last executing test programs: 8m6.239958702s ago: executing program 2 (id=238): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1c}, {0x5, 0xc}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r1, &(0x7f0000000600)="fb5764026ad3065c17ec76f8bffe9f4662faffffffffffd563d966f541c7d72ab006373d70537a4a291bfdc9385561ba12e6778acee26b09685e5478bfd47402e33bd6646ac939fe8890874d89e8fa326ff57ffae87b88ebe1bb3750ed69534883e57eb939af2c7211213846721d8f321e30b8fbb8081119540bdf12bdba2e0bdfa3a09f18", 0xffffffffffffff25, 0x40008c0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) ioctl$TIOCNXCL(r5, 0x540d) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x5e23, @multicast2}, 0x1, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000006c0)="0845cf674d90319c2a58e3412894c74aaba8954b05537258ca679e04d60c3742c5a39d3e771e08607a9baf33476b26e2015de75b1000ac35331911722a23e002c9629f1660a22dccab120c41c3ac50401ad3abacca7258928396a811e259fc", 0x5f}, {&(0x7f0000000880)="1da6c2adbfb802461071f569fbf95dfc9dd077f9f6aac68d823039e897b1ed0001eb4ded0d8e8d894ddb0ae13b2efb0a3201bb63c1ff83fd649071352dfa0991e3a9254961ea4ec8efcf92a0638951db7ce7a2b7cf86f3f975621435a23ff006b2ca3bf977e3b130985493ecf8f1729ef5d62bbab50d6bcec7d386281a421e3ab39dd4893df2284e062e412a2d2b58ffbb10956d3e2a4985f5a837ae35bf2bfa9c04710a391c14c2e4f389", 0xab}, {&(0x7f0000000940)="bbaa6a8569cdcf607603b66ee232dc88e482f208b786e1dff19fd4e083a26036be9f82ed9a451d66ea9c4bf449d6eec71846a7f1c0bd5dea4268952cbf16f59c68c0b60d3d347e2cdc5e1358770551a6ada9537d6004d2d7de9a086de843345ea2961213c5f7de8db7e2ba952bd1df931c780e3b7645908cb5962aff9335578fed85d60767cbdde5904725e356cf3acf4197a554c178e57e40a995917f013e19762efa2171f456d8d3fc0ca7a8b72760c39b3985340710d3a89b85a2f0705643a1e11055af56d029b472faed9299a950852af97540e1ce346c5fd367d39617801d3beac1033b3768a6bb053aedaacd4a05adfb5daa84", 0xf6}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000000300)="753bb260e566170bbeebfb8bf2d59c55ff76", 0x12}], 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x3e0}}, {{&(0x7f0000000dc0)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000000e80)=[{&(0x7f00000005c0)="8b", 0x1}, {&(0x7f0000000780)="1dfca92276f79cc649bbc4c1091b5a397641702c4da31602", 0x18}, {&(0x7f0000000940)}, {&(0x7f0000000e40)="c4e4a9d5c1a0d25f1ccc28b6f71cb2e9cf3a335eec9e4f9e06d421ff066531e78e79785de2e627fcca58bdedeb5a9165600d7d70069ce04c20dd4b822f63", 0x3e}], 0x4, &(0x7f000000a280)=ANY=[@ANYBLOB="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"], 0x1168}}, {{&(0x7f0000000ec0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, &(0x7f0000003640)=[{&(0x7f00000033c0)="80b97d2ed368b06bbd9a061a393b7724cdbeadb9336a039c255147c66ffba579ffdecb79ba554585da98dd4419b084e068459cce5d3f06f99371492ea285159e1ae98cf14300773011a760c858df5ac87a9f4226e1db51ad59433ccde80b2f53191374ac9150dc80988310cdf9845088d13b77504afbdf8301f6bb275b2dda24cac1179cc6ab24154e21cefe142e748220e2b446486ac00df285805eac26f20165f713ec130ca0b9e45061ca1cd2553b360254c4efe37a074236b8ca", 0xbc}, {&(0x7f0000003480)="4af785d6ae1b630a692087cc77505147840d444021fe937ec9ed973a3efb21e7b884b78b3457e0c0efc882c154a31c932cdab096fbc350fd9b8a7a753d6969ff9617d585f9cd00b1c531717c9a27b6565835958eac9f7c528dec7ff980906fe1d4e39f452b1496a2fda9674d7e94c60f707c09a0b70203ed969b1229dd53d45b7367368d584c338cef50bbd0c92494a324b2bdeafada2dc6", 0x98}, {&(0x7f0000003540)="ef97ed9c0b75074a189cd032e38d484b2c6134b44a4da85a3480eeaeceff1665d35a1c18313fea395158e62d1b12d773ec437ea898dd1747b37d1947937f3c5fecfc93923da7c3a06dd3a5b2c5acb0402ff97b3571d2dc9dbe5ba84eab855149306acd15b699abb910a1b50415a6abb5cc533c98c5daebd117fd15d0823cb80449183aec3ea2c12306f7ea948862a8724bf54620849c81c0fda36315e742ccf75af45bbb5bf74e9b72109c47b9f31e5ff775c87b3501c4082ad449074827bd08031b3dd421c60eaab5e2f95e33682d5f67ea761ca71a0a7f8969d0ea8547", 0xde}, {&(0x7f0000000f40)="8e81a0f841a06a65566c65747f27f51275d2e666fc92a193934d5d8d0f1c5b107432335024de30ecbd638a98849eabf928d365c1d833b5034b07d3cf08de8f119c5cd92e492b74d3eed63433a897f3a9ed0aa0f899848607ae97ed27ae8421a18ec89346b2c6a438f77d9177a5279d2845dbee5ab74705c7", 0x78}], 0x4, &(0x7f0000004cc0)=ANY=[@ANYBLOB="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"], 0x250}}], 0x3, 0x20000880) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x82, &(0x7f0000000040)="1a00000000000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xfff}, 0x8) sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100e030425fa4a327a5911f34e1cae274237ad72ca700000b1b50000000000", @ANYRES32=r3, @ANYBLOB="00050000000002000a00010079b6b2d61cb70000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) r8 = socket(0x2c, 0xa, 0x1) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1c00, &(0x7f0000000b40)=ANY=[]) 8m5.926524545s ago: executing program 2 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0xfffffed1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "8d00"}, 0x0, 0x0, 0x0, 0x0}) inotify_init() shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000100000002000000000000000000007f00ec97630000f1ffffff"]) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='status\x00') write$P9_RVERSION(r4, 0x0, 0x500) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000180)=0x800) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x8}, 0x8) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) r7 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x0, 0x0, 0x4) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r9, 0x0, 0x0, 0x8044, &(0x7f0000000080)={0x2, 0xfffe, @multicast1}, 0x10) recvmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1}, 0x1}], 0x1, 0x102, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f00000001c0)={'team0\x00'}) sendto$inet(r9, &(0x7f0000000380)="d7", 0x1, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8m2.963856776s ago: executing program 2 (id=255): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_setup(0x410d, &(0x7f0000000000)={0x0, 0x60a4, 0x8, 0x2, 0x2}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7m59.517050954s ago: executing program 2 (id=267): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7, 0x8be7}, 0x8) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r1, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) clock_settime(0xa, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000000)=0x6, 0x4) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000002300)=ANY=[@ANYBLOB="0180c200000eaaaaaa9d943faaaabb080046000094fffc000000019078ac1e0001ac1414aa9404000004009078030000004d00000000000000002f0000ac1414bbe00000028327df0000000000000000ac1414aaac14ab37581f0000640101000a010101e0000002e0000001862e0000000306020002020ed109567cb50ec760777fb82455050bc92d3002d91d907b790002020684924d890502860b00c60000000005ade34b"], 0x0) 7m55.829797134s ago: executing program 2 (id=277): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_setup(0x410d, &(0x7f0000000000)={0x0, 0x60a4, 0x8, 0x2, 0x2}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x3, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7m54.482753594s ago: executing program 2 (id=280): mmap(&(0x7f00002bf000/0x4000)=nil, 0x4000, 0x2, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc4}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x18, 0x0, @fd_index=0x3, 0x6, 0x0, 0x4, 0x0, 0x1}) (async) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) (async) r3 = epoll_create1(0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r4, &(0x7f00000000c0)=[{0x84, 0x77, 0x0, 0x0, @time={0x3, 0x8}, {0x0, 0xfd}, {0x38}, @raw32={[0x0, 0x0, 0x9]}}], 0xfffffd0b) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)={0x4}) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) r5 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r9 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000004b40)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x1000}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000c8d5bbfacd1000390a5f63ccfc36a436ad932256b57f6762ec5d890eb82970bb6a1eb2e19c1d49e5eed1cff3bd83055603eb81835bc187efba034b789a", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r11, @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x8085}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001800)="4f94580c7d3cd545e612a4a2d635d12bf17b97dd8edf200f92d1031351a654018a8e1d68870caa3c072a6b1dbb5a2689e84799581ea72834ee8a2f97f3768282ed9c7404a216cdd2cf7ede8243cc240f3a75e9a82bbba1ede0d3d0", 0x5b}, {&(0x7f0000001880)="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", 0xfd}, {&(0x7f0000001980)="23fcf83c52f77e742ff09aa5e54412225b74e9542a38e91f304c7eeb0ab32d25aead517394b5455641217ed73ea17a7d6b9d595a9e364294a0", 0x39}, {&(0x7f00000019c0)="06", 0x1}, {&(0x7f0000001a00)="e78cb520bfd4d43abb6a71605a2ff54e186733d1ab96b13da7034484a6163c116889c33fe2fc62f31646c2b0323a724a913c106854", 0x35}], 0x5, &(0x7f0000001580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="5cf764ae1f6d63d8d223823dc760c6900000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x80}}, {{&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="e5ce9547fe9cfc00fb82f637f22bf2667116c500833b781c596f3318642dddd8db1797273504ab4cc73d702339b04ebc7b616eca2a95a5dffa1b29751c22e0cc544ed56186cf9fec5cbd6ef71fcc3fc2376e296514778f1ae1d79f84c1c19eb837ea6624e50307bdb244935b3776e908c60d53ae96f4ebccb25c6e8a2fabae6f3217fcff5939ce5e404d0f666f5272844a31774521029ec9ea9075279c3d414b682d7653971f58bf495107ba53d9b98c61e63b0ba2448453c49d413f18", 0xbd}], 0x1, 0x0, 0x0, 0x34000880}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001f40), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r8, @ANYBLOB="a2396f93280000005f09558e010069abdebd000001001000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0xa0, 0x50}}, {{&(0x7f0000002080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004200)="047df5442886623a4e84d79f659c3f03cc9bed40c347db3935ec3c555471b1c6f6d7a46f620eb1", 0x27}, {&(0x7f0000004240)="3eef40eb82191dab548e5dec0054d3739a270077a1e53bf87bf998c24e3c1339673f6e531e67fc15e425d2b179ecda9ff1e1a1bb0aeb88e54bf27501072591f7ba8c23e16095fe20b71c273302d005e93b19cfbe", 0x54}, {&(0x7f00000042c0)="70292eb54a6b1eb6dd861995333714e272f4fcfcc577b879a4c2b85f45bab6912ae35b90f4534c6f390bff0a96d1f57382429a1cf08ad03c17c0bd8a0762db2fae9c58c0904b5de0f3b3693990870d0589dfa70428a1bff0258b5caef0fad33182f0d4f123c3", 0x66}, {&(0x7f0000004340)="a7f68bda1adafed30ee8779cb5d46acfd0b3", 0x12}, {&(0x7f0000004380)="972cd31690af9651316327da61d29a7cb231e31075a09fd7bbfb2032be767d00023854cc9b35b9fd7364cfe5106d5606f2d53668bbc1be7676af4137299691359a032defe511160bcdf5836a34eab2488636af7a1a999aff5486c5494172ea0d046701386c5cd47458f8b65de14849823203aca857c1a8e80d91a0de6f58625515454913f7376ec5f9ed1c23b43fee9e5f8891eb2c87a29440cbad5849c674c21e4c18f532602082c9ae15c24412e01b88802107077aec992c06a2d4a5f1bdd289e5ad4df3714062515844b151109d7fb41476c5ae19c9f987af84e8bbdd0f4b5be459e34d5a6f35cf", 0xe9}, {&(0x7f0000004480)="ad6d33be024efd53638c0e95a01b3ccb53d3b395428603ecfdfc8bc55ecf3b2778dcb9119c611b6945127c8d6c4be889d38739ea5a4e05220759bb62bb74511564a100449ececcf7a3f1e8418ec2418dfed6d362f52b2e8dfbd37b20b813daa461b2c7a4768574e89835fef134f4f4caca523eda4d032bf4a3a0fcd44dd95d64afdeb1eed99f5441fcb4380da945340bb252fa0f790aa81b0a6573398062cf901e5ada7c72c199d770e338c3996c8843242be1d4d957038a84efd5dfa87a32edc69de4dcbf33", 0xc6}], 0x6, &(0x7f0000001480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r4, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r10, @ANYRES32, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000092622c9b1f84782502000200", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x440d4}}], 0x5, 0x0) (async, rerun: 64) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffff7, 0x10100, 0x4, 0x257}, &(0x7f0000000080)=0x0, &(0x7f0000001600)=0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r12, r13, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r14, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) 7m38.975824609s ago: executing program 32 (id=280): mmap(&(0x7f00002bf000/0x4000)=nil, 0x4000, 0x2, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc4}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x18, 0x0, @fd_index=0x3, 0x6, 0x0, 0x4, 0x0, 0x1}) (async) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) (async) r3 = epoll_create1(0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r4, &(0x7f00000000c0)=[{0x84, 0x77, 0x0, 0x0, @time={0x3, 0x8}, {0x0, 0xfd}, {0x38}, @raw32={[0x0, 0x0, 0x9]}}], 0xfffffd0b) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)={0x4}) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) r5 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r9 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000004b40)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x1000}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000c8d5bbfacd1000390a5f63ccfc36a436ad932256b57f6762ec5d890eb82970bb6a1eb2e19c1d49e5eed1cff3bd83055603eb81835bc187efba034b789a", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r11, @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x8085}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001800)="4f94580c7d3cd545e612a4a2d635d12bf17b97dd8edf200f92d1031351a654018a8e1d68870caa3c072a6b1dbb5a2689e84799581ea72834ee8a2f97f3768282ed9c7404a216cdd2cf7ede8243cc240f3a75e9a82bbba1ede0d3d0", 0x5b}, {&(0x7f0000001880)="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", 0xfd}, {&(0x7f0000001980)="23fcf83c52f77e742ff09aa5e54412225b74e9542a38e91f304c7eeb0ab32d25aead517394b5455641217ed73ea17a7d6b9d595a9e364294a0", 0x39}, {&(0x7f00000019c0)="06", 0x1}, {&(0x7f0000001a00)="e78cb520bfd4d43abb6a71605a2ff54e186733d1ab96b13da7034484a6163c116889c33fe2fc62f31646c2b0323a724a913c106854", 0x35}], 0x5, &(0x7f0000001580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="5cf764ae1f6d63d8d223823dc760c6900000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x80}}, {{&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="e5ce9547fe9cfc00fb82f637f22bf2667116c500833b781c596f3318642dddd8db1797273504ab4cc73d702339b04ebc7b616eca2a95a5dffa1b29751c22e0cc544ed56186cf9fec5cbd6ef71fcc3fc2376e296514778f1ae1d79f84c1c19eb837ea6624e50307bdb244935b3776e908c60d53ae96f4ebccb25c6e8a2fabae6f3217fcff5939ce5e404d0f666f5272844a31774521029ec9ea9075279c3d414b682d7653971f58bf495107ba53d9b98c61e63b0ba2448453c49d413f18", 0xbd}], 0x1, 0x0, 0x0, 