port 0 already used [ 3387.256917][T12604] usb 6-1: Using ep0 maxpacket: 32 [ 3387.287331][T12604] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3387.304665][T12604] usb 6-1: config 0 has no interface number 0 [ 3387.313576][T14554] tipc: Failed to remove unknown binding: 66,1,1/4:2807782464/2807782466 [ 3387.315263][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3387.355611][T14554] tipc: Failed to remove unknown binding: 66,1,1/4:2807782464/2807782466 [ 3387.364085][T14554] tipc: Failed to remove unknown binding: 66,1,1/4:2807782464/2807782466 [ 3387.372691][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3387.412348][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3387.432711][T12604] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3387.451219][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3387.482660][T12604] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3387.521991][T12604] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3387.542218][T12604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.635420][T12604] usb 6-1: Product: syz [ 3387.662561][T12604] usb 6-1: Manufacturer: syz [ 3387.687071][T12604] usb 6-1: SerialNumber: syz [ 3387.703189][T12604] usb 6-1: config 0 descriptor?? [ 3387.720441][T14539] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3387.728503][T14539] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3387.750858][T12604] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3387.759843][T12604] usb 6-1: active config #0 != 1 ?? [ 3388.005156][T12604] usb 6-1: USB disconnect, device number 108 [ 3389.144383][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.150867][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.420661][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8997'. [ 3389.430068][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8997'. [ 3389.484881][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8997'. [ 3389.487138][T14582] net_ratelimit: 36 callbacks suppressed [ 3389.487154][T14582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3389.508133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3390.876743][T14597] bond16: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 3391.012369][T14597] bond16 (unregistering): Released all slaves [ 3391.854866][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3392.555960][T14614] wg1: Caught tx_queue_len zero misconfig [ 3392.671383][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9006'. [ 3392.894678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.323153][T14637] binder: 14628:14637 ioctl c018620c 800002c0 returned -1 [ 3394.501336][T14626] vhci_hcd vhci_hcd.0: port 0 already used [ 3394.734730][T12604] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 3394.894976][T12604] usb 6-1: Using ep0 maxpacket: 32 [ 3394.908833][T12604] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3394.922044][T12604] usb 6-1: config 0 has no interface number 0 [ 3395.242942][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3395.262281][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3395.355425][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3395.507171][T12604] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3395.544588][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3395.704615][T12604] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3395.723978][T12604] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3395.733283][T12604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.744612][T12604] usb 6-1: Product: syz [ 3395.748774][T12604] usb 6-1: Manufacturer: syz [ 3395.753339][T12604] usb 6-1: SerialNumber: syz [ 3395.764489][T12604] usb 6-1: config 0 descriptor?? [ 3395.774026][T14632] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3395.784059][T14632] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3395.802756][T12604] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3395.816938][T12604] usb 6-1: active config #0 != 1 ?? [ 3395.984612][T12783] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3396.055030][T12604] usb 6-1: USB disconnect, device number 109 [ 3396.414778][T12783] usb 3-1: Using ep0 maxpacket: 16 [ 3396.431175][T12783] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3396.582918][T12783] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3396.603903][T12783] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 3396.636033][T12783] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3396.647539][T12783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3396.684583][T12783] usb 3-1: SerialNumber: syz [ 3396.722203][T12783] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 3397.455565][T14666] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9013'. [ 3397.464958][T14666] ip6tnl0: Caught tx_queue_len zero misconfig [ 3397.581011][T14668] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3398.385698][T12604] usb 3-1: USB disconnect, device number 87 [ 3399.914653][T12604] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 3400.124875][T12604] usb 1-1: Using ep0 maxpacket: 32 [ 3400.136760][T12604] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 3400.152434][T12604] usb 1-1: config 0 has no interface number 0 [ 3400.163909][T12604] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3400.180005][T12604] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3400.207809][T12604] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3400.278630][T12604] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3400.389509][T12604] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3400.478889][T12604] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3400.580074][T14702] netlink: 'syz.5.9021': attribute type 10 has an invalid length. [ 3400.599114][T14702] netlink: 'syz.5.9021': attribute type 10 has an invalid length. [ 3400.610676][T14702] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9021'. [ 3400.786162][T12604] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3400.913859][T12604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3400.951378][T12604] usb 1-1: Product: syz [ 3401.098063][T12604] usb 1-1: Manufacturer: syz [ 3401.106259][T12604] usb 1-1: SerialNumber: syz [ 3401.118456][T12604] usb 1-1: config 0 descriptor?? [ 3401.124356][T14676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3401.174781][T14676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3401.200530][T12604] ipaq 1-1:0.19: PocketPC PDA converter detected [ 3401.217305][T12604] usb 1-1: active config #0 != 1 ?? [ 3401.295147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3401.303606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3401.388229][T12604] usb 1-1: USB disconnect, device number 98 [ 3402.620228][T14707] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 3402.628181][T14707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3403.198874][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9026'. [ 3403.208024][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9026'. [ 3403.218161][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9026'. [ 3403.258203][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9027'. [ 3403.467747][ T30] audit: type=1326 audit(1765243215.673:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14708 comm="syz.1.9023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3403.854999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3403.863631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3406.168094][T14754] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9033'. [ 3406.470938][ T30] audit: type=1800 audit(1765243218.673:4769): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9029" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 3406.495701][T21757] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3406.655205][T21757] usb 2-1: Using ep0 maxpacket: 32 [ 3406.667898][T21757] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 3406.678443][T21757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.686817][T21757] usb 2-1: Product: syz [ 3406.691191][T21757] usb 2-1: Manufacturer: syz [ 3406.697929][T21757] usb 2-1: SerialNumber: syz [ 3406.710285][T21757] usb 2-1: config 0 descriptor?? [ 3406.934118][T21757] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 3406.942984][T21757] b3 c1 69 eb 50 3d 29 15 [ 3406.959714][T21757] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 3407.148228][T21757] usb 2-1: USB disconnect, device number 11 [ 3408.388808][T14784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9039'. [ 3408.467160][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9039'. [ 3409.700939][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9042'. [ 3409.817649][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9042'. [ 3409.939431][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9040'. [ 3409.954941][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9042'. [ 3410.144636][T21757] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 3410.474600][T21757] usb 6-1: Using ep0 maxpacket: 32 [ 3410.566450][T21757] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3410.591174][T21757] usb 6-1: config 0 has no interface number 0 [ 3410.601324][T21757] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3410.634645][T21757] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3410.651738][T21757] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3410.757684][T12604] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 3410.777891][T21757] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3410.805926][T21757] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3410.846444][T21757] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3410.887573][T21757] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3410.924824][T12604] usb 2-1: Using ep0 maxpacket: 32 [ 3410.925068][T21757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.939336][T12604] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 3410.965213][T21757] usb 6-1: Product: syz [ 3410.968510][T12604] usb 2-1: config 0 has no interface number 0 [ 3410.976257][T21757] usb 6-1: Manufacturer: syz [ 3411.011391][T12604] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3411.022895][T21757] usb 6-1: SerialNumber: syz [ 3411.031270][T21757] usb 6-1: config 0 descriptor?? [ 3411.058665][T14797] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3411.065422][T12604] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3411.075216][T14797] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3411.096357][T21757] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3411.097497][T12604] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3411.103461][T21757] usb 6-1: active config #0 != 1 ?? [ 3411.117892][T12604] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3411.140590][T12604] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3411.167437][T12604] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3411.222902][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9045'. [ 