0x34000880}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001f40), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r8, @ANYBLOB="a2396f93280000005f09558e010069abdebd000001001000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0xa0, 0x50}}, {{&(0x7f0000002080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004200)="047df5442886623a4e84d79f659c3f03cc9bed40c347db3935ec3c555471b1c6f6d7a46f620eb1", 0x27}, {&(0x7f0000004240)="3eef40eb82191dab548e5dec0054d3739a270077a1e53bf87bf998c24e3c1339673f6e531e67fc15e425d2b179ecda9ff1e1a1bb0aeb88e54bf27501072591f7ba8c23e16095fe20b71c273302d005e93b19cfbe", 0x54}, {&(0x7f00000042c0)="70292eb54a6b1eb6dd861995333714e272f4fcfcc577b879a4c2b85f45bab6912ae35b90f4534c6f390bff0a96d1f57382429a1cf08ad03c17c0bd8a0762db2fae9c58c0904b5de0f3b3693990870d0589dfa70428a1bff0258b5caef0fad33182f0d4f123c3", 0x66}, {&(0x7f0000004340)="a7f68bda1adafed30ee8779cb5d46acfd0b3", 0x12}, {&(0x7f0000004380)="972cd31690af9651316327da61d29a7cb231e31075a09fd7bbfb2032be767d00023854cc9b35b9fd7364cfe5106d5606f2d53668bbc1be7676af4137299691359a032defe511160bcdf5836a34eab2488636af7a1a999aff5486c5494172ea0d046701386c5cd47458f8b65de14849823203aca857c1a8e80d91a0de6f58625515454913f7376ec5f9ed1c23b43fee9e5f8891eb2c87a29440cbad5849c674c21e4c18f532602082c9ae15c24412e01b88802107077aec992c06a2d4a5f1bdd289e5ad4df3714062515844b151109d7fb41476c5ae19c9f987af84e8bbdd0f4b5be459e34d5a6f35cf", 0xe9}, {&(0x7f0000004480)="ad6d33be024efd53638c0e95a01b3ccb53d3b395428603ecfdfc8bc55ecf3b2778dcb9119c611b6945127c8d6c4be889d38739ea5a4e05220759bb62bb74511564a100449ececcf7a3f1e8418ec2418dfed6d362f52b2e8dfbd37b20b813daa461b2c7a4768574e89835fef134f4f4caca523eda4d032bf4a3a0fcd44dd95d64afdeb1eed99f5441fcb4380da945340bb252fa0f790aa81b0a6573398062cf901e5ada7c72c199d770e338c3996c8843242be1d4d957038a84efd5dfa87a32edc69de4dcbf33", 0xc6}], 0x6, &(0x7f0000001480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r4, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r10, @ANYRES32, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000092622c9b1f84782502000200", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x440d4}}], 0x5, 0x0) (async, rerun: 64) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffff7, 0x10100, 0x4, 0x257}, &(0x7f0000000080)=0x0, &(0x7f0000001600)=0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r12, r13, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r14, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) 10.184183044s ago: executing program 5 (id=2247): utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8000000000000000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) (async) unshare(0x20000400) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) (async, rerun: 32) unshare(0x0) (async, rerun: 32) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x24, 0x10, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x129}]}]}, 0x24}}, 0x4040080) fallocate(r2, 0x0, 0x400000000000000, 0x7) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x1, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x84}, 0x40004) (async, rerun: 64) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async, rerun: 64) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x3, 0x200, 0xe042c7fc, 0x54, 0x7, "0a571920a0055b6b960422e2b2d2771891fda2", 0x0, 0x6}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) (async) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async, rerun: 64) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x395180, 0x149) (async, rerun: 64) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) (async) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, r8) linkat(r7, &(0x7f0000000480)='./file0\x00', r7, 0x0, 0x1000) 10.07205785s ago: executing program 5 (id=2248): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100837e5f14fec86f8d00000000104c05c4050000000000010902240001000000004904000001030000d3600fb90d3404e9010001220500090581030000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0xa, "90"}, @global=@item_012={0x1, 0x1, 0x5, '\"'}, @global]}}, 0x0}, 0x0) 7.035979533s ago: executing program 1 (id=2260): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) (async) r2 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r3 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="000000001a000000", 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f00000023c0), 0xa0482, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000023c0), 0xa0482, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000ffffff014d564b"]) io_uring_enter(r3, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) r10 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r10, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x8, 0x6, 0x619, 0x800}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000380)) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000380)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x10000) (async) r13 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x10000) clock_gettime(0x0, &(0x7f0000004400)) (async) clock_gettime(0x0, &(0x7f0000004400)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000540)=""/190, 0xbe}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f0000000680)=""/124, 0x7c}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000001780)=""/72, 0x48}, 0xbe}, {{&(0x7f0000001800)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001880)=""/18, 0x12}, {&(0x7f00000018c0)=""/41, 0x29}, {&(0x7f0000001900)=""/10, 0xa}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/88, 0x58}, {&(0x7f0000001a40)=""/129, 0x81}, {&(0x7f0000001b00)=""/169, 0xa9}], 0x8, &(0x7f0000003c80)=""/237, 0xed}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003d80)=""/72, 0x48}, {&(0x7f0000003e00)=""/48, 0x30}, {&(0x7f0000003e40)=""/12, 0xc}, {&(0x7f0000003e80)=""/232, 0xe8}], 0x4, &(0x7f0000003fc0)=""/108, 0x6c}, 0x3ff}, {{&(0x7f0000004040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000042c0)=[{&(0x7f00000040c0)=""/114, 0x72}, {&(0x7f0000004140)=""/137, 0x89}, {&(0x7f0000004200)=""/34, 0x22}, {&(0x7f0000004240)=""/78, 0x4e}], 0x4}, 0x80000001}], 0x4, 0x12002, &(0x7f0000004440)={r14, r15+10000000}) (async) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000540)=""/190, 0xbe}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f0000000680)=""/124, 0x7c}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x8, &(0x7f0000001780)=""/72, 0x48}, 0xbe}, {{&(0x7f0000001800)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001880)=""/18, 0x12}, {&(0x7f00000018c0)=""/41, 0x29}, {&(0x7f0000001900)=""/10, 0xa}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/88, 0x58}, {&(0x7f0000001a40)=""/129, 0x81}, {&(0x7f0000001b00)=""/169, 0xa9}], 0x8, &(0x7f0000003c80)=""/237, 0xed}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003d80)=""/72, 0x48}, {&(0x7f0000003e00)=""/48, 0x30}, {&(0x7f0000003e40)=""/12, 0xc}, {&(0x7f0000003e80)=""/232, 0xe8}], 0x4, &(0x7f0000003fc0)=""/108, 0x6c}, 0x3ff}, {{&(0x7f0000004040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000042c0)=[{&(0x7f00000040c0)=""/114, 0x72}, {&(0x7f0000004140)=""/137, 0x89}, {&(0x7f0000004200)=""/34, 0x22}, {&(0x7f0000004240)=""/78, 0x4e}], 0x4}, 0x80000001}], 0x4, 0x12002, &(0x7f0000004440)={r14, r15+10000000}) ioctl$TIOCEXCL(r13, 0x540c) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004480)=ANY=[@ANYBLOB="600000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c00003000028014000200fc02d9cb2a0e0000000000000000000000000000040013001400030020010000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r17, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r17, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 6.998296953s ago: executing program 5 (id=2261): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x400, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b65740000140002800800024000000003080001400000000a4c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x400, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b65740000140002800800024000000003080001400000000a4c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) (async) 6.816018289s ago: executing program 1 (id=2263): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x5c, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x7f, 0x90, 0x81, [{{0x9, 0x4, 0x0, 0x83, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "f0"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0xfff8, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x9e, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x2, 0x58}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfd, 0x8, 0x81}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x80, 0x96, 0x81, 0x40, 0xe}, 0x30, &(0x7f00000005c0)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "00638b128619dc2826601d39b792cdac"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "d86c35e0f57b7c7f1ab5bc7fd5ca9acf"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x448}}, {0x3f, &(0x7f0000000340)=@string={0x3f, 0x3, "5ee699a570406326e6c569d7e046fb8db87299a3407dc300ff6b5944a779ff2813b4e605ec89f54aebfdebe3cdadabf0e4d55fceb68760988e01833b08"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42a}}, {0xc0, &(0x7f0000000500)=@string={0xc0, 0x3, "dbf58a16debb82823a3c1d31d09765a4f5b124a529356aa1b9ec703c5285764efdfe0386d375efe790bc2b63e131900f00d1f89a60b425cebf57f4b2d491594283e5b54210eb5cd2ed9328bfecd533b970e4d972c7986b061811b4d77627f6312d6fc0d4d0dd482daee8dbf9c8665d353eb6b091f4ac27b4a0f23606b43945f564f03d9ea2054f2f66112d0a7cf5e1d108d02486e1e71f935a07aa73edad834fec1bb5b3b418cef609cfd863589cea2aa84ed0b365af11fc8c56963837f7"}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x17, 0x0, 0x62) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x130, 0x0, 0x403, {0x1, 0x2, 0x0, '\x00', {0x200, 0xad7, 0x8, 0x8, r7, r8, 0x2000, '\x00', 0x1, 0x4, 0x9, 0x6, {0x2f4033e, 0x3}, {0x6}, {0x100010000, 0x9}, {0x8, 0xa04}, 0x4, 0x800007, 0x4, 0x3}}}}) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, r6}, 0x50) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x40, 0xa, 0x2, ')4'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c141d000000a8f12cbf40154c5667df837af67b"], 0x0, 0x0}) 6.815370243s ago: executing program 5 (id=2264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000003e80)={0x20, r1, 0x1, 0xf8bd6d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/132, 0x84}], 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x24, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000100) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) 6.813882738s ago: executing program 3 (id=2265): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100eeff00"/100}}}}}}, 0x0) 6.751854698s ago: executing program 3 (id=2266): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000ffffffffffffffee00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6.618386798s ago: executing program 3 (id=2267): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './control\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r3, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) inotify_init1(0x0) rmdir(&(0x7f0000000100)='./control\x00') socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_rxfh={0x47, 0x2, 0x8001, 0xfe28, 0x3, "941601", 0x4, [0x8, 0x3]}}) 5.272068925s ago: executing program 0 (id=2270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 5.042154628s ago: executing program 0 (id=2271): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f7, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 4.738738571s ago: executing program 3 (id=2272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000009e0300006f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "2d614eb7fcba7a20", "5f7374f11a549d0435dda7e47f2b3ec0", '\x00', "6f4a40aa7baa194f"}, 0x28) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r5, 0x401, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 4.279833156s ago: executing program 0 (id=2274): openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0)=0x7, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x200, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=0x0, @ANYRESHEX, @ANYRES64=r1, @ANYBLOB="1778a7dbf12ecb66f2d0669538a083fc3cd09d76771f0f7588b03f77761602ecac07b1c3b0611462e32685da05228518ee265a17bb28e798dd74ef035734a872ba1a0828fb25697a73e4f19d932f5fc910525c43a0c4a4243fdb92dcf4b9e1af3fc5465097b0f463235c64e766fd8587e4bceb747cde6a0317c61b44cd8c53f01bc0955bd97a699fc921ec7d7faa3c82c13e0e8e5f005699fdcde705fd8af53ba5477f0cbc1329f6125b8b1b6f8d2c5d85a2692f026cc6477b8ad10802d405e7239837d0eb23d471bfed0112f3334a88d6e4c6772ba2d1856b7573683a15541a5de96cb07576caffc0ee"], 0x30}, 0x4000010) sendmsg$inet6(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x4e20, 0xef6, @remote, 0x4cd2aae5}, 0xfffffffffffffec9, &(0x7f00000017c0), 0x9}, 0x4048005) 4.187069284s ago: executing program 0 (id=2275): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000e9ffffffffffffff000000000000000000000000000a000000000000000000000080400000000000000000080000001000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180, @ANYRES16=r0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x780c5) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xad, 0xf4, 0x9d, 0x20, 0x789, 0x160, 0xfd08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc3, 0x0, 0x2, 0xdd, 0x54, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xad, 0xf4, 0x9d, 0x20, 0x789, 0x160, 0xfd08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc3, 0x0, 0x2, 0xdd, 0x54, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc000000210001000000000000000000fe8000000000000000000000000000bbac1e0001000000000000000000000000000000040000fffe0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000001e00000010000000000000000000000000a0100ff000000000000000000000000fe8000000000000000000000000000aa3c000000000000000a0002002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x4e24, 0x4, @mcast2, 0x4}}, {{0xa, 0x4e20, 0x2, @remote, 0x3fe000}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) socket(0x2, 0x1, 0x0) (async) r4 = socket(0x2, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) unshare(0x24020400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r6, 0xda8d) accept4$inet(r6, 0x0, 0x0, 0x800) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_setup(0x3eae, &(0x7f00000003c0)={0x0, 0xf44f, 0x0, 0x0, 0x147}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000d40)=""/4082, &(0x7f0000000140)=0xff2) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x41, 0x0, 0x2, 0x3, &(0x7f0000000280)="20bb42d550dac956c7e4ae31620dc6bf49c0a60ed4e7d3687b6ca71aaab3ea0d1b26790f53ac86e7d7b8f6fdbfcb0427f5681a052c06105a7116b7f3d01348065f658078f5e48961", 0x8001, 0x0, 0x0, {0x2}}) 3.965044513s ago: executing program 1 (id=2276): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00"/100}}}}}}, 0x0) 3.907097049s ago: executing program 4 (id=2277): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r7 = syz_io_uring_setup(0x65e4, &(0x7f00000000c0)={0x0, 0xce20, 0x2, 0x0, 0x1e5}, &(0x7f0000000340)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r7, 0x6f4d, 0xb29d, 0x43, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x3, 0xffff, 0x46, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r2, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x402, 0x7fff800000000}) 3.751025159s ago: executing program 5 (id=2278): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_open_dev$usbfs(0x0, 0x775, 0x8000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000193000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="2e0f01cab81d0000000f23c80f21f8350400a0000f23f80fc79c9f781400000f01df66903e0fc72f0f070f35b8000800000f23d80f21f835000000500f23f8360fc73556ed68ef", 0x47}], 0x1, 0x20, &(0x7f0000000340)=[@cstype0={0x4, 0x4}], 0x1) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 3.559033518s ago: executing program 1 (id=2279): socket(0x11, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80040, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x61) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x400, 0x2000, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) timer_create(0x9, 0x0, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) lseek(r3, 0x2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x39) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.451431432s ago: executing program 5 (id=2280): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r7 = syz_io_uring_setup(0x65e4, &(0x7f00000000c0)={0x0, 0xce20, 0x2, 0x0, 0x1e5}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r7, 0x6f4d, 0xb29d, 0x43, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x3, 0xffff, 0x46, 0x0, 0xd}) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r2, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x402, 0x7fff800000000}) 2.046165429s ago: executing program 3 (id=2281): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x414a4814, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x40, 0xfffffffe}}, 0x50) (async) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x8230}, 0x3}) (async) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000"], 0xfeffffff) 1.763415645s ago: executing program 3 (id=2282): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a80)={'#! ', './file0', [], 0xa, "beec4ddef652498ae2db8193268749d2b0818264d459e3cd31848c54e0b7a4f4ec6fa528bec548f4628902518ae8523a678ecaeb0e3103000000000000005d5640049a64695a183a0f67361c7a24729d12cb722da4c6066a71983697f8b2fc45612df4b5fcf9c40a5b2cd7a3a4729bdd25376bb8f8c5d9503c256badb2360d2beb84140fb047f55bbf0bc2f53108d92b339392ac19898672ea393d01696cae09004fba5408fc598c24a041b9d023574195353d169ae31d6316f2891b5b46e58b0f01e0bc49900a6664ac7411e1618a30a2dc6d69c3411b3736c1ea346fadf53318ce42bf3a1972734d8e63a74a10ec0e4da5fffc888227e435093f4232c388b203cdf33c269c296c3a8ee861562a8a5ef882dc59b390930e3f9d949fe19a4b9118b64ab8c10585638c63051af7d94726530965a36e5d38368586936367d1366ddb43532d499b3240df2921e57f5cdb7370f86958fe8083245dc63308bfe0f412715879e692c72256f0f550111bdf2f2fb52c609ef7809f7bc31e3846aef5109793ec505b17022948fa54d1220d161d72"}, 0x19b) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1b, 0x800000000004, @thr={&(0x7f0000000180)="1ea3a6ae6b0000c4df04000000000000bcad31f8ca3ca8414541fd81989a1a0c7e40e72ca264aaccc900"/56, &(0x7f00000009c0)="7c099d4f0fbaf1959af6629084a6a1b0d24d91ec9895580b1e643881f1bc31be7d60503ae280be7e6580f372c4403814bf8b26ed2b54febd27926b606390695ded2ec1cd74884a70dda3e7855e5eaefcc8b57463d5c7913c1709008a54863082b96e615ced2b8fb7f60d5e730e137c3246f726e55819d0168f8f711ebf7c40af57b6c8f6c59eba6b0300000029bf8120633b9c36374a8e84dd73afbe170b5ba4e5a4ad88f301e69ab400"/184}}, &(0x7f0000bbdffc)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x4000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0xdc) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x6, 0x8}, {0x6, 0xb}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mmap(&(0x7f00000aa000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x71a36000) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r9, 0xc4c03d09, 0x0) 1.701575222s ago: executing program 4 (id=2283): r0 = socket$inet6(0xa, 0x6, 0x2b) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x10, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x3d10, 0x4f) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) 1.588103001s ago: executing program 1 (id=2284): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000db200fe8fd8ebd00000004000800"], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 1.251685684s ago: executing program 4 (id=2285): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f0000001340)="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", 0xf44}], 0x2}, 0x9cdc2384056b48b8) 1.133293256s ago: executing program 4 (id=2286): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) close_range(r1, r2, 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendto$inet6(r0, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) (async) shutdown(r0, 0x1) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r9, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010312e02046223ce93da000d042abd7000000000000000000082019a9b3ef1c72b00975d4b79837e05c3a70c62787f5b575c49a2b0b707733ba2ca82def73cb1a4fe0a3254eccb36f0b67c357b761c63abe5c7ea4867349f", @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100626f6e64000000001400028005000100060000000800090002000000"], 0x44}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7}}, './file0\x00'}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c00018009000100686173680000f1001c000280080002400000000c08000440fffffffa0800074000000001090001"], 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) ioctl$USBDEVFS_CLEAR_HALT(r10, 0x80045515, &(0x7f0000000200)={0x6}) 1.020186998s ago: executing program 0 (id=2287): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000900)=""/257, 0x101}, {&(0x7f0000001d80)=""/164, 0xa4}, {&(0x7f00000002c0)=""/243, 0xfffffe24}], 0x3, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) (async) io_setup(0x222, 0x0) (async, rerun: 64) fsopen(0x0, 0x1) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r8, 0x0, r7}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000080)=0x20000000) 1.017366752s ago: executing program 4 (id=2288): mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000000b80)={0x0, 0x0, 0x60000}, 0x20) 924.064177ms ago: executing program 4 (id=2289): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1b) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='`']}]}, 0x34}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_clone(0x88007000, &(0x7f0000000140)="57b290f7b225d9995abef328aea107809191bc3d3f2eb6404b49b899a63b365a9fd6203fc6ca38fb03ed0b12fe0c07cc14465b4f0225a464eb8d2b4a870a1f5ce4a46e520ae744644a6b5b98b92537c03bc2906c5ae62de0dc94db5cbf3fee64d0e86fb9c7cd1add955710830e4fc4866ac56315342c1a48c40ef5f5aed9cc7a6563c1bf3d3e045c0db0fa85b24241409e0d032d294d97d3d8f829be7669f5b0b0c947af7b719f66b8", 0xa9, &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000002c0)="ffc6ff0c1f3f09da8a77fb24c64da09710f9b2c56bbfb98ece365f1419329faca4d5bd28cdba1073b0f97bd5599521b616e5aa6825d937b4cc270e8a1dc492c5e0814c") sched_getattr(r6, &(0x7f0000000240)={0x38}, 0x38, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000005480)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, &(0x7f0000000040)}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 157.306598ms ago: executing program 1 (id=2290): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x14, r0, 0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0x120, 0x120, 0x120, 0x120, 0x0, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0xffffff00, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 'ip_vti0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x2c, 0x1, 0x3, 0x22}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0x0, 0xff000000, 0xff], [0xffffffff, 0x80ffff7f, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x3b, 0x81, 0x4, 0x90}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xff000000], [0x0, 0xffffff00, 0xff, 0xff], 'dvmrp1\x00', 'vlan1\x00', {0xff}, {}, 0x87, 0x7, 0x4, 0x2}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0xf, 0x5, 0x1, 0x0, "6b70424206aacbc3604baebfbfab2dfa97724cf6e22d7dd40ac1186c0994c8bb0c1fd08c2f817f62948d38ccb1c499ae9470b419ba8310b5da21686eb06bd700"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2, @ipv6=@empty, 0x1d, 0x34, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff], 'veth1_macvtap\x00', 'ipvlan0\x00', {}, {0xff}, 0x6c, 0xa, 0x0, 0x3c}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast1, 0x2c, 0x16}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f0000000380)='\x00']}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001200010a00000000e13f47c533ae839fbfb36a421aa616000000000700000040335e4ee0005b217a"], 0x14}}, 0x0) name_to_handle_at(r4, &(0x7f0000000040)='./file7/file0/file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="1400000001000000032000000700000008000000ffffff7f09000000"], 0x0, 0x1000) epoll_pwait(r4, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0xffff, &(0x7f0000000040)={[0x7]}, 0x8) 0s ago: executing program 0 (id=2291): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="00000102000828"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0x33, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0xd3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x73, 0x8, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x4, 0xfb}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x2, 0xff, 0x0, 0x20, 0x2}, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="050f1c000203100b14100a0322f26fab1b000000000000003fff00001c2024715044ec59bcf1d4ef4fe8b0f399020845e7af51db11cf9183740b7200"/74], 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42e}}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x400, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000940)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r2, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000540)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="60238f0000008f02deff896ddfc454c146dcd4f138624a0bcc373ca779e2a344bae119d4924d41b3e73a5cd68e6008c70cd645b54712b286f03f36a36065fd662bc38ba92bd528a5bc55d56eaf959daa8b36fe2d9ed3f4d29a73df4f07e4b781f8703e4a72b91f45132f6e306db9d115ca55b94fd8f64b63f12a0c31cd0f780826bd1175256e83f0fec7b419c6ffbe0d097fc50711"], &(0x7f0000000500)={0x0, 0x3, 0x31, @string={0x31, 0x3, "c996d6b2988a0fb3dc09ddd1e0c99eda749b800851147758d3668cab21c514128f1f7a104a6877824744d9daf09f5b"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="4018ce000000471b3c9489be70da4854356d85710a095dec4faa83a4ceb02014eb6dfc27babcda9ca4009518678dea154d999348815bd00da93b58829272deecc3ab59d7fccedb258f19cafff1d37571d66492f4bd782a9f72a155c3c576c26d79f0a340aa67405d73e5b7bace1bec1a01acbae6961c7a48046ca42cbd37a654a1e88826edc417906dfd3ebd4346e4be00538431bb129e6ec1d6ff47206b7f9f4d3eb39608a8f28bd5dd504ddbc9c80709fb947edc125d5daa3fc84d10b3d236596bfbe8c376db070f54a0f2a25b7207a8f92f5b"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000740)={0x20, 0x0, 0x6e, {0x6c, "e702d18fdc207ab36aca94fcb531e3d42b7219d7b8caa3c1cbf28f3dc1f13f65eb600d937644bd54051e6fe420db23873a6838c564fbb8d52b0505f87974f450e7e5aeb0de1a59977afeb49187e62db1b0a47bc3768438bcafe72aa4f10c9b487ad08873c099a9d48dcd70c7"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x2}}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000700)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0xb007}, 0x4) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r7}, &(0x7f0000000000)=0x0) timer_settime(r8, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x1}, {}, @raw32={[0xffffffff]}}], 0x1c) exit(0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280)) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x7, 0x1ff8000, 0x5, 0x2, 0x8, 0xfbce, 0x5, 0x4, 0x6, 0x41f9, 0xca, 0x1, 0x80000000, 0x6, 0x2007, 0x7, 0x1000008, 0xe, 0x7, 0x601b, 0xffffffff, 0xfffffffb, 0x102, 0x5, 0x73, 0x100bf35, 0xffffffff, 0x3, 0x9dc, 0x4, 0x6]}) kernel console output (not intermixed with test programs): nterval 0, changing to 7 [ 510.531735][T12780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1757'. [ 510.541416][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.578211][ T5916] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 510.599197][T12780] x_tables: duplicate underflow at hook 2 [ 510.627902][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.698978][ T5916] usb 5-1: config 0 descriptor?? [ 510.837526][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 511.158965][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 511.171557][ T5916] ft260 0003:0403:6030.001F: unknown main item tag 0x7 [ 511.172373][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 511.237897][ T5840] Bluetooth: hci5: command 0x0405 tx timeout [ 511.303498][T12786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.316190][T12786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.369504][ T5916] ft260 0003:0403:6030.001F: failed to retrieve chip version [ 511.442406][ T5916] ft260 0003:0403:6030.001F: probe with driver ft260 failed with error -71 [ 511.487566][ T5916] usb 5-1: USB disconnect, device number 88 [ 511.715775][ T9837] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.740952][ T9837] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.789852][ T9837] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.855592][ T9837] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.090265][T12790] loop2: detected capacity change from 0 to 7 [ 512.106637][T12790] Dev loop2: unable to read RDB block 7 [ 512.157669][T12790] loop2: unable to read partition table [ 512.190040][T12790] loop2: partition table beyond EOD, truncated [ 512.215796][T12790] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 512.663960][T12804] CIFS: iocharset name too long [ 512.758160][T12800] bond3: option lacp_rate: invalid value (129) [ 512.774911][T12800] bond3 (unregistering): Released all slaves [ 512.854882][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 512.854899][ T30] audit: type=1326 audit(1761089543.306:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 512.927928][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 512.957792][ T30] audit: type=1326 audit(1761089543.346:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 512.982068][ T30] audit: type=1326 audit(1761089543.346:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 513.007220][ T30] audit: type=1326 audit(1761089543.346:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 513.031553][ T30] audit: type=1326 audit(1761089543.346:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb8f98d810 code=0x7ffc0000 [ 513.057822][ T30] audit: type=1326 audit(1761089543.346:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 513.080953][ T30] audit: type=1326 audit(1761089543.356:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 513.169564][ T30] audit: type=1326 audit(1761089543.356:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 513.192684][ T30] audit: type=1326 audit(1761089543.356:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 513.245547][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 513.251850][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 513.318017][ T5151] Bluetooth: hci5: command 0x0405 tx timeout [ 513.326770][ T30] audit: type=1326 audit(1761089543.356:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.5.