3411.265953][T12604] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3411.284796][T12604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3411.342268][T12604] usb 2-1: Product: syz [ 3411.346582][T12604] usb 2-1: Manufacturer: syz [ 3411.351318][T12604] usb 2-1: SerialNumber: syz [ 3411.360030][T12604] usb 2-1: config 0 descriptor?? [ 3411.366134][T14808] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3411.374162][T14808] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3411.387316][T12604] ipaq 2-1:0.19: PocketPC PDA converter detected [ 3411.475006][T12604] usb 2-1: active config #0 != 1 ?? [ 3411.498145][T14818] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 3411.602527][T21757] usb 2-1: USB disconnect, device number 12 [ 3412.635005][T12604] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 3412.723969][T21757] usb 6-1: USB disconnect, device number 110 [ 3412.799178][T12604] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3412.799197][T12604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.799208][T12604] usb 1-1: Product: syz [ 3412.799217][T12604] usb 1-1: Manufacturer: syz [ 3412.799225][T12604] usb 1-1: SerialNumber: syz [ 3412.816552][T12604] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3412.842985][ T6190] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3413.191803][T14839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9051'. [ 3413.952226][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9052'. [ 3413.961310][ T6190] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3413.998674][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9053'. [ 3414.011764][ T6190] ath9k_htc: Failed to initialize the device [ 3414.125263][ T6190] usb 1-1: ath9k_htc: USB layer deinitialized [ 3414.225593][T12604] usb 1-1: USB disconnect, device number 99 [ 3417.144898][T14876] vhci_hcd vhci_hcd.0: port 0 already used [ 3417.184811][T14876] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 3417.191437][T14876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3417.218157][T14882] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(16) [ 3417.224779][T14882] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3417.247040][T14876] vhci_hcd vhci_hcd.0: Device attached [ 3417.254664][T12604] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3417.289053][T14882] vhci_hcd vhci_hcd.0: Device attached [ 3417.308827][T14886] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 3417.315456][T14886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3417.407933][T12604] usb 3-1: Using ep0 maxpacket: 32 [ 3417.426141][T12604] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 3417.434636][T12604] usb 3-1: config 0 has no interface number 0 [ 3417.444471][T12604] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3417.465965][T12604] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3417.474569][T14886] vhci_hcd vhci_hcd.0: Device attached [ 3417.496361][T12604] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3417.525033][T14876] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 3417.531635][T14876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3417.584593][T12604] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3417.632177][T12604] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3417.652289][T14882] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(22) [ 3417.658912][T14882] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3417.671269][T14876] vhci_hcd vhci_hcd.0: Device attached [ 3417.676841][T12604] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3417.717553][T14882] vhci_hcd vhci_hcd.0: Device attached [ 3417.733084][T12604] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3417.742837][T12604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3417.753824][T14876] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3417.771685][T12604] usb 3-1: Product: syz [ 3417.784618][T12604] usb 3-1: Manufacturer: syz [ 3417.801822][T12604] usb 3-1: SerialNumber: syz [ 3417.816476][T12604] usb 3-1: config 0 descriptor?? [ 3417.824205][T14873] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3417.832159][T14873] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3417.926701][T14882] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3417.936967][T14876] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 3417.943579][T14876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3417.953031][T12604] ipaq 3-1:0.19: PocketPC PDA converter detected [ 3417.959892][T14882] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(32) [ 3417.960029][T12604] usb 3-1: active config #0 != 1 ?? [ 3417.966492][T14882] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3417.984475][T14876] vhci_hcd vhci_hcd.0: Device attached [ 3418.045382][T14882] vhci_hcd vhci_hcd.0: Device attached [ 3418.189734][T14909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9065'. [ 3418.226066][T14909] libceph: resolve '0..' (ret=-3): failed [ 3418.245727][T21757] usb 3-1: USB disconnect, device number 88 [ 3418.293273][T14894] vhci_hcd: connection closed [ 3418.293943][T12437] vhci_hcd vhci_hcd.0: stop threads [ 3418.305238][T14901] vhci_hcd: connection closed [ 3418.305483][T12437] vhci_hcd vhci_hcd.0: release socket [ 3418.322297][T14887] vhci_hcd: connection closed [ 3418.322436][T14892] vhci_hcd: connection closed [ 3418.323931][T14883] vhci_hcd: connection closed [ 3418.327405][T14880] vhci_hcd: connection closed [ 3418.348646][T12437] vhci_hcd vhci_hcd.0: disconnect device [ 3418.376051][T12437] vhci_hcd vhci_hcd.0: stop threads [ 3418.386377][T12437] vhci_hcd vhci_hcd.0: release socket [ 3418.399574][T12437] vhci_hcd vhci_hcd.0: disconnect device [ 3418.409852][T12437] vhci_hcd vhci_hcd.0: stop threads [ 3418.425307][T12437] vhci_hcd vhci_hcd.0: release socket [ 3418.450424][T12437] vhci_hcd vhci_hcd.0: disconnect device [ 3418.470836][T12437] vhci_hcd vhci_hcd.0: stop threads [ 3418.480742][T12437] vhci_hcd vhci_hcd.0: release socket [ 3418.502291][T12437] vhci_hcd vhci_hcd.0: disconnect device [ 3418.519250][T12437] vhci_hcd vhci_hcd.0: stop threads [ 3418.541422][T12437] vhci_hcd vhci_hcd.0: release socket [ 3418.565049][T12437] vhci_hcd vhci_hcd.0: disconnect device [ 3418.867496][T12437] vhci_hcd vhci_hcd.0: stop threads [ 3418.893092][T12437] vhci_hcd vhci_hcd.0: release socket [ 3418.944737][T12437] vhci_hcd vhci_hcd.0: disconnect device [ 3418.975161][T14904] vhci_hcd: connection closed [ 3418.976928][T12437] vhci_hcd vhci_hcd.0: stop threads [ 3419.009878][T12437] vhci_hcd vhci_hcd.0: release socket [ 3419.057037][T12437] vhci_hcd vhci_hcd.0: disconnect device [ 3419.544642][T12604] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 3419.720364][T14919] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3419.844756][T12604] usb 1-1: Using ep0 maxpacket: 32 [ 3419.851506][T12604] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 3419.860174][T12604] usb 1-1: config 0 has no interface number 0 [ 3419.867128][T12604] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3419.993807][T12604] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3420.026435][T12604] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3420.041029][T12604] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3420.544331][T12604] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3420.683636][T14938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9069'. [ 3420.716550][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9069'. [ 3420.778830][T12604] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3420.825018][T12604] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3420.834468][T12604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.842899][T12604] usb 1-1: Product: syz [ 3420.847137][T12604] usb 1-1: Manufacturer: syz [ 3420.851731][T12604] usb 1-1: SerialNumber: syz [ 3421.145460][T12604] usb 1-1: config 0 descriptor?? [ 3421.151359][T14915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3421.158709][T14915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3421.174632][T12604] ipaq 1-1:0.19: PocketPC PDA converter detected [ 3421.439070][T12604] usb 1-1: active config #0 != 1 ?? [ 3421.719782][T12604] usb 1-1: USB disconnect, device number 100 [ 3422.442766][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9071'. [ 3422.454442][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9071'. [ 3422.596380][T14956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9070'. [ 3423.496096][T14961] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 3425.256897][T12604] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 3425.385953][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9078'. [ 3425.484807][T12604] usb 1-1: Using ep0 maxpacket: 32 [ 3425.511814][T14991] xt_l2tp: missing protocol rule (udp|l2tpip) [ 3425.605093][T12604] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 3425.613183][T12604] usb 1-1: config 0 has no interface number 0 [ 3425.710321][T12604] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3425.793786][T12604] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3425.877957][T12604] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3425.925947][T12604] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3425.991731][T12604] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3426.274965][T12604] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3426.305376][T12604] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3426.314566][T12604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3426.322557][T12604] usb 1-1: Product: syz [ 3426.353372][T12604] usb 1-1: Manufacturer: syz [ 3426.375418][T12604] usb 1-1: SerialNumber: syz [ 3426.439497][T12604] usb 1-1: config 0 descriptor?? [ 3426.485312][T14981] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3426.492549][T14981] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3426.553047][T12604] ipaq 1-1:0.19: PocketPC PDA converter detected [ 3426.559640][T12604] usb 1-1: active config #0 != 1 ?? [ 3426.820450][T15002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3426.918156][T12604] usb 1-1: USB disconnect, device number 101 [ 3428.194716][T21834] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 3428.424830][T21834] usb 2-1: Using ep0 maxpacket: 32 [ 3428.432643][T21834] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 3428.440889][T21834] usb 2-1: config 0 has no interface number 0 [ 3428.448021][T21834] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3428.464896][T21834] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3428.475037][T21834] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3428.691133][T15014] vhci_hcd vhci_hcd.0: port 0 already used [ 3428.773404][T21834] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3428.794761][T21834] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3428.814765][T21834] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3428.897603][T21834] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3428.972203][T21834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3428.980694][T21834] usb 2-1: Product: syz [ 3428.985216][T21834] usb 2-1: Manufacturer: syz [ 3428.989814][T21834] usb 2-1: SerialNumber: syz [ 3429.017134][T21834] usb 2-1: config 0 descriptor?? [ 3429.038049][T15010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3429.118467][T15010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3429.150576][T21834] ipaq 2-1:0.19: PocketPC PDA converter detected [ 3429.255235][T21834] usb 2-1: active config #0 != 1 ?? [ 3429.381022][T21834] usb 2-1: USB disconnect, device number 13 [ 3430.585929][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9091'. [ 3430.596361][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9091'. [ 3430.664282][T15048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3430.673162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3431.431347][T15056] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9092'. [ 3431.784665][T21757] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 3431.934632][T21757] usb 2-1: Using ep0 maxpacket: 32 [ 3431.948997][T21757] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 3431.957183][T21757] usb 2-1: config 0 has no interface number 0 [ 3431.980651][T21757] usb 2-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 3431.990285][T21757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3432.010294][T21757] usb 2-1: Product: syz [ 3432.014812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3432.015222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3432.124730][T21757] usb 2-1: Manufacturer: syz [ 3432.130794][T21757] usb 2-1: SerialNumber: syz [ 3432.192455][T21757] usb 2-1: config 0 descriptor?? [ 3434.566928][T21757] cp210x 2-1:0.79: cp210x converter detected [ 3434.573604][T21757] cp210x 2-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 3434.584933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3434.593426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3434.643660][T21757] cp210x 2-1:0.79: querying part number failed [ 3434.684681][T12604] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 3434.709782][T21757] usb 2-1: cp210x converter now attached to ttyUSB0 [ 3434.753941][T21757] usb 2-1: USB disconnect, device number 14 [ 3434.854640][T12604] usb 6-1: Using ep0 maxpacket: 32 [ 3434.860844][T21757] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3434.862148][T12604] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3434.975027][T21757] cp210x 2-1:0.79: device disconnected [ 3434.984568][T12604] usb 6-1: config 0 has no interface number 0 [ 3435.018997][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3435.063146][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3435.084649][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3435.199231][T12604] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3435.219453][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3435.272693][T12604] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3435.312057][T12604] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3435.322347][T12604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3435.332708][T12604] usb 6-1: Product: syz [ 3435.337071][T12604] usb 6-1: Manufacturer: syz [ 3435.357437][T12604] usb 6-1: SerialNumber: syz [ 3435.387075][T12604] usb 6-1: config 0 descriptor?? [ 3435.408665][T15081] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3435.418344][T15081] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3435.476145][T12604] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3435.529588][T12604] usb 6-1: active config #0 != 1 ?? [ 3435.793585][T12604] usb 6-1: USB disconnect, device number 111 [ 3435.921155][T15094] vhci_hcd vhci_hcd.0: port 0 already used [ 3436.588917][T15110] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 3436.596852][T15110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3439.255139][T15134] tipc: Enabling of bearer rejected, failed to enable media [ 3439.516575][T15142] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 3441.325280][T15160] vhci_hcd vhci_hcd.0: port 0 already used [ 3444.035185][T12604] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 3444.301336][T12604] usb 6-1: Using ep0 maxpacket: 32 [ 3444.414599][T12604] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3444.434789][T12604] usb 6-1: config 0 has no interface number 0 [ 3444.440904][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3444.451768][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3444.462252][T12604] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3444.545211][T12604] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3444.578272][T12604] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3444.767945][T12604] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3445.145530][T12604] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3445.159459][T12604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3445.197432][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9122'. [ 3445.285119][T12604] usb 6-1: Product: syz [ 3445.293760][T12604] usb 6-1: Manufacturer: syz [ 3445.314758][T12604] usb 6-1: SerialNumber: syz [ 3445.442143][T12604] usb 6-1: config 0 descriptor?? [ 3445.501105][T15198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3445.524788][T15198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3445.647489][T12604] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3445.654013][T12604] usb 6-1: active config #0 != 1 ?? [ 3446.197163][T15216] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 3446.347986][T12604] usb 6-1: USB disconnect, device number 112 [ 3446.612169][T15219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3447.033332][T21757] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 3447.306711][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3447.324678][T21757] usb 3-1: Using ep0 maxpacket: 32 [ 3447.336199][T21757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3447.356702][T21757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3447.374749][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3447.383091][T21757] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3447.414727][T21757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 3447.426023][T21757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3447.461518][T21757] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3447.471868][T21757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3447.480005][T21757] usb 3-1: Product: syz [ 3447.484225][T21757] usb 3-1: Manufacturer: syz [ 3447.488842][T21757] usb 3-1: SerialNumber: syz [ 3447.495851][T21757] usb 3-1: config 0 descriptor?? [ 3447.502236][T15219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3447.530867][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3447.591755][T21757] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input176 [ 3447.655263][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3447.807926][ T5181] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3447.931985][T15238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3448.085205][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3448.093507][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3448.365858][T15245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3448.374419][T15219] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3448.387026][T15245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3448.541074][T15229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3448.544747][ T5181] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3448.708143][T15194] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3448.793637][ T5181] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3449.085689][ T5181] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3449.341143][ T5181] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3449.435251][ T5181] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3449.532981][T12604] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 3449.719578][T12604] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3449.748196][T12604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3449.785358][T12604] usb 1-1: config 0 descriptor?? [ 3449.820537][T12604] cp210x 1-1:0.0: cp210x converter detected [ 3450.201869][T21834] usb 3-1: USB disconnect, device number 89 [ 3450.266357][T12604] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 3450.579018][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.586761][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.988238][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9131'. [ 3450.997275][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9131'. [ 3451.006441][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9131'. [ 3452.337189][T12604] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 3452.354608][T12604] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 3452.372906][T12604] usb 1-1: cp210x converter now attached to ttyUSB0 [ 3452.401312][T12604] usb 1-1: USB disconnect, device number 102 [ 3452.437403][T12604] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3452.455337][T12604] cp210x 1-1:0.0: device disconnected [ 3453.950620][T21757] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 3454.178682][T15304] tipc: Failed to remove unknown binding: 66,1,1/204729890:2206944413/2206944415 [ 3454.190423][T15304] tipc: Failed to remove unknown binding: 66,1,1/204729890:2206944413/2206944415 [ 3454.205254][T15304] tipc: Failed to remove unknown binding: 66,1,1/204729890:2206944413/2206944415 [ 3454.344796][T21757] usb 6-1: Using ep0 maxpacket: 32 [ 3454.459210][T21757] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3454.524620][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9141'. [ 3454.934607][T21757] usb 6-1: config 0 has no interface number 0 [ 3455.334739][T21757] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3455.411825][T21757] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3455.422360][T21757] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3455.434410][T21757] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3455.446197][T21757] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3455.456677][T21757] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3455.477682][T21757] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3455.487300][T21757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.507490][T21757] usb 6-1: Product: syz [ 3455.511677][T21757] usb 6-1: Manufacturer: syz [ 3455.516575][T21757] usb 6-1: SerialNumber: syz [ 3455.675004][T21757] usb 6-1: config 0 descriptor?? [ 3455.680761][T15292] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3455.699631][T15292] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3455.736143][T21757] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3455.753379][T21757] usb 6-1: active config #0 != 1 ?? [ 3455.922383][T21757] usb 6-1: USB disconnect, device number 113 [ 3456.053437][T15323] 8021q: adding VLAN 0 to HW filter on device team0 [ 3456.086411][T15323] net_ratelimit: 1 callbacks suppressed [ 