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 514.930221][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1774'. [ 514.940659][T12838] x_tables: duplicate underflow at hook 2 [ 515.157188][T12840] loop2: detected capacity change from 0 to 7 [ 515.164440][T12840] Dev loop2: unable to read RDB block 7 [ 515.170636][T12840] loop2: unable to read partition table [ 515.242988][T12840] loop2: partition table beyond EOD, truncated [ 515.340085][T12840] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 515.411807][ T5201] Dev loop2: unable to read RDB block 7 [ 515.427698][ T5201] loop2: unable to read partition table [ 515.449719][ T5201] loop2: partition table beyond EOD, truncated [ 515.633790][ T5938] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 515.809441][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.820715][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.838422][ T5938] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 515.849462][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.859794][T12851] tipc: Enabling of bearer rejected, failed to enable media [ 515.959115][ T5938] usb 5-1: config 0 descriptor?? [ 516.051835][ T5916] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 516.207852][ T43] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 516.221910][T12854] lo: Caught tx_queue_len zero misconfig [ 516.267130][T12854] veth3: entered promiscuous mode [ 516.277806][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 516.318853][ T5916] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 516.327114][ T5916] usb 6-1: config 4 has no interface number 0 [ 516.369440][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 516.391076][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.402524][ T43] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 516.432010][ T43] usb 4-1: config 1 has no interface number 1 [ 516.448386][ T5916] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.461685][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.473466][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.481783][ T43] usb 4-1: Product: syz [ 516.486516][ T43] usb 4-1: Manufacturer: syz [ 516.497070][ T5916] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.502021][ T43] usb 4-1: SerialNumber: syz [ 516.541400][ T5916] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 516.582438][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.628683][ T5916] hub 6-1:4.128: USB hub found [ 516.796141][ T5938] hid-led 0003:27B8:01ED.0020: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 516.808575][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 516.824618][ T5916] hub 6-1:4.128: 2 ports detected [ 516.838255][ T5916] hub 6-1:4.128: Using single TT (err -22) [ 516.863506][ T5938] hid-led 0003:27B8:01ED.0020: ThingM blink(1) initialized [ 517.063410][ T5938] usb 5-1: USB disconnect, device number 89 [ 517.087498][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 517.104508][T12860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.112068][T12861] fido_id[12861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 517.113633][T12860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.413778][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 517.423796][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 517.432305][ T10] usb 2-1: can't read configurations, error -71 [ 517.699527][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.713017][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.742610][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.754188][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.854571][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1786'. [ 518.117447][T12879] netlink: 'syz.1.1787': attribute type 10 has an invalid length. [ 518.564539][ T10] hub 6-1:4.128: hub_ext_port_status failed (err = -32) [ 518.918339][ T10] usb 6-1: USB disconnect, device number 57 [ 519.011045][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 519.011059][ T30] audit: type=1326 audit(1761089549.436:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 519.147730][ T30] audit: type=1326 audit(1761089549.446:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 519.192643][ T30] audit: type=1326 audit(1761089549.446:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 519.338046][ T30] audit: type=1326 audit(1761089549.446:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 519.433413][T12899] tipc: Enabled bearer , priority 0 [ 519.441155][T12899] syzkaller0: entered promiscuous mode [ 519.449779][T12899] syzkaller0: entered allmulticast mode [ 519.465417][ T43] usb 4-1: USB disconnect, device number 82 [ 519.501079][ T30] audit: type=1326 audit(1761089549.446:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb8f98d810 code=0x7ffc0000 [ 519.526235][ T30] audit: type=1326 audit(1761089549.446:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 519.553368][T12900] tipc: Resetting bearer [ 519.634554][ T30] audit: type=1326 audit(1761089549.446:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 519.679965][ T30] audit: type=1326 audit(1761089549.446:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 519.730497][T12902] tipc: Resetting bearer [ 519.812444][ T30] audit: type=1326 audit(1761089549.456:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 519.850978][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.860404][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.926902][T12902] tipc: Disabling bearer [ 519.977615][ T30] audit: type=1326 audit(1761089549.456:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12889 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 520.230139][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.244850][T12915] loop2: detected capacity change from 0 to 7 [ 520.257887][T12915] Dev loop2: unable to read RDB block 7 [ 520.273468][T12915] loop2: unable to read partition table [ 520.286523][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.306610][T12915] loop2: partition table beyond EOD, truncated [ 520.333594][T12915] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 520.407849][ T5916] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 520.459453][ T10] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 520.547910][ T5916] usb 4-1: device descriptor read/64, error -71 [ 520.609789][T12924] loop2: detected capacity change from 0 to 7 [ 520.621979][ T7769] Dev loop2: unable to read RDB block 7 [ 520.629256][ T10] usb 2-1: device descriptor read/64, error -71 [ 520.637189][ T7769] loop2: unable to read partition table [ 520.644343][ T7769] loop2: partition table beyond EOD, truncated [ 520.651835][T12924] Dev loop2: unable to read RDB block 7 [ 520.657751][T12924] loop2: unable to read partition table [ 520.679014][T12924] loop2: partition table beyond EOD, truncated [ 520.688954][T12924] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 520.808481][ T5916] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 520.867448][ T10] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 520.998972][ T5916] usb 4-1: device descriptor read/64, error -71 [ 521.067577][ T10] usb 2-1: device descriptor read/64, error -71 [ 521.118040][ T5916] usb usb4-port1: attempt power cycle [ 521.177896][ T10] usb usb2-port1: attempt power cycle [ 521.497449][ T5916] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 521.517515][ T10] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 521.548269][ T5916] usb 4-1: device descriptor read/8, error -71 [ 521.706098][ T10] usb 2-1: device descriptor read/8, error -71 [ 521.745451][T12943] ucma_write: process 963 (syz.5.1806) changed security contexts after opening file descriptor, this is not allowed. [ 521.817473][ T5916] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 521.838258][ T5916] usb 4-1: device descriptor read/8, error -71 [ 521.923449][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1807'. [ 521.940200][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.949735][ T5916] usb usb4-port1: unable to enumerate USB device [ 521.951527][T12946] vlan2: entered promiscuous mode [ 521.958575][ T10] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 521.966218][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.969650][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.977624][T12946] macvtap0: entered promiscuous mode [ 521.985788][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.999170][ T10] usb 2-1: device descriptor read/8, error -71 [ 522.107842][ T10] usb usb2-port1: unable to enumerate USB device [ 522.530498][T12953] fuse: Invalid uid '00000000000000000005' [ 522.786620][T12959] loop2: detected capacity change from 0 to 7 [ 522.803483][T12959] Dev loop2: unable to read RDB block 7 [ 522.813504][T12959] loop2: unable to read partition table [ 522.821353][T12959] loop2: partition table beyond EOD, truncated [ 522.828017][T12959] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 523.597473][ T43] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 523.607498][ T5894] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 523.820731][T12975] binder_alloc: 12974: pid 12974 spamming oneway? 1 buffers allocated for a total size of 4096 [ 523.831263][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 523.842142][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.852720][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.872069][ T5894] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.888001][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.918833][ T5894] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 523.947469][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 523.966769][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.990963][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.020242][ T5894] usb 2-1: config 0 descriptor?? [ 524.033172][ T43] usb 4-1: config 0 descriptor?? [ 524.432642][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.441671][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.487121][ T43] savu 0003:1E7D:2D5A.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 524.491783][T12990] netlink: 'syz.0.1821': attribute type 10 has an invalid length. [ 524.887012][ T43] usb 4-1: USB disconnect, device number 87 [ 525.143128][ T5894] usb 2-1: USB disconnect, device number 112 [ 525.309953][T12998] loop2: detected capacity change from 0 to 7 [ 525.323436][ T7769] Dev loop2: unable to read RDB block 7 [ 525.329526][ T7769] loop2: unable to read partition table [ 525.335602][ T7769] loop2: partition table beyond EOD, truncated [ 525.346288][T12998] Dev loop2: unable to read RDB block 7 [ 525.357499][T12998] loop2: unable to read partition table [ 525.363452][T12998] loop2: partition table beyond EOD, truncated [ 525.375886][T12998] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 525.638920][T13005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.670257][T13004] use of bytesused == 0 is deprecated and will be removed in the future, [ 525.715153][T13004] use the actual size instead. [ 525.865785][T13021] syz_tun: entered promiscuous mode [ 525.881126][T13021] macsec1: entered allmulticast mode [ 525.889892][T13021] syz_tun: entered allmulticast mode [ 525.902750][T13021] syz_tun: left allmulticast mode [ 525.923556][T13021] syz_tun: left promiscuous mode [ 526.006035][T13020] kvm: kvm [13018]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xf33c [ 526.017276][T13020] kvm: kvm [13018]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x97ab [ 526.031883][T13020] kvm: kvm [13018]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xa4d2 [ 526.054981][T13020] kvm: kvm [13018]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9e40 [ 526.064447][T13020] kvm: kvm [13018]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x46af [ 526.654604][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 526.697732][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 526.708899][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1835'. [ 526.746670][T13041] binder: 13040:13041 ioctl c0306201 2000000003c0 returned -22 [ 526.759899][T13044] netlink: 'syz.0.1834': attribute type 10 has an invalid length. [ 526.814964][T13046] loop2: detected capacity change from 0 to 7 [ 526.823044][T13046] Dev loop2: unable to read RDB block 7 [ 526.830903][T13046] loop2: unable to read partition table [ 526.843492][T13046] loop2: partition table beyond EOD, truncated [ 526.853228][T13046] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 526.884818][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 