3456.086422][T15323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3456.257686][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3456.267482][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3456.292769][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3456.533982][T15328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3456.564359][T15328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3456.573565][T15328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3456.582311][T15328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3456.620202][T15328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3456.656375][T15328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3456.849912][T21834] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 3457.308523][T15338] bond10: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 3457.554653][T21757] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 3457.576801][T15338] bond10 (unregistering): Released all slaves [ 3458.030210][T21834] usb 3-1: Using ep0 maxpacket: 8 [ 3458.060943][T21834] usb 3-1: config 0 has no interfaces? [ 3458.083593][T21834] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 3458.084657][T21757] usb 1-1: Using ep0 maxpacket: 32 [ 3458.093068][T21834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.165064][T21834] usb 3-1: Product: syz [ 3458.169264][T21834] usb 3-1: Manufacturer: syz [ 3458.185912][T21834] usb 3-1: SerialNumber: syz [ 3458.195710][T21757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3458.199272][T21834] usb 3-1: config 0 descriptor?? [ 3458.324668][T21757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3458.358172][T21757] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3458.451024][T21757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 3458.608719][T21757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3458.682594][T21757] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3458.691862][T21757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.985818][T21757] usb 1-1: Product: syz [ 3459.127390][T21757] usb 1-1: Manufacturer: syz [ 3459.152506][T21757] usb 1-1: SerialNumber: syz [ 3459.221013][T21757] usb 1-1: config 0 descriptor?? [ 3459.251099][T21757] usb 1-1: can't set config #0, error -71 [ 3459.421648][T21757] usb 1-1: USB disconnect, device number 103 [ 3459.924297][T12845] usb 3-1: USB disconnect, device number 90 [ 3460.430454][T15364] vhci_hcd vhci_hcd.0: port 0 already used [ 3462.607772][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9157'. [ 3463.374914][ C0] net_ratelimit: 594 callbacks suppressed [ 3463.374939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3463.390892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3463.870538][T12845] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 3464.055328][T12845] usb 2-1: Using ep0 maxpacket: 32 [ 3464.062283][T12845] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 3464.201451][T12845] usb 2-1: config 0 has no interface number 0 [ 3464.201487][T12845] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3464.201500][T12845] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3464.201513][T12845] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3464.201527][T12845] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3464.201540][T12845] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3464.201554][T12845] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3464.219781][T12845] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3464.219845][T12845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3464.219864][T12845] usb 2-1: Product: syz [ 3464.220000][T12845] usb 2-1: Manufacturer: syz [ 3464.220015][T12845] usb 2-1: SerialNumber: syz [ 3464.232025][T12845] usb 2-1: config 0 descriptor?? [ 3464.271917][T15395] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3464.272010][T15395] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3464.273380][T12845] ipaq 2-1:0.19: PocketPC PDA converter detected [ 3464.416358][T15416] bond10: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 3464.446706][T15416] bond10 (unregistering): Released all slaves [ 3464.581613][T12845] usb 2-1: active config #0 != 1 ?? [ 3465.935187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3465.943135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3466.001091][T12845] usb 2-1: USB disconnect, device number 15 [ 3466.351480][T15427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3466.351638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3466.411609][T15429] vhci_hcd vhci_hcd.0: port 0 already used [ 3467.269216][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9169'. [ 3468.622127][T15459] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 3469.462618][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9173'. [ 3470.533510][T15475] vhci_hcd vhci_hcd.0: port 0 already used [ 3470.930801][T15485] netlink: 'syz.1.9174': attribute type 2 has an invalid length. [ 3471.341699][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9176'. [ 3471.469617][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9176'. [ 3471.484861][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9176'. [ 3472.509910][T15508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3472.518536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3475.959022][T15553] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 3477.679584][T15575] delete_channel: no stack [ 3477.984889][T12783] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 3478.061525][T15582] program syz.4.9198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3478.224667][T12783] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3478.534775][T12783] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3478.554757][T15585] vhci_hcd vhci_hcd.0: port 0 already used [ 3478.601268][T12783] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3478.672616][T12783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3478.836792][T15575] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3478.858758][T12783] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3479.340230][T15598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3479.355067][T15598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3480.479257][T15609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3480.487706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3481.302622][T12783] usb 2-1: USB disconnect, device number 16 [ 3482.163860][T15626] vhci_hcd vhci_hcd.0: port 0 already used [ 3485.306424][ T30] audit: type=1326 audit(1765243297.513:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.2.9210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3485.516489][T15667] vhci_hcd vhci_hcd.0: port 0 already used [ 3486.136928][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9215'. [ 3486.310865][T15691] fuse: Bad value for 'fd' [ 3488.316351][T15701] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 3489.178833][T15709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3489.187229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3490.804769][T15727] vhci_hcd vhci_hcd.0: port 0 already used [ 3491.482454][ T30] audit: type=1326 audit(1765243303.683:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3491.530469][ T30] audit: type=1326 audit(1765243303.713:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3491.639179][ T30] audit: type=1326 audit(1765243303.713:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3491.712963][ T30] audit: type=1326 audit(1765243303.713:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3491.768018][T15713] vhci_hcd vhci_hcd.0: port 0 already used [ 3491.920791][ T30] audit: type=1326 audit(1765243303.713:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3492.052280][ T30] audit: type=1326 audit(1765243303.713:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3492.228575][ T30] audit: type=1326 audit(1765243303.713:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3492.284698][ T30] audit: type=1326 audit(1765243303.713:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3492.574944][ T30] audit: type=1326 audit(1765243303.713:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3492.633164][ T30] audit: type=1326 audit(1765243303.713:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15726 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3494.734829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3494.744114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3497.295094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3497.305133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3498.925431][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 3498.925448][ T30] audit: type=1326 audit(1765243311.133:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3499.064967][ T30] audit: type=1326 audit(1765243311.133:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3499.163902][ T30] audit: type=1326 audit(1765243311.133:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3499.204976][T15826] vhci_hcd vhci_hcd.0: port 0 already used [ 3499.351441][T15833] vhci_hcd vhci_hcd.0: port 0 already used [ 3499.685879][ T30] audit: type=1326 audit(1765243311.133:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3499.724750][ T30] audit: type=1326 audit(1765243311.133:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3499.803672][ T30] audit: type=1326 audit(1765243311.133:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3499.923502][ T30] audit: type=1326 audit(1765243311.133:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3499.984868][ T30] audit: type=1326 audit(1765243311.133:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3500.007890][ T30] audit: type=1326 audit(1765243311.133:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3500.138423][ T30] audit: type=1326 audit(1765243311.133:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.2.9242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7fc00000 [ 3503.232872][T15877] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3503.326539][T15885] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 3505.809606][T15914] vhci_hcd vhci_hcd.0: port 0 already used [ 3507.567306][T15938] vhci_hcd vhci_hcd.0: port 0 already used [ 3508.405255][T15951] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3510.557251][T15978] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9272'. [ 3510.814848][T12845] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 3511.168119][T12845] usb 6-1: Using ep0 maxpacket: 32 [ 3511.195541][T12845] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3511.208975][T12845] usb 6-1: config 0 has no interface number 0 [ 3511.243586][T12845] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3511.294639][T12845] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3511.333028][T12845] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3511.394653][T12845] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3511.424657][T12845] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3511.460163][T12845] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3511.526549][T12845] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3511.554704][T12845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3511.606327][T12845] usb 