526.903135][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.914681][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 526.924079][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.924410][ T5201] Dev loop2: unable to read RDB block 7 [ 526.939437][ T5201] loop2: unable to read partition table [ 526.940006][ T10] usb 6-1: config 0 descriptor?? [ 526.945545][ T5201] loop2: partition table beyond EOD, truncated [ 528.035189][T13065] netlink: 'syz.1.1841': attribute type 1 has an invalid length. [ 528.065424][T13063] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1840'. [ 528.358619][T13065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.885538][T13076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.897895][T13076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.320639][T13077] loop2: detected capacity change from 0 to 7 [ 529.333816][ T7769] Dev loop2: unable to read RDB block 7 [ 529.340241][ T7769] loop2: unable to read partition table [ 529.346624][ T7769] loop2: partition table beyond EOD, truncated [ 529.354766][T13077] Dev loop2: unable to read RDB block 7 [ 529.364161][T13077] loop2: unable to read partition table [ 529.377491][ T5916] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 529.392628][T13077] loop2: partition table beyond EOD, truncated [ 529.402903][T13077] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 529.461870][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 529.468029][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 529.495335][ T10] usb 6-1: USB disconnect, device number 58 [ 529.529935][ T5916] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 529.551126][ T5916] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 529.582235][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.614459][ T5916] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 529.646542][ T5916] usb 5-1: config 0 has no interface number 0 [ 529.661387][ T5916] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 529.673394][ T5916] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 529.685047][ T5916] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 529.695567][ T5916] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.717794][ T5916] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 529.729320][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.741979][ T5916] usb 5-1: config 0 descriptor?? [ 529.768769][ T5916] gspca_main: spca561-2.14.0 probing abcd:cdee [ 529.889081][T13103] netlink: 'syz.5.1851': attribute type 1 has an invalid length. [ 529.928667][T13103] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 529.942402][T13103] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 529.956018][T13103] bond3 (unregistering): Released all slaves [ 530.087482][ T5894] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 530.249496][ T5894] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.265893][ T5894] usb 2-1: config 0 has no interface number 0 [ 530.273208][ T5894] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 530.294560][ T5894] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 530.306482][ T5894] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 530.311621][ T5916] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 530.324928][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.337254][ T5894] usb 2-1: config 0 descriptor?? [ 530.352946][T13097] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 530.357160][ T5916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 530.400513][ T5916] usb 5-1: MIDIStreaming interface descriptor not found [ 530.404386][ T5894] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 530.428080][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1844'. [ 530.464013][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1844'. [ 530.519574][T13079] erspan0: entered promiscuous mode [ 530.541396][T13079] gretap0: entered promiscuous mode [ 530.640443][T13097] PKCS7: Unknown OID: [5] (bad) [ 530.645836][T13097] PKCS7: Only support pkcs7_signedData type [ 530.832555][T13118] program syz.5.1855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.567296][T13135] loop2: detected capacity change from 0 to 7 [ 531.580282][ T7769] Dev loop2: unable to read RDB block 7 [ 531.596223][ T7769] loop2: unable to read partition table [ 531.611368][ T7769] loop2: partition table beyond EOD, truncated [ 531.629469][T13135] Dev loop2: unable to read RDB block 7 [ 531.635397][T13135] loop2: unable to read partition table [ 531.646840][T13135] loop2: partition table beyond EOD, truncated [ 531.667228][T13135] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 532.115216][T13137] loop2: detected capacity change from 0 to 7 [ 532.131946][T13137] Dev loop2: unable to read RDB block 7 [ 532.150876][T13137] loop2: unable to read partition table [ 532.188391][T13137] loop2: partition table beyond EOD, truncated [ 532.211483][T13137] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 532.950824][ T5894] usb 2-1: USB disconnect, device number 113 [ 533.527438][ T5894] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 533.678141][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 533.706367][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 533.747566][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 533.770773][ T5894] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 533.780826][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.799731][ T5894] usb 2-1: Product: syz [ 533.814763][ T5894] usb 2-1: Manufacturer: syz [ 533.897466][ T5894] usb 2-1: SerialNumber: syz [ 533.921654][ T5894] usb 2-1: config 0 descriptor?? [ 533.929852][ T5894] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 533.977568][ T5894] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 534.926337][ T5894] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 534.949000][ T5894] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 534.998626][ T5894] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 535.005606][ T5894] em28xx 2-1:0.0: No AC97 audio processor [ 535.029793][ T43] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 535.094451][ T5894] usb 2-1: USB disconnect, device number 114 [ 535.123110][ T5894] em28xx 2-1:0.0: Disconnecting em28xx [ 535.148300][ T5894] em28xx 2-1:0.0: Freeing device [ 535.208412][T13198] geneve2: entered allmulticast mode [ 535.236964][ T9832] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 535.259163][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 535.270131][ T43] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 535.291324][ T9832] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 535.325615][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.345508][ T9832] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 535.377084][ T43] usb 4-1: Product: syz [ 535.381418][ T43] usb 4-1: Manufacturer: syz [ 535.386373][ T43] usb 4-1: SerialNumber: syz [ 535.394996][ T9832] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 535.445450][ T43] usb 4-1: config 0 descriptor?? [ 535.480187][ T43] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 535.700545][T13184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.709790][ T43] gp8psk: usb in 128 operation failed. [ 535.724162][T13184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.037701][ T43] gp8psk: usb in 137 operation failed. [ 536.057387][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 536.085065][ T43] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 536.094651][ T43] usb 4-1: media controller created [ 536.146982][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.174852][ T43] gp8psk_fe: Frontend revision 1 attached [ 536.185604][ T43] usb 4-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 536.202530][ T43] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 536.378254][T13214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.403707][T13214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.557321][ T43] gp8psk: usb in 138 operation failed. [ 536.651484][ T43] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 536.707566][ T43] gp8psk: found Genpix USB device pID = 201 (hex) [ 536.737994][ T43] usb 4-1: USB disconnect, device number 88 [ 537.133848][ T43] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 538.903367][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 538.947469][T13242] netlink: 'syz.3.1884': attribute type 5 has an invalid length. [ 538.984798][T13242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1884'. [ 539.006148][T13244] loop2: detected capacity change from 0 to 7 [ 539.014406][T13244] Dev loop2: unable to read RDB block 7 [ 539.030642][T13244] loop2: unable to read partition table [ 539.036511][T13244] loop2: partition table beyond EOD, truncated [ 539.044503][T13242] geneve2: entered promiscuous mode [ 539.049836][T13242] geneve2: entered allmulticast mode [ 539.057003][ T9832] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 539.096699][ T9832] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 539.105600][T13244] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 539.138457][ T9832] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 539.212907][ T9832] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 539.254345][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 539.557788][ T5916] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 539.727582][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 539.791996][ T5916] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 539.814505][ T5916] usb 2-1: config 0 has no interface number 0 [ 539.820789][T13273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.855400][T13274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.866669][T13273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.902384][ T5916] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 539.913867][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.923984][ T5916] usb 2-1: Product: syz [ 539.934127][ T5916] usb 2-1: Manufacturer: syz [ 539.940449][ T5916] usb 2-1: SerialNumber: syz [ 539.972367][T13274] warning: `syz.3.1894' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 539.998524][ T5916] usb 2-1: config 0 descriptor?? [ 540.006390][ T5916] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 540.337570][ T5916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 540.364455][ T5916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 540.573524][T13253] tunl0: Caught tx_queue_len zero misconfig [ 540.579844][T13253] netem: change failed [ 540.796512][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 540.818173][ T5916] usb 2-1: USB disconnect, device number 115 [ 540.873632][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 540.955589][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 540.994696][ T5916] quatech2 2-1:0.51: device disconnected [ 541.038469][T13284] fuse: Bad value for 'fd' [ 541.090258][T13285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.186584][T13285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.040232][ T5840] Bluetooth: hci5: command 0x0405 tx timeout [ 542.199819][T13297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1901'. [ 542.556500][T13300] syzkaller1: entered promiscuous mode [ 542.562529][T13300] syzkaller1: entered allmulticast mode [ 542.935167][T13306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.993683][T13306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.084997][T13309] kvm: pic: non byte write [ 543.098369][ T43] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 543.267450][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 543.298221][ T43] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 543.336074][ T43] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 543.362557][ T43] usb 6-1: config 166 has no interface number 0 [ 543.377401][ T43] usb 6-1: config 166 has no interface number 1 [ 543.391990][ T43] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 543.455990][ T43] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 543.570954][ T43] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 543.755290][ T43] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 543.785469][ T43] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 543.867260][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 543.874761][ T30] audit: type=1326 audit(1761089574.316:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 543.950599][ T43] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 544.056570][ T43] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 544.071703][ T30] audit: type=1326 audit(1761089574.316:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 544.137503][ T43] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 544.173305][ T43] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 544.191775][ T43] usb 6-1: config 166 interface 177 has no altsetting 0 [ 544.199415][ T43] usb 6-1: config 166 interface 34 has no altsetting 0 [ 544.206646][ T30] audit: type=1326 audit(1761089574.326:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 544.230181][ T30] audit: type=1326 audit(1761089574.326:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 544.257746][ T43] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 544.271504][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.281299][ T30] audit: type=1326 audit(1761089574.326:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 544.309196][ T43] usb 6-1: Product: syz [ 544.315744][ T43] usb 6-1: Manufacturer: syz [ 544.325163][ T43] usb 6-1: SerialNumber: syz [ 544.333290][ T30] audit: type=1326 audit(1761089574.356:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa646d8d810 code=0x7ffc0000 [ 544.356383][ T30] audit: type=1326 audit(1761089574.356:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 544.382929][ T30] audit: type=1326 audit(1761089574.356:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 544.476954][ T30] audit: type=1326 audit(1761089574.356:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 544.514832][ T30] audit: type=1326 audit(1761089574.356:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.0.