6-1: Product: syz [ 3511.624052][T12845] usb 6-1: Manufacturer: syz [ 3511.654115][T12845] usb 6-1: SerialNumber: syz [ 3511.719218][T12845] usb 6-1: config 0 descriptor?? [ 3511.727679][T15978] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3511.746806][T15978] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3511.816354][T12845] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3511.855237][T12845] usb 6-1: active config #0 != 1 ?? [ 3512.073377][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.080089][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3513.445824][T21757] usb 6-1: USB disconnect, device number 114 [ 3513.859378][T16008] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3515.269381][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 3515.269401][ T30] audit: type=1326 audit(1765243327.463:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16024 comm="syz.4.9282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 3517.192594][T16048] vhci_hcd vhci_hcd.0: port 0 already used [ 3518.193244][T16072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3518.201571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3518.300015][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9287'. [ 3518.309286][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9287'. [ 3518.406176][T16069] tipc: Failed to remove unknown binding: 66,1,1/3184530230:3987452179/3987452181 [ 3518.419439][T16069] tipc: Failed to remove unknown binding: 66,1,1/3184530230:3987452179/3987452181 [ 3518.428890][T16069] tipc: Failed to remove unknown binding: 66,1,1/3184530230:3987452179/3987452181 [ 3518.797028][ T30] audit: type=1326 audit(1765243331.003:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.0.9297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3519.259205][T16079] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9290'. [ 3519.514793][T32152] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 3519.684764][T32152] usb 6-1: Using ep0 maxpacket: 32 [ 3519.715024][T32152] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3519.818016][T32152] usb 6-1: config 0 has no interface number 0 [ 3519.833954][T32152] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3519.875010][T32152] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3519.898816][T32152] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3519.939790][T32152] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3519.974821][T32152] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3520.011800][T32152] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3520.054799][T32152] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3520.074675][T32152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3520.092198][T32152] usb 6-1: Product: syz [ 3520.106950][T32152] usb 6-1: Manufacturer: syz [ 3520.155000][T32152] usb 6-1: SerialNumber: syz [ 3520.166489][T32152] usb 6-1: config 0 descriptor?? [ 3520.184324][T16079] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3520.219710][T16079] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3520.275997][T32152] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3520.295572][T32152] usb 6-1: active config #0 != 1 ?? [ 3521.711029][ T30] audit: type=1326 audit(1765243333.913:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3521.769060][ T30] audit: type=1326 audit(1765243333.913:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3521.913890][ T30] audit: type=1326 audit(1765243333.913:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3522.054465][ T30] audit: type=1326 audit(1765243333.913:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3522.098289][T21757] usb 6-1: USB disconnect, device number 115 [ 3522.428952][ T30] audit: type=1326 audit(1765243333.913:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3522.598877][ T30] audit: type=1326 audit(1765243333.913:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3522.745518][T16122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3522.824778][ T30] audit: type=1326 audit(1765243333.913:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3522.899279][ T30] audit: type=1326 audit(1765243333.913:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3523.399077][ T30] audit: type=1326 audit(1765243333.913:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3523.457985][ T30] audit: type=1326 audit(1765243333.913:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.1.9295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3523.996334][T16134] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9314'. [ 3524.335657][T32152] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 3524.347612][T16148] vhci_hcd vhci_hcd.0: port 0 already used [ 3524.474819][T16147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3524.665783][T32152] usb 1-1: Using ep0 maxpacket: 32 [ 3524.720556][T32152] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 3524.729134][T32152] usb 1-1: config 0 has no interface number 0 [ 3524.742622][T32152] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3524.764408][T32152] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3524.922577][T32152] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3524.991581][T32152] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3525.043920][T32152] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3525.101102][T32152] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3525.141181][T32152] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3525.158488][T32152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3525.182324][T32152] usb 1-1: Product: syz [ 3525.200551][T32152] usb 1-1: Manufacturer: syz [ 3525.222981][T32152] usb 1-1: SerialNumber: syz [ 3525.271217][T32152] usb 1-1: config 0 descriptor?? [ 3525.325890][T16134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3525.333264][T16134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3525.346926][T32152] ipaq 1-1:0.19: PocketPC PDA converter detected [ 3525.372768][T32152] usb 1-1: active config #0 != 1 ?? [ 3525.454844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3525.463664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3525.626512][T32152] usb 1-1: USB disconnect, device number 104 [ 3526.216698][T16159] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 3527.468417][T16171] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9310'. [ 3528.105550][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 3528.105568][ T30] audit: type=1326 audit(1765243340.313:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3528.345412][ T30] audit: type=1326 audit(1765243340.313:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3528.429253][ T30] audit: type=1326 audit(1765243340.313:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3528.498718][ T30] audit: type=1326 audit(1765243340.313:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3528.524654][ T30] audit: type=1326 audit(1765243340.313:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3528.568938][ T30] audit: type=1326 audit(1765243340.313:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3528.636443][T16188] vhci_hcd vhci_hcd.0: port 0 already used [ 3528.655096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3528.665042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3528.677544][ T30] audit: type=1326 audit(1765243340.313:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3528.807744][ T30] audit: type=1326 audit(1765243340.313:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3528.860877][ T30] audit: type=1326 audit(1765243340.313:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3528.891539][ T30] audit: type=1326 audit(1765243340.313:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.1.9309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 3529.437041][T16200] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9317'. [ 3529.787341][T21757] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3529.805869][T16206] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9319'. [ 3529.956253][T21757] usb 3-1: Using ep0 maxpacket: 32 [ 3529.963444][T21757] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 3529.979978][T21757] usb 3-1: config 0 has no interface number 0 [ 3530.010778][T21757] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3530.030602][T21757] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3530.051232][T21757] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3530.071675][T21757] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3530.091992][T21757] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3530.102538][T12845] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 3530.122987][T21757] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3530.155070][T21757] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3530.185176][T21757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3530.203591][T21757] usb 3-1: Product: syz [ 3530.208315][T21757] usb 3-1: Manufacturer: syz [ 3530.234890][T21757] usb 3-1: SerialNumber: syz [ 3530.241560][T21757] usb 3-1: config 0 descriptor?? [ 3530.249481][T16205] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3530.260951][T16205] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3530.268490][T12845] usb 2-1: Using ep0 maxpacket: 32 [ 3530.278676][T21757] ipaq 3-1:0.19: PocketPC PDA converter detected [ 3530.290056][T12845] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 3530.299299][T21757] usb 3-1: active config #0 != 1 ?? [ 3530.305239][T12845] usb 2-1: config 0 has no interface number 0 [ 3530.321209][T12845] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3530.339265][T12845] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3530.385332][T12845] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3530.410364][T12845] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3530.469696][T12845] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3530.487312][T21757] usb 3-1: USB disconnect, device number 91 [ 3530.527293][T12845] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3530.559622][T12845] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3530.587459][T12845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3530.612421][T12845] usb 2-1: Product: syz [ 3530.622357][T12845] usb 2-1: Manufacturer: syz [ 3530.634497][T12845] usb 2-1: SerialNumber: syz [ 3530.659884][T12845] usb 2-1: config 0 descriptor?? [ 3530.682588][T16206] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3530.736198][T16223] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 3530.744995][T16206] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3530.758608][T12845] ipaq 2-1:0.19: PocketPC PDA converter detected [ 3530.782404][T16221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3530.876645][T12845] usb 2-1: active config #0 != 1 ?? [ 3531.133187][T12845] usb 2-1: USB