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 544.824055][ T43] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 545.106243][ T43] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 545.297686][ T43] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5 [ 545.323079][ T43] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 545.339947][ T43] uvcvideo 6-1:166.34: No valid video chain found. [ 545.366132][ T43] usb 6-1: USB disconnect, device number 59 [ 545.720226][T13356] binder_alloc: 13355: pid 13355 spamming oneway? 1 buffers allocated for a total size of 4096 [ 545.897546][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1914'. [ 545.920290][T13365] tipc: Enabling of bearer rejected, failed to enable media [ 545.931312][T13362] fuse: Unknown parameter '<' [ 545.942904][T13365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.953230][T13365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.987481][ T43] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 546.150958][ T43] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 546.167236][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.191774][ T43] usb 2-1: config 0 descriptor?? [ 546.226995][ T43] cp210x 2-1:0.0: cp210x converter detected [ 546.635350][ T43] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 546.739613][ T43] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 546.760578][ T43] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 546.807875][ T43] usb 2-1: cp210x converter now attached to ttyUSB0 [ 546.867103][ T43] usb 2-1: USB disconnect, device number 116 [ 546.918186][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 546.966636][ T43] cp210x 2-1:0.0: device disconnected [ 547.007280][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.021788][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.050731][T13382] syzkaller0: entered promiscuous mode [ 547.290770][T13394] loop4: detected capacity change from 0 to 7 [ 547.301456][ T7769] Dev loop4: unable to read RDB block 7 [ 547.307287][ T7769] loop4: AHDI p2 [ 547.311419][ T7769] loop4: partition table partially beyond EOD, truncated [ 547.320436][T13394] Dev loop4: unable to read RDB block 7 [ 547.333512][T13394] loop4: AHDI p2 [ 547.338626][T13394] loop4: partition table partially beyond EOD, truncated [ 548.267847][T13413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.307197][T13413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.407541][ T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 548.587516][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 548.600770][ T10] usb 4-1: config 0 has no interfaces? [ 548.624633][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 548.638184][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 548.668124][ T10] usb 4-1: Manufacturer: syz [ 548.674352][ T10] usb 4-1: config 0 descriptor?? [ 548.679974][T13421] futex_wake_op: syz.1.1920 tries to shift op by 32; fix this program [ 548.693051][ T43] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 548.871539][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 548.881583][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.899354][ T43] usb 6-1: config 0 descriptor?? [ 548.924445][ T43] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 548.942849][T13424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1928'. [ 549.004961][T13412] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 549.167785][T13428] loop4: detected capacity change from 0 to 7 [ 549.176805][T13428] Dev loop4: unable to read RDB block 7 [ 549.216509][T13428] loop4: AHDI p2 [ 549.221817][T13415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.241066][T13428] loop4: partition table partially beyond EOD, truncated [ 549.498791][ T5916] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 549.625499][T13435] loop2: detected capacity change from 0 to 7 [ 549.659595][ T5916] usb 2-1: config index 0 descriptor too short (expected 28277, got 18) [ 549.668918][ T5916] usb 2-1: config 0 has too many interfaces: 116, using maximum allowed: 32 [ 549.688971][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.713803][ T5916] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 116 [ 549.721620][T13435] Dev loop2: unable to read RDB block 7 [ 549.728004][ T5916] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 549.738039][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.746310][ T5916] usb 2-1: Product: syz [ 549.748305][T13437] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1933'. [ 549.759735][ T5916] usb 2-1: Manufacturer: syz [ 549.765141][ T5916] usb 2-1: SerialNumber: syz [ 549.770002][T13435] loop2: unable to read partition table [ 549.770268][T13435] loop2: partition table beyond EOD, truncated [ 549.779938][ T5916] usb 2-1: config 0 descriptor?? [ 549.784557][T13437] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1933'. [ 549.847990][T13435] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 549.875891][T13437] netlink: 'syz.4.1933': attribute type 5 has an invalid length. [ 549.885756][ T5201] Dev loop2: unable to read RDB block 7 [ 549.891763][ T5201] loop2: unable to read partition table [ 549.894674][T13437] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1933'. [ 549.897869][ T5201] loop2: partition table beyond EOD, truncated [ 550.019991][T13426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.036104][T13426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.146795][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 550.210693][T13443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1935'. [ 550.636905][T13456] loop2: detected capacity change from 0 to 7 [ 550.669163][T13456] Dev loop2: unable to read RDB block 7 [ 550.674918][T13456] loop2: unable to read partition table [ 550.683547][T13456] loop2: partition table beyond EOD, truncated [ 550.701354][T13456] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 550.869990][T13459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.898008][T13459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.937075][T13460] loop4: detected capacity change from 0 to 7 [ 550.973042][T13460] Dev loop4: unable to read RDB block 7 [ 550.986418][ T5951] usb 4-1: USB disconnect, device number 89 [ 550.987783][T13460] loop4: AHDI p2 [ 551.004976][T13460] loop4: partition table partially beyond EOD, truncated [ 551.061647][ T43] gspca_stv06xx: I2C: Read error writing address: -71 [ 551.072173][ T43] usb 6-1: USB disconnect, device number 60 [ 551.134063][T13466] xt_hashlimit: invalid rate [ 551.267017][T13470] syz_tun: entered allmulticast mode [ 551.314605][T13472] loop2: detected capacity change from 0 to 7 [ 551.328254][T13472] Dev loop2: unable to read RDB block 7 [ 551.333967][T13472] loop2: unable to read partition table [ 551.340362][T13472] loop2: partition table beyond EOD, truncated [ 551.346938][T13469] syz_tun: left allmulticast mode [ 551.348464][T13472] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 551.373590][ T5201] Dev loop2: unable to read RDB block 7 [ 551.380781][ T5201] loop2: unable to read partition table [ 551.386824][ T5201] loop2: partition table beyond EOD, truncated [ 551.455176][T13474] fuse: Bad value for 'fd' [ 551.958321][ T5951] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 552.157772][ T10] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 552.174488][ T5916] usb 2-1: USB disconnect, device number 117 [ 552.187580][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 552.226863][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 552.248677][ T5951] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 552.259606][T13491] loop2: detected capacity change from 0 to 7 [ 552.270820][T13491] Dev loop2: unable to read RDB block 7 [ 552.286650][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.309417][T13491] loop2: unable to read partition table [ 552.521673][ T5951] usb 4-1: Product: syz [ 552.523175][ T10] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 552.525975][ T5951] usb 4-1: Manufacturer: syz [ 552.536097][ T10] usb 6-1: New USB device strings: Mfr=78, Product=2, SerialNumber=3 [ 552.547647][T13491] loop2: partition table beyond EOD, truncated [ 552.554622][ T10] usb 6-1: Product: syz [ 552.567771][T13491] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 552.577320][ T10] usb 6-1: Manufacturer: syz [ 552.583866][ T10] usb 6-1: SerialNumber: syz [ 552.584407][ T5951] usb 4-1: SerialNumber: syz [ 552.611133][ T5951] usb 4-1: config 0 descriptor?? [ 552.626466][ T5951] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 552.635349][T13494] loop4: detected capacity change from 0 to 7 [ 552.649354][ T10] usb 6-1: config 0 descriptor?? [ 552.671091][T13494] Dev loop4: unable to read RDB block 7 [ 552.698149][ T5951] usb 4-1: Detected FT232R [ 552.705919][T13494] loop4: AHDI p2 [ 552.710467][T13494] loop4: partition table partially beyond EOD, truncated [ 552.824495][T13482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.833428][ T5951] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 552.888289][T13482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.925613][T13497] bond0: (slave vlan3): Error -34 calling dev_set_mtu [ 553.162861][ T5951] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 553.181436][ T5951] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 553.399732][T13510] loop2: detected capacity change from 0 to 7 [ 553.429547][ T5852] Dev loop2: unable to read RDB block 7 [ 553.436018][ T5852] loop2: unable to read partition table [ 553.445468][T13511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.478043][T13511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.491881][ T5852] loop2: partition table beyond EOD, truncated [ 553.512308][T13510] Dev loop2: unable to read RDB block 7 [ 553.542158][T13510] loop2: unable to read partition table [ 553.617683][T13510] loop2: partition table beyond EOD, truncated [ 553.625246][T13510] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 554.182694][ T10] usb 6-1: Firmware version (0.0) predates our first public release. [ 554.261643][ T10] usb 6-1: Please update to version 0.2 or newer [ 554.653253][ T10] usb 4-1: USB disconnect, device number 90 [ 554.667092][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 554.679373][ T10] ftdi_sio 4-1:0.0: device disconnected [ 554.749032][T13529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.793898][T13532] netlink: 'syz.3.1962': attribute type 10 has an invalid length. [ 554.817747][T13529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.976306][ T5916] usb 6-1: USB disconnect, device number 61 [ 555.067077][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'. [ 555.096841][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1963'. [ 555.140245][T13543] loop2: detected capacity change from 0 to 7 [ 555.152421][T13543] Dev loop2: unable to read RDB block 7 [ 555.198695][T13543] loop2: unable to read partition table [ 555.247717][T13543] loop2: partition table beyond EOD, truncated [ 555.347512][T13543] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 555.899978][T13556] loop4: detected capacity change from 0 to 7 [ 555.942968][T13556] Dev loop4: unable to read RDB block 7 [ 555.957599][ T43] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 555.960451][T13556] loop4: AHDI p2 [ 555.995543][T13556] loop4: partition table partially beyond EOD, truncated [ 556.119773][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 556.142377][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.203751][ T43] usb 2-1: config 0 descriptor?? [ 556.242252][ T43] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 556.377637][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 556.549427][ T10] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 556.558546][ T10] usb 6-1: config 0 has no interface number 0 [ 556.564676][ T10] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 556.585586][ T10] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 556.616512][ T10] usb 6-1: config 0 interface 255 has no altsetting 0 [ 556.638480][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 556.661470][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.695177][ T10] usb 6-1: config 0 descriptor?? [ 556.715489][ T10] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 556.927836][ T10] usb 6-1: USB disconnect, device number 62 [ 557.330057][ T43] usb 2-1: USB disconnect, device number 118 [ 557.386560][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.415583][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.449496][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.468516][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.478014][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.504547][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.899883][ T9333] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 557.918110][T13603] loop2: detected capacity change from 0 to 7 [ 557.944916][T13603] Dev loop2: unable to read RDB block 7 [ 557.964166][T13603] loop2: unable to read partition table [ 557.981510][T13603] loop2: partition table beyond EOD, truncated [ 557.995621][T13603] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 558.119022][ T9333] usb 4-1: config 0 has no interfaces? [ 558.127275][ T9333] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 558.136752][ T9333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.151689][ T9333] usb 4-1: Product: syz [ 558.155901][ T9333] usb 4-1: Manufacturer: syz [ 558.171570][ T9333] usb 4-1: SerialNumber: syz [ 558.410602][ T9333] usb 4-1: config 0 descriptor?? [ 558.417843][T13609] random: crng reseeded on system resumption [ 558.498602][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 558.498620][ T30] audit: type=1326 audit(1761089588.946:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 558.578309][ T30] audit: type=1326 audit(1761089588.946:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 558.601672][ T30] audit: type=1326 audit(1761089588.946:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 558.627577][ T30] audit: type=1326 audit(1761089588.946:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 558.651895][ T30] audit: type=1326 audit(1761089588.946:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 558.660590][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.707682][ T30] audit: type=1326 audit(1761089588.946:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 558.709035][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.757084][ T30] audit: type=1326 audit(1761089588.946:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 558.790849][ T30] audit: type=1326 audit(1761089588.946:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 558.843515][ T30] audit: type=1326 audit(1761089588.946:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 558.872680][ T9333] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 558.897589][ T30] audit: type=1326 audit(1761089588.946:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13610 comm="syz.0.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa646d8efc9 code=0x7ffc0000 [ 559.049888][ T9333] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.070114][ T9333] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 559.106463][ T9333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 559.135772][ T9333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 559.159338][ T9333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 559.192790][ T9333] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 559.209686][ T9333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 559.227730][ T9333] usb 2-1: Product: syz [ 559.236810][ T9333] usb 2-1: Manufacturer: syz [ 559.253142][ T9333] usb 2-1: SerialNumber: syz [ 559.270143][ T9333] usb 2-1: config 0 descriptor?? [ 559.412682][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.428620][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.452441][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.465326][T13640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.475674][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.480098][T13640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.499890][ T9333] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 559.507065][ T9333] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 559.701222][ T9333] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 559.709156][ T9333] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 559.722326][ T9333] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 560.059555][T13654] loop2: detected capacity change from 0 to 7 [ 560.075184][T13654] Dev loop2: unable to read RDB block 7 [ 560.081686][T13654] loop2: unable to read partition table [ 560.090415][T13654] loop2: partition table beyond EOD, truncated [ 560.107903][T13654] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 560.133262][T13655] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 560.144481][T13655] team0: Port device batadv1 added [ 560.246223][ T9333] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 560.261364][ T5201] Dev loop2: unable to read RDB block 7 [ 560.268759][ T5201] loop2: unable to read partition table [ 560.269243][ T9333] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 560.275150][ T5201] loop2: partition table beyond EOD, truncated [ 560.302358][T13657] hub 9-0:1.0: USB hub found [ 560.318169][T13657] hub 9-0:1.0: 1 port detected [ 560.388088][ T9333] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 560.396962][ T9333] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 560.486316][T13660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1997'. [ 560.534339][ T9333] usb 4-1: USB disconnect, device number 91 [ 561.165547][ T43] usb 2-1: USB disconnect, device number 119 [ 561.351883][T13678] binder_alloc: 13677: pid 13677 spamming oneway? 1 buffers allocated for a total size of 4096 [ 561.518453][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 561.611391][T13685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.765882][T13691] Cannot find add_set index 1 as target [ 562.708414][T13698] loop2: detected capacity change from 0 to 7 [ 562.730637][T13700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2009'. [ 562.742083][T13698] Dev loop2: unable to read RDB block 7 [ 562.768550][T13698] loop2: unable to read partition table [ 562.780888][T13698] loop2: partition table beyond EOD, truncated [ 562.882621][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2007'. [ 562.949425][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.955748][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.992102][T13698] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 563.726835][T13716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.777051][T13716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.836169][T13716] netlink: 'syz.0.2014': attribute type 8 has an invalid length. [ 564.484240][T13728] binder_alloc: 13726: pid 13726 spamming oneway? 1 buffers allocated for a total size of 4096 [ 564.507309][T13705] syz.5.2007 (13705): drop_caches: 2 [ 565.076310][T13736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2020'. [ 565.380773][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.402147][T13748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.415865][T13748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.427817][T13748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.466919][T13748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.467989][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.703136][T13749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.287496][ T5951] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 566.374631][T13763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.388981][T13763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.405186][T13763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.419174][T13763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.447181][T13766] binder_alloc: 13765: pid 13765 spamming oneway? 1 buffers allocated for a total size of 4096 [ 566.461623][ T5951] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 566.470913][ T5951] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 566.479853][ T5951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 566.522192][ T5951] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 566.544127][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 566.560545][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 566.571573][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 566.597210][ T5951] usb 2-1: string descriptor 0 read error: -22 [ 566.603773][ T5951] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 566.624119][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.637654][ T5951] usb 2-1: config 0 descriptor?? [ 566.646836][ T5951] hub 2-1:0.0: bad descriptor, ignoring hub [ 566.654058][ T5951] hub 2-1:0.0: probe with driver hub failed with error -5 [ 566.670538][ T5951] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 566.827643][ T9333] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 566.851087][T13770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2032'. [ 566.999242][ T9333] usb 4-1: Using ep0 maxpacket: 8 [ 567.009697][ T9333] usb 4-1: config 0 has an invalid interface number: 193 but max is 0 [ 567.022164][ T9333] usb 4-1: config 0 has no interface number 0 [ 567.036885][ T9333] usb 4-1: too many endpoints for config 0 interface 193 altsetting 36: 140, using maximum allowed: 30 [ 567.080800][ T9333] usb 4-1: config 0 interface 193 altsetting 36 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 567.116923][ T9333] usb 4-1: config 0 interface 193 has no altsetting 0 [ 567.284212][ T9333] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 567.293857][ T9333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.302641][ T9333] usb 4-1: Product: syz [ 567.310899][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2035'. [ 567.372551][ T9333] usb 4-1: Manufacturer: syz [ 567.372575][ T9333] usb 4-1: SerialNumber: syz [ 567.386189][ T9333] usb 4-1: config 0 descriptor?? [ 567.592951][T13768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.608141][T13768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.740189][T13792] FAULT_INJECTION: forcing a failure. [ 567.740189][T13792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.772658][ T9333] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 567.790870][ T9333] dvb-usb: bulk message failed: -22 (2/0) [ 567.816602][T13792] CPU: 1 UID: 0 PID: 13792 Comm: syz.4.2037 Not tainted syzkaller #0 PREEMPT(full) [ 567.816629][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.816640][T13792] Call Trace: [ 567.816648][T13792] [ 567.816656][T13792] dump_stack_lvl+0x189/0x250 [ 567.816682][T13792] ? __pfx____ratelimit+0x10/0x10 [ 567.816707][T13792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.816725][T13792] ? __pfx__printk+0x10/0x10 [ 567.816745][T13792] ? __might_fault+0xb0/0x130 [ 567.816776][T13792] should_fail_ex+0x414/0x560 [ 567.816800][T13792] _copy_to_iter+0x1de/0x1790 [ 567.816824][T13792] ? do_raw_spin_lock+0x121/0x290 [ 567.816847][T13792] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 567.816877][T13792] ? __pfx__copy_to_iter+0x10/0x10 [ 567.816911][T13792] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.816934][T13792] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.816964][T13792] timerfd_read_iter+0x55a/0x8c0 [ 567.816989][T13792] ? __pfx_timerfd_read_iter+0x10/0x10 [ 567.817014][T13792] ? __pfx_aa_file_perm+0x10/0x10 [ 567.817039][T13792] ? __lock_acquire+0xab9/0xd20 [ 567.817070][T13792] do_iter_readv_writev+0x623/0x8c0 [ 567.817099][T13792] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 567.817122][T13792] ? common_file_perm+0x1b5/0x230 [ 567.817150][T13792] ? bpf_lsm_file_permission+0x9/0x20 [ 567.817174][T13792] ? security_file_permission+0x75/0x290 [ 567.817202][T13792] ? rw_verify_area+0x2a6/0x4d0 [ 567.817230][T13792] vfs_readv+0x253/0x850 [ 567.817260][T13792] ? __pfx_vfs_readv+0x10/0x10 [ 567.817297][T13792] ? __fget_files+0x2a/0x420 [ 567.817322][T13792] ? __fget_files+0x3a0/0x420 [ 567.817340][T13792] ? __fget_files+0x2a/0x420 [ 567.817365][T13792] do_readv+0x14d/0x2d0 [ 567.817388][T13792] ? __pfx_do_readv+0x10/0x10 [ 567.817413][T13792] ? do_syscall_64+0xbe/0xfa0 [ 567.817439][T13792] do_syscall_64+0xfa/0xfa0 [ 567.817470][T13792] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.817492][T13792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.817508][T13792] ? clear_bhb_loop+0x60/0xb0 [ 567.817529][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.817547][T13792] RIP: 0033:0x7f0d65d8efc9 [ 567.817565][T13792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.817581][T13792] RSP: 002b:00007f0d63ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 567.817602][T13792] RAX: ffffffffffffffda RBX: 00007f0d65fe5fa0 RCX: 00007f0d65d8efc9 [ 567.817616][T13792] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 567.817629][T13792] RBP: 00007f0d63ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 567.817641][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.817652][T13792] R13: 00007f0d65fe6038 R14: 00007f0d65fe5fa0 R15: 00007f0d6610fa28 [ 567.817683][T13792] [ 567.826319][ T9333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 569.437655][T13800] geneve3: entered allmulticast mode [ 569.477774][ T9333] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 569.494166][ T9333] usb 4-1: media controller created [ 569.560274][ T9333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.663209][ T10] usb 2-1: USB disconnect, device number 120 [ 569.807895][ T9333] cxusb: set interface failed [ 569.836120][ T9333] dvb-usb: bulk message failed: -22 (1/0) [ 570.110135][ T9333] DVB: Unable to find symbol mt352_attach() [ 570.116097][ T9333] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 570.177618][ T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 570.327559][ T9333] rc_core: IR keymap rc-dvico-portable not found [ 570.345033][ T9333] Registered IR keymap rc-empty [ 570.357947][ T9333] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 570.378948][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 570.390328][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.409720][ T9333] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input42 [ 570.437967][ T10] usb 2-1: config 0 has no interface number 0 [ 570.468774][ T10] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 570.491840][ T9333] dvb-usb: schedule remote query interval to 100 msecs. [ 570.532227][ T9333] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 570.547515][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 570.587568][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 570.626121][ T9333] usb 4-1: USB disconnect, device number 92 [ 570.637812][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.645887][ T10] usb 2-1: Product: syz [ 570.658213][T13823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2044'. [ 570.679881][ T10] usb 2-1: Manufacturer: syz [ 570.684682][ T10] usb 2-1: SerialNumber: syz [ 570.778487][ T10] usb 2-1: config 0 descriptor?? [ 570.878304][ T9333] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 571.029856][ T10] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 571.061688][ T10] cx231xx 2-1:0.1: Failed to read PCB config [ 571.098240][ T10] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 571.172869][ T10] usb 2-1: USB disconnect, device number 121 [ 571.238240][ T5938] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 571.307500][T13836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.320274][T13836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.378530][ T5938] usb 6-1: device descriptor read/64, error -71 [ 571.492370][T13841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 571.516661][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.527570][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 571.528196][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.617469][ T5938] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 571.697452][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 571.705959][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 571.714449][ T10] usb 2-1: can't read configurations, error -22 [ 571.757646][ T5938] usb 6-1: device descriptor read/64, error -71 [ 571.847494][ T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 571.868321][ T5938] usb usb6-port1: attempt power cycle [ 572.007537][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 