disconnect, device number 17 [ 3532.996975][T16238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3534.844274][T16264] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9334'. [ 3535.155118][T32152] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 3535.314703][T32152] usb 1-1: Using ep0 maxpacket: 32 [ 3535.322550][T32152] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 3535.331476][T32152] usb 1-1: config 0 has no interface number 0 [ 3535.343651][T32152] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3535.365753][T16274] vhci_hcd vhci_hcd.0: port 0 already used [ 3535.382807][T16270] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9335'. [ 3535.439471][T32152] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3535.536192][T32152] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3535.657841][T21757] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3535.657837][T32152] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3535.657868][T32152] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3535.739338][T32152] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3535.757101][T32152] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3535.766416][T32152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3535.774922][T32152] usb 1-1: Product: syz [ 3535.785084][T32152] usb 1-1: Manufacturer: syz [ 3535.789764][T32152] usb 1-1: SerialNumber: syz [ 3535.829871][T32152] usb 1-1: config 0 descriptor?? [ 3535.837626][T16264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3535.845985][T16264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3535.896523][T32152] ipaq 1-1:0.19: PocketPC PDA converter detected [ 3535.965349][T21757] usb 3-1: Using ep0 maxpacket: 32 [ 3535.965349][T32152] usb 1-1: active config #0 != 1 ?? [ 3536.005881][T21757] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 3536.014056][T21757] usb 3-1: config 0 has no interface number 0 [ 3536.021202][T21757] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3536.080842][T32152] usb 1-1: USB disconnect, device number 105 [ 3536.120921][T21757] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3536.163420][T21757] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3536.228301][T21757] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3536.293014][T21757] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3536.317024][T21757] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3536.362307][T21757] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3536.374598][T21757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3536.474904][T21757] usb 3-1: Product: syz [ 3536.485002][T21757] usb 3-1: Manufacturer: syz [ 3536.497626][T21757] usb 3-1: SerialNumber: syz [ 3536.533704][T21757] usb 3-1: config 0 descriptor?? [ 3536.566662][T16270] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3536.637414][T16270] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3536.746281][T21757] ipaq 3-1:0.19: PocketPC PDA converter detected [ 3536.774205][T21757] usb 3-1: active config #0 != 1 ?? [ 3536.790174][T16285] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9337'. [ 3537.013177][T21834] usb 3-1: USB disconnect, device number 92 [ 3537.148851][T32152] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 3537.335088][T32152] usb 6-1: Using ep0 maxpacket: 32 [ 3537.345171][T32152] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 3537.369809][T32152] usb 6-1: config 0 has no interface number 0 [ 3537.384735][T32152] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3537.437234][T32152] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3537.484880][T32152] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3537.616068][T32152] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3537.635030][T32152] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3537.955969][T32152] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3538.047325][T32152] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3538.074623][T32152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3538.082656][T32152] usb 6-1: Product: syz [ 3538.113853][T32152] usb 6-1: Manufacturer: syz [ 3538.134336][T32152] usb 6-1: SerialNumber: syz [ 3538.142730][T32152] usb 6-1: config 0 descriptor?? [ 3538.177736][T16285] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3538.204201][T16285] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3538.235518][T32152] ipaq 6-1:0.19: PocketPC PDA converter detected [ 3538.258220][T32152] usb 6-1: active config #0 != 1 ?? [ 3538.453852][T32152] usb 6-1: USB disconnect, device number 116 [ 3539.057507][T16310] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3539.238804][T16311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3540.854904][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 3540.854925][ T30] audit: type=1326 audit(1765243353.043:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3541.026389][ T30] audit: type=1326 audit(1765243353.043:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3541.076872][ T30] audit: type=1326 audit(1765243353.043:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3541.115584][ T30] audit: type=1326 audit(1765243353.043:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3541.274263][ T30] audit: type=1326 audit(1765243353.043:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3541.374748][ T30] audit: type=1326 audit(1765243353.043:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3541.509719][ T30] audit: type=1326 audit(1765243353.043:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3541.661084][ T30] audit: type=1326 audit(1765243353.043:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3541.844714][ T30] audit: type=1326 audit(1765243353.043:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3542.204113][ T30] audit: type=1326 audit(1765243353.043:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.5.9345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3542.409749][T16351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3543.004756][T32152] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 3543.215162][T32152] usb 2-1: Using ep0 maxpacket: 32 [ 3543.320814][T32152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3543.344939][T32152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3543.831945][T32152] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3543.875058][T32152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 3544.134894][T32152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3544.513375][T32152] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3544.539801][T32152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3544.574872][T32152] usb 2-1: Product: syz [ 3544.579205][T32152] usb 2-1: Manufacturer: syz [ 3544.623238][T32152] usb 2-1: SerialNumber: syz [ 3544.638604][T32152] usb 2-1: config 0 descriptor?? [ 3544.675953][T16362] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9353'. [ 3544.702673][T16351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3544.788562][T32152] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input177 [ 3544.831511][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3544.878564][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3544.895362][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3544.924849][T12845] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 3545.104660][T12845] usb 1-1: Using ep0 maxpacket: 32 [ 3545.114797][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3545.117262][T12845] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 3545.176540][T12845] usb 1-1: config 0 has no interface number 0 [ 3545.182726][T12845] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3545.289008][T12845] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3545.303886][T16113] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3545.329584][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 3545.368924][T12845] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3545.385627][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3545.416489][T12845] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3545.457643][T12845] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3545.479209][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3545.491708][T12845] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3545.532491][ T5181] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3545.557905][T12845] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3545.608335][T12845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3545.646891][T12845] usb 1-1: Product: syz [ 3545.667158][T12845] usb 1-1: Manufacturer: syz [ 3545.687467][T12845] usb 1-1: SerialNumber: syz [ 3545.718306][T12845] usb 1-1: config 0 descriptor?? [ 3545.752432][T16362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3545.798807][T16362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3545.845181][T12845] ipaq 1-1:0.19: PocketPC PDA converter detected [ 3545.881255][T12845] usb 1-1: active config #0 != 1 ?? [ 3545.939161][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 3545.939179][ T30] audit: type=1326 audit(1765243358.143:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3546.071074][ T30] audit: type=1326 audit(1765243358.173:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3546.110539][T12845] usb 1-1: USB disconnect, device number 106 [ 3546.164754][ T30] audit: type=1326 audit(1765243358.173:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3546.215369][ T30] audit: type=1326 audit(1765243358.173:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3546.290994][T21757] usb 2-1: USB disconnect, device number 18 [ 3546.302024][ T30] audit: type=1326 audit(1765243358.173:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3546.389566][ T30] audit: type=1326 audit(1765243358.173:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3546.438891][ T30] audit: type=1326 audit(1765243358.173:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3546.885530][ T30] audit: type=1326 audit(1765243358.173:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3546.955410][ T30] audit: type=1326 audit(1765243358.173:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3547.045813][ T30] audit: type=1326 audit(1765243358.173:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.5.9355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 3547.590576][T16391] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3548.558023][T16416] tipc: Failed to remove unknown binding: 66,1,1/0:3194502032/3194502034 [ 3548.571534][T16416] tipc: Failed to remove unknown binding: 66,1,1/0:3194502032/3194502034 [ 3548.588897][T16416] tipc: Failed to remove unknown binding: 66,1,1/0:3194502032/3194502034 [ 3552.580274][T16460] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3552.612315][T16459] vhci_hcd vhci_hcd.0: port 0 already used [ 3553.685031][T16473] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 3555.131721][T16490] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3555.442796][T16495] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3556.695464][T16504] vhci_hcd