572.014898][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 572.025123][ T10] usb 2-1: can't read configurations, error -22 [ 572.044275][ T10] usb usb2-port1: attempt power cycle [ 572.218064][ T5938] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 572.276665][ T5938] usb 6-1: device descriptor read/8, error -71 [ 572.397495][ T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 572.439683][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 572.446858][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 572.468315][ T10] usb 2-1: can't read configurations, error -22 [ 572.537858][ T5938] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 572.570685][ T5938] usb 6-1: device descriptor read/8, error -71 [ 572.593502][T13865] loop2: detected capacity change from 0 to 7 [ 572.601753][ T7769] Dev loop2: unable to read RDB block 7 [ 572.607758][ T7769] loop2: unable to read partition table [ 572.613725][ T7769] loop2: partition table beyond EOD, truncated [ 572.618244][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 572.631695][T13865] Dev loop2: unable to read RDB block 7 [ 572.638365][T13865] loop2: unable to read partition table [ 572.668060][T13865] loop2: partition table beyond EOD, truncated [ 572.675605][T13865] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 572.706562][T13867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2054'. [ 572.717327][ T5938] usb usb6-port1: unable to enumerate USB device [ 572.725356][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 572.734445][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 572.743885][ T10] usb 2-1: can't read configurations, error -22 [ 572.758657][ T10] usb usb2-port1: unable to enumerate USB device [ 574.221656][T13889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.258143][T13889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.537497][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 574.708523][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 574.724409][ T10] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 574.733388][ T10] usb 6-1: config 0 has no interface number 0 [ 574.745465][ T10] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.770561][ T10] usb 6-1: config 0 interface 85 has no altsetting 0 [ 574.814421][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 574.831378][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.851827][ T10] usb 6-1: Product: syz [ 574.875064][ T10] usb 6-1: Manufacturer: syz [ 574.884125][ T10] usb 6-1: SerialNumber: syz [ 574.902210][ T10] usb 6-1: config 0 descriptor?? [ 575.346679][ T10] appletouch 6-1:0.85: Geyser mode initialized. [ 575.365345][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input43 [ 576.195673][T13910] loop2: detected capacity change from 0 to 7 [ 576.205896][T13910] Dev loop2: unable to read RDB block 7 [ 576.212210][T13910] loop2: unable to read partition table [ 576.220548][T13910] loop2: partition table beyond EOD, truncated [ 576.228582][T13910] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 576.644680][T13915] loop2: detected capacity change from 0 to 7 [ 576.652382][T13915] Dev loop2: unable to read RDB block 7 [ 576.664207][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 576.664219][ T30] audit: type=1326 audit(1761089607.116:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 576.721485][T13915] loop2: unable to read partition table [ 576.728059][T13915] loop2: partition table beyond EOD, truncated [ 576.750173][T13915] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 576.756172][ T30] audit: type=1326 audit(1761089607.116:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 576.877228][ T30] audit: type=1326 audit(1761089607.116:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 576.917941][ T30] audit: type=1326 audit(1761089607.116:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 576.942232][ T30] audit: type=1326 audit(1761089607.116:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 576.967817][ T30] audit: type=1326 audit(1761089607.116:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 576.968311][T13921] fuse: Bad value for 'fd' [ 576.990562][ T30] audit: type=1326 audit(1761089607.116:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 576.990614][ T30] audit: type=1326 audit(1761089607.146:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 576.990651][ T30] audit: type=1326 audit(1761089607.146:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 576.990690][ T30] audit: type=1326 audit(1761089607.146:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 577.099763][T13923] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 577.120492][T13923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.146786][T13921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2071'. [ 577.157498][T13921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2071'. [ 577.197234][T13888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.203810][T13888] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 577.210612][T13888] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 577.217255][T13888] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 577.272606][ T43] usb 6-1: USB disconnect, device number 67 [ 577.331333][ T43] appletouch 6-1:0.85: input: appletouch disconnected [ 577.519439][T13945] loop2: detected capacity change from 0 to 7 [ 577.527088][T13945] Dev loop2: unable to read RDB block 7 [ 577.533116][T13945] loop2: unable to read partition table [ 577.540245][T13945] loop2: partition table beyond EOD, truncated [ 577.547179][T13945] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 577.801809][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 577.809094][ T43] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 578.017772][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 578.028057][ T43] usb 6-1: config 246 has an invalid interface number: 204 but max is 0 [ 578.036691][ T43] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 578.047202][ T43] usb 6-1: config 246 has no interface number 0 [ 578.053696][ T43] usb 6-1: config 246 interface 204 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 578.227533][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 578.527674][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 579.057671][ T5916] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 579.227512][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 579.249925][ T5151] Bluetooth: hci5: command 0x0405 tx timeout [ 579.256065][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 579.262351][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 579.295043][ T5916] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 579.327928][ T5916] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 579.338817][ T5916] usb 2-1: config 0 has no interface number 0 [ 579.344967][ T5916] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 579.356294][ T5916] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 579.368204][ T5916] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.381345][ T5916] usb 2-1: config 0 interface 52 has no altsetting 0 [ 579.390617][ T5916] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 579.435894][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 579.456061][ T5916] usb 2-1: Product: syz [ 579.470488][ T5916] usb 2-1: SerialNumber: syz [ 579.496119][ T5916] usb 2-1: config 0 descriptor?? [ 579.818178][ T5916] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input44 [ 580.025801][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 580.038533][ T5916] usb 2-1: USB disconnect, device number 126 [ 580.375497][T13987] loop2: detected capacity change from 0 to 7 [ 580.455274][ T7769] Dev loop2: unable to read RDB block 7 [ 580.470893][ T7769] loop2: unable to read partition table [ 580.488840][ T7769] loop2: partition table beyond EOD, truncated [ 580.604827][T13987] Dev loop2: unable to read RDB block 7 [ 580.612287][T13987] loop2: unable to read partition table [ 580.652793][T13987] loop2: partition table beyond EOD, truncated [ 580.674062][ T43] usb 6-1: string descriptor 0 read error: -71 [ 580.701769][T13987] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 580.713187][ T43] usb 6-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b3.50 [ 580.722337][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.750801][ T43] r8152-cfgselector 6-1: Unknown version 0x0000 [ 580.799795][ T43] r8152-cfgselector 6-1: rejected 1 configuration due to insufficient available bus power [ 580.809837][ T43] r8152-cfgselector 6-1: no configuration chosen from 1 choice [ 580.825954][ T43] r8152-cfgselector 6-1: USB disconnect, device number 68 [ 580.830890][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 580.839902][ T5201] Dev loop2: unable to read RDB block 7 [ 580.846493][ T5201] loop2: unable to read partition table [ 580.896386][ T5201] loop2: partition table beyond EOD, truncated [ 580.901870][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 580.920554][ T10] usb 4-1: can't read configurations, error -71 [ 581.146148][T14000] tipc: Enabled bearer , priority 0 [ 581.185976][T14000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.319317][T13999] tipc: Disabling bearer [ 582.917492][ T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 583.071969][ T10] usb 2-1: config 0 has no interfaces? [ 583.112964][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 583.125224][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.137480][ T10] usb 2-1: Product: syz [ 583.175039][ T10] usb 2-1: Manufacturer: syz [ 583.187756][ T10] usb 2-1: SerialNumber: syz [ 583.197686][ T10] usb 2-1: config 0 descriptor?? [ 583.392229][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.432102][T14019] bond0: (slave netdevsim0): Releasing backup interface [ 583.453581][T14019] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.489358][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.562317][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.576051][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.590337][ T5925] usb 2-1: USB disconnect, device number 127 [ 583.603255][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.612150][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.820006][T14041] misc userio: The device must be registered before sending interrupts [ 583.831111][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.853470][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.946034][T14044] loop2: detected capacity change from 0 to 7 [ 583.959437][T14044] Dev loop2: unable to read RDB block 7 [ 583.965185][T14044] loop2: unable to read partition table [ 583.971281][T14044] loop2: partition table beyond EOD, truncated [ 583.978824][T14044] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 584.106962][T14048] loop2: detected capacity change from 0 to 7 [ 584.167673][T14048] Dev loop2: unable to read RDB block 7 [ 584.187552][T14048] loop2: unable to read partition table [ 584.240670][T14048] loop2: partition table beyond EOD, truncated [ 584.267102][T14048] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 584.415433][T14057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.428720][T14057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.487528][ T43] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 584.526173][T14056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.575012][T14059] kernel read not supported for file / 7ĢW)s!Qfsl{Tr)rO2:"T+͟vȍղDvcʼ6xc: (pid: 14059 comm: syz.1.2107) [ 584.646752][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 584.646771][ T30] audit: type=1800 audit(1761089615.086:1919): pid=14059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2107" name=20019C1437B3CF16C4A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6184F9A98F5323A22F412C0542BCD9F76C88DD5B24476638E93C2CABCF436D278E3633A dev="mqueue" ino=52028 res=0 errno=0 [ 584.648758][T14056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.732836][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.783887][ T43] usb 4-1: config 0 has no interfaces? [ 584.809022][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 584.862939][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.901096][ T43] usb 4-1: config 0 descriptor?? [ 585.358554][T14076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.406704][T14076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.769943][T14082] kvm: pic: non byte write [ 586.473713][T14098] syzkaller0: entered promiscuous mode [ 586.480658][T14098] syzkaller0: entered allmulticast mode [ 586.782396][ T5916] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 586.847936][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 586.881693][T14104] program syz.0.2116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.938204][ T5916] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 586.949070][ T5916] usb 6-1: config index 0 descriptor too short (expected 65002, got 72) [ 586.959015][ T5916] usb 6-1: config index 1 descriptor too short (expected 65002, got 72) [ 586.969871][ T5916] usb 6-1: config index 2 descriptor too short (expected 65002, got 72) [ 586.987005][ T5916] usb 6-1: config index 3 descriptor too short (expected 65002, got 72) [ 587.003464][ T5916] usb 6-1: config index 4 descriptor too short (expected 65002, got 72) [ 587.015573][ T5916] usb 6-1: config index 5 descriptor too short (expected 65002, got 72) [ 587.025422][ T5916] usb 6-1: config index 6 descriptor too short (expected 65002, got 72) [ 587.038438][ T5916] usb 6-1: config index 7 descriptor too short (expected 65002, got 72) [ 587.159775][ T5916] usb 6-1: string descriptor 0 read error: -71 [ 587.187072][ T5916] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 587.206956][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.246271][ T5916] usb 6-1: can't set config #1, error -71 [ 587.299160][ T5916] usb 6-1: USB disconnect, device number 69 [ 587.416525][ T5925] usb 4-1: USB disconnect, device number 95 [ 587.433958][T14110] binder_alloc: 14108: pid 14108 spamming oneway? 1 buffers allocated for a total size of 4096 [ 587.578939][T14113] kvm: user requested TSC rate below hardware speed [ 587.599725][T14113] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3596000302 (14384001208 ns) > initial count (4696682236 