vhci_hcd.0: port 0 already used [ 3556.826617][T16511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3556.834666][T16504] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(18) [ 3556.841309][T16504] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3556.912666][T16504] vhci_hcd vhci_hcd.0: Device attached [ 3556.915426][T16518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3556.935788][T16511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3556.963128][T16512] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(21) [ 3556.970207][T16512] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3556.978628][T16511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3557.110557][T16519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3557.440631][T16519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3557.449607][T16512] vhci_hcd vhci_hcd.0: Device attached [ 3557.455634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3557.464099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3557.491000][T16518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3557.519605][T16525] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(26) [ 3557.526224][T16525] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3557.598562][T16519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3557.607759][T16527] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(29) [ 3557.614408][T16527] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3557.690654][T16528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3557.955339][T16525] vhci_hcd vhci_hcd.0: Device attached [ 3557.966912][T16528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3558.004272][T16504] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(20) [ 3558.011391][T16504] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3558.054855][T16504] vhci_hcd vhci_hcd.0: Device attached [ 3558.081247][T16527] vhci_hcd vhci_hcd.0: Device attached [ 3558.082126][T16512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3558.226860][T16530] vhci_hcd: connection closed [ 3558.227027][T19683] vhci_hcd vhci_hcd.4: stop threads [ 3558.238968][T16529] vhci_hcd: connection closed [ 3558.243425][T19683] vhci_hcd vhci_hcd.4: release socket [ 3558.264308][T16534] vhci_hcd: connection closed [ 3558.264451][T16513] vhci_hcd: connection closed [ 3558.264676][T16508] vhci_hcd: connection closed [ 3558.304873][T19683] vhci_hcd vhci_hcd.4: disconnect device [ 3558.366113][T19683] vhci_hcd vhci_hcd.4: stop threads [ 3558.373631][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 3558.373649][ T30] audit: type=1326 audit(1765243370.573:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3558.382854][T19683] vhci_hcd vhci_hcd.4: release socket [ 3558.559881][T19683] vhci_hcd vhci_hcd.4: disconnect device [ 3558.594729][T19683] vhci_hcd vhci_hcd.4: stop threads [ 3558.675229][T19683] vhci_hcd vhci_hcd.4: release socket [ 3558.701251][ T30] audit: type=1326 audit(1765243370.573:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3558.783768][ T30] audit: type=1326 audit(1765243370.573:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3558.856361][T19683] vhci_hcd vhci_hcd.4: disconnect device [ 3558.894960][T19683] vhci_hcd vhci_hcd.4: stop threads [ 3558.901205][T19683] vhci_hcd vhci_hcd.4: release socket [ 3558.913710][T19683] vhci_hcd vhci_hcd.4: disconnect device [ 3558.920146][ T30] audit: type=1326 audit(1765243370.573:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3558.957062][T16538] input: syz0 as /devices/virtual/input/input178 [ 3558.970101][T16540] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9384'. [ 3559.046830][T19683] vhci_hcd vhci_hcd.4: stop threads [ 3559.052270][T19683] vhci_hcd vhci_hcd.4: release socket [ 3559.068059][T19683] vhci_hcd vhci_hcd.4: disconnect device [ 3559.090046][ T30] audit: type=1326 audit(1765243370.573:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3559.209189][ T30] audit: type=1326 audit(1765243370.573:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16503 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7fc00000 [ 3559.244862][T21834] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 3559.434752][T21834] usb 2-1: Using ep0 maxpacket: 32 [ 3559.512215][T21834] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 3559.536557][T21834] usb 2-1: config 0 has no interface number 0 [ 3559.561273][T21834] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3559.590476][T21834] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3559.636556][T21834] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3559.777814][T21834] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3559.799769][T21834] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3559.861204][T21834] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3559.960459][T21834] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3559.987841][T21834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3560.024588][T21834] usb 2-1: Product: syz [ 3560.035245][T21834] usb 2-1: Manufacturer: syz [ 3560.045624][T21834] usb 2-1: SerialNumber: syz [ 3560.075800][T21834] usb 2-1: config 0 descriptor?? [ 3560.105891][T16540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3560.182270][T16540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3560.236615][T21834] ipaq 2-1:0.19: PocketPC PDA converter detected [ 3560.243224][T21834] usb 2-1: active config #0 != 1 ?? [ 3560.498731][T21834] usb 2-1: USB disconnect, device number 19 [ 3560.898543][T16560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3561.730934][T16562] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3563.369070][ T30] audit: type=1326 audit(1765243375.573:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16587 comm="syz.4.9394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 3563.563690][T16592] vhci_hcd vhci_hcd.0: port 0 already used [ 3564.011520][T16611] hsr0: entered promiscuous mode [ 3564.029706][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9397'. [ 3564.042919][T16611] hsr_slave_0: left promiscuous mode [ 3564.106178][T16598] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3564.193673][T16611] hsr0 (unregistering): left promiscuous mode [ 3565.273363][T21834] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3565.484910][T21834] usb 2-1: Using ep0 maxpacket: 32 [ 3565.512433][T21834] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 3565.521575][T21834] usb 2-1: config 0 has no interface number 0 [ 3565.533848][T21834] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3565.573088][T21834] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 3565.660406][T21834] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 3565.675012][T21834] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 3565.686975][T21834] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3565.785344][T21834] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3565.961262][T21834] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 3565.970521][T21834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3565.994675][T21834] usb 2-1: Product: syz [ 3566.001285][T21834] usb 2-1: Manufacturer: syz [ 3566.042077][T21834] usb 2-1: SerialNumber: syz [ 3566.083549][T21834] usb 2-1: config 0 descriptor?? [ 3566.100417][T16615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3566.124741][T16615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3566.147627][T21834] ipaq 2-1:0.19: PocketPC PDA converter detected [ 3566.180578][T21834] usb 2-1: active config #0 != 1 ?? [ 3566.408043][T21834] usb 2-1: USB disconnect, device number 20 [ 3567.705761][ T31] INFO: task kworker/0:0:6190 blocked for more than 143 seconds. [ 3567.713690][ T31] Tainted: G L syzkaller #0 [ 3567.732372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3567.758401][ T31] task:kworker/0:0 state:D stack:21504 pid:6190 tgid:6190 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 3568.037989][ T31] Workqueue: usb_hub_wq hub_event [ 3568.296856][ T31] Call Trace: [ 3568.343116][ T31] [ 3568.354808][ T31] __schedule+0x14bc/0x5000 [ 3568.359757][ T31] ? preempt_schedule+0xae/0xc0 [ 3568.400165][ T31] ? preempt_schedule+0xae/0xc0 [ 3568.487041][ T31] ? __pfx___schedule+0x10/0x10 [ 3568.497206][ T31] ? schedule+0x91/0x360 [ 3568.503932][ T31] schedule+0x165/0x360 [ 3568.515245][ T31] schedule_preempt_disabled+0x13/0x30 [ 3568.527654][ T31] __mutex_lock+0x7e6/0x1350 [ 3568.540202][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3568.554810][ T31] ? hub_event+0x2182/0x4ef0 [ 3568.565979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3568.585489][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3568.651017][ T31] hub_event+0x2182/0x4ef0 [ 3568.660007][ T31] ? __pfx_hub_event+0x10/0x10 [ 3568.674888][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 3568.695960][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3568.714482][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 3568.725188][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 3568.731390][ T31] process_scheduled_works+0xad1/0x1770 [ 3568.755323][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 3568.766945][ T31] worker_thread+0x8a0/0xda0 [ 3568.779613][ T31] kthread+0x711/0x8a0 [ 3568.788723][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3568.804618][ T31] ? __pfx_kthread+0x10/0x10 [ 3568.811661][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3568.822982][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3568.835575][ T31] ? __pfx_kthread+0x10/0x10 [ 3568.846014][ T31] ret_from_fork+0x599/0xb30 [ 3568.854917][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3568.863944][ T31] ? __switch_to_asm+0x39/0x70 [ 3568.878569][ T31] ? __switch_to_asm+0x33/0x70 [ 3568.932684][ T31] ? __pfx_kthread+0x10/0x10 [ 3568.938701][ T31] ret_from_fork_asm+0x1a/0x30 [ 3568.943829][ T31] [ 3568.959037][ T31] [ 3568.959037][ T31] Showing all locks held in the system: [ 3568.995255][ T31] 1 lock held by khungtaskd/31: [ 3569.121619][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3569.170350][ T31] 2 locks held by getty/5580: [ 3569.194572][ T31] #0: ffff88814d9d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3569.224829][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 3569.258476][ T31] 5 locks held by kworker/1:6/5893: [ 3569.278980][ T31] #0: ffff88801f2abd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3569.303040][ T31] #1: ffffc90004d4fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3569.377498][ T31] #2: ffff888145ba7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 3569.402196][ T31] #3: ffff888145be3518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 3569.426182][ T31] #4: ffff88814579f068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 3569.438971][ T31] 5 locks held by kworker/1:4/21757: [ 3569.445002][ T31] #0: ffff88801f2abd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3569.464763][ T31] #1: ffffc9001c867b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3569.478598][ T31] #2: ffff888145fcc198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 3569.489838][ T31] #3: ffff888145fcf518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 3569.505404][ T31] #4: ffff8881457eaa68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 3569.524705][ T31] 5 locks held by kworker/1:3/29605: [ 3569.530588][ T31] #0: ffff88801f2abd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3569.550718][ T31] #1: ffffc9001b087b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3569.572477][ T31] #2: ffff8880293b5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 3569.584637][ T31] #3: ffff888029440518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 3569.600873][ T31] #4: ffff88802925d468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 3569.612013][ T31] 4 locks held by kworker/u8:9/2140: [ 3569.620571][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3569.632096][ T31] #1: ffffc90003947b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3569.644750][ T31] #2: ffffffff8f2fa9d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 3569.654662][ T31] #3: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 3569.666121][ T31] 5 locks held by kworker/0:0/6190: [ 3569.671612][ T31] #0: ffff88801f2abd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3569.683253][ T31] #1: ffffc9000b4bfb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3569.713971][ T31] #2: ffff88802939e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 3569.724750][ T31] #3: ffff8880293a1518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 3569.741256][ T31] #4: ffff88814579f068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 3569.759335][ T31] 5 locks held by kworker/1:0/7183: [ 3569.768450][ T31] #0: ffff88801f2abd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3569.790005][ T31] #1: ffffc9001b8d7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3569.814998][ T31] #2: ffff888029538198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 3569.824693][ T31] #3: ffff88802953b518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 3569.836237][ T31] #4: ffff888029332a68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 3569.853669][ T31] 5 locks held by kworker/0:5/12602: [ 3569.864384][ T31] #0: ffff88801f2abd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3569.876283][ T31] #1: ffffc9000540fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3569.894804][ T31] #2: ffff888145fbf198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 3569.904002][ T31] #3: ffff888146312518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 3569.922377][ T31] #4: ffff8881457eaa68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 3569.942657][ T31] 3 locks held by kworker/1:5/12845: [ 3569.949381][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3569.970661][ T31] #1: ffffc9000c0c7b80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3569.989122][ T31] #2: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 3570.007112][ T31] 5 locks held by kworker/1:7/13459: [ 3570.014629][ T31] #0: ffff88801f2abd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3570.028005][ T31] #1: ffffc9000ba77b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3570.040227][ T31] #2: ffff888145f5a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 3570.049790][ T31] #3: ffff888145f5d518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 3570.061787][ T31] #4: ffff8881423d8e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 3570.074723][ T31] 1 lock held by syz.2.9390/16568: [ 3570.080099][ T31] 2 locks held by syz.2.9399/16619: [ 3570.085599][ T31] 1 lock held by dhcpcd/16664: [ 3570.091633][ T31] #0: ffff888034858260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 3570.102625][ T31] [ 3570.154031][ T31] ============================================= [ 3570.154031][ T31] [ 3570.173135][ T31] NMI backtrace for cpu 1 [ 3570.173167][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3570.173183][ T31] Tainted: [L]=SOFTLOCKUP [ 3570.173187][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3570.173193][ T31] Call Trace: [ 3570.173198][ T31] [ 3570.173204][ T31] dump_stack_lvl+0x189/0x250 [ 3570.173222][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3570.173234][ T31] ? __pfx__printk+0x10/0x10 [ 3570.173253][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 3570.173267][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3570.173278][ T31] ? __pfx__printk+0x10/0x10 [ 3570.173293][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3570.173309][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3570.173321][ T31] sys_info+0x135/0x170 [ 3570.173334][ T31] watchdog+0xf95/0xfe0 [ 3570.173351][ T31] ? watchdog+0x20a/0xfe0 [ 3570.173366][ T31] kthread+0x711/0x8a0 [ 3570.173380][ T31] ? __pfx_watchdog+0x10/0x10 [ 3570.173399][ T31] ? __pfx_kthread+0x10/0x10 [ 3570.173411][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3570.173424][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3570.173435][ T31] ? __pfx_kthread+0x10/0x10 [ 3570.173448][ T31] ret_from_fork+0x599/0xb30 [ 3570.173459][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3570.173474][ T31] ? __switch_to_asm+0x39/0x70 [ 3570.173485][ T31] ? __switch_to_asm+0x33/0x70 [ 3570.173496][ T31] ? __pfx_kthread+0x10/0x10 [ 3570.173508][ T31] ret_from_fork_asm+0x1a/0x30 [ 3570.173528][ T31] [ 3570.173532][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3570.335524][ C0] NMI backtrace for cpu 0 [ 3570.335550][ C0] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 3570.335574][ C0] Tainted: [L]=SOFTLOCKUP [ 3570.335580][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3570.335601][ C0] RIP: 0010:deref_stack_reg+0x3/0x230 [ 3570.335625][ C0] Code: e8 b2 9d b3 00 48 8b 4c 24 18 e9 f2 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 49 89 f0 49 89 ff [ 3570.335641][ C0] RSP: 0018:ffffc9000415f680 EFLAGS: 00000287 [ 3570.335657][ C0] RAX: fffffffffffffff0 RBX: ffffffff90236df4 RCX: 0000000000000000 [ 3570.335669][ C0] RDX: ffffc9000415f7a8 RSI: ffffc9000415fe90 RDI: ffffc9000415f768 [ 3570.335681][ C0] RBP: dffffc0000000000 R08: ffffc9000415f7c7 R09: 0000000000000000 [ 3570.335693][ C0] R10: ffffc9000415f7b8 R11: fffff5200082bef9 R12: ffffc9000415fe90 [ 3570.335705][ C0] R13: ffffc9000415f7b8 R14: ffffc9000415f768 R15: 1ffffffff2046dbe [ 3570.335718][ C0] FS: 0000000000000000(0000) GS:ffff888125e44000(0063) knlGS:00000000568d9440 [ 3570.335732][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 3570.335744][ C0] CR2: 00000000f747c208 CR3: 00000000763c2000 CR4: 00000000003526f0 [ 3570.335758][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3570.335768][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3570.335779][ C0] Call Trace: [ 3570.335785][ C0] [ 3570.335793][ C0] unwind_next_frame+0x17c4/0x2390 [ 3570.335815][ C0] ? unwind_next_frame+0xa5/0x2390 [ 3570.335832][ C0] ? fput_close_sync+0x113/0x220 [ 3570.335854][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3570.335877][ C0] arch_stack_walk+0x11c/0x150 [ 3570.335896][ C0] ? __ia32_sys_close+0x7f/0x110 [ 3570.335917][ C0] stack_trace_save+0x9c/0xe0 [ 3570.335937][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 3570.335961][ C0] ? kernel_text_address+0xa5/0xe0 [ 3570.335983][ C0] kasan_save_stack+0x3e/0x60 [ 3570.335998][ C0] ? kasan_save_stack+0x3e/0x60 [ 3570.336012][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 3570.336030][ C0] ? call_rcu+0x157/0x9c0 [ 3570.336047][ C0] ? kmem_cache_free+0x488/0x620 [ 3570.336062][ C0] ? __sk_destruct+0x614/0x880 [ 3570.336081][ C0] ? inet_release+0x144/0x190 [ 3570.336095][ C0] ? sock_close+0xc3/0x240 [ 3570.336109][ C0] ? __fput+0x44c/0xa70 [ 3570.336127][ C0] ? fput_close_sync+0x113/0x220 [ 3570.336166][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 3570.336185][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 3570.336203][ C0] call_rcu+0x157/0x9c0 [ 3570.336227][ C0] ? __pfx_call_rcu+0x10/0x10 [ 3570.336271][ C0] kmem_cache_free+0x488/0x620 [ 3570.336286][ C0] ? __sk_destruct+0x614/0x880 [ 3570.336308][ C0] __sk_destruct+0x614/0x880 [ 3570.336329][ C0] inet_release+0x144/0x190 [ 3570.336345][ C0] sock_close+0xc3/0x240 [ 3570.336360][ C0] ? __pfx_sock_close+0x10/0x10 [ 3570.336376][ C0] __fput+0x44c/0xa70 [ 3570.336406][ C0] fput_close_sync+0x113/0x220 [ 3570.336425][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 3570.336444][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 3570.336468][ C0] __ia32_sys_close+0x7f/0x110 [ 3570.336488][ C0] __do_fast_syscall_32+0x1f7/0x570 [ 3570.336509][ C0] ? rcu_is_watching+0x15/0xb0 [ 3570.336524][ C0] ? do_fast_syscall_32+0x34/0x80 [ 3570.336556][ C0] do_fast_syscall_32+0x34/0x80 [ 3570.336575][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3570.336593][ C0] RIP: 0023:0xf7fe6539 [ 3570.336615][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3570.336628][ C0] RSP: 002b:00000000f75cf6a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 3570.336644][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000568d9440 [ 3570.336656][ C0] RDX: 0000000000000000 RSI: 00000000f7476ff4 RDI: 00000000f75cf75c [ 3570.336666][ C0] RBP: 00000000f747cec4 R08: 0000000000000000 R09: 0000000000000000 [ 3570.336678][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3570.336688][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3570.336706][ C0] [ 3571.024755][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3571.032726][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3571.045089][ T31] Tainted: [L]=SOFTLOCKUP [ 3571.049590][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3571.059651][ T31] Call Trace: [ 3571.062927][ T31] [ 3571.065861][ T31] dump_stack_lvl+0x99/0x250 [ 3571.070559][ T31] ? __asan_memcpy+0x40/0x70 [ 3571.075159][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3571.080459][ T31] ? __pfx__printk+0x10/0x10 [ 3571.085076][ T31] vpanic+0x237/0x6d0 [ 3571.089110][ T31] ? __pfx_vpanic+0x10/0x10 [ 3571.093712][ T31] ? preempt_schedule_common+0x83/0xd0 [ 3571.099361][ T31] panic+0xb9/0xc0 [ 3571.104308][ T31] ? __pfx_panic+0x10/0x10 [ 3571.109029][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3571.114866][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 3571.122358][ T31] watchdog+0xfdf/0xfe0 [ 3571.126971][ T31] ? watchdog+0x20a/0xfe0 [ 3571.131837][ T31] kthread+0x711/0x8a0 [ 3571.136028][ T31] ? __pfx_watchdog+0x10/0x10 [ 3571.141058][ T31] ? __pfx_kthread+0x10/0x10 [ 3571.148228][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3571.153750][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3571.159091][ T31] ? __pfx_kthread+0x10/0x10 [ 3571.163726][ T31] ret_from_fork+0x599/0xb30 [ 3571.168714][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3571.173962][ T31] ? __switch_to_asm+0x39/0x70 [ 3571.178855][ T31] ? __switch_to_asm+0x33/0x70 [ 3571.183740][ T31] ? __pfx_kthread+0x10/0x10 [ 3571.188369][ T31] ret_from_fork_asm+0x1a/0x30 [ 3571.193712][ T31] [ 3571.197493][ T31] Kernel Offset: disabled [ 3571.201822][ T31] Rebooting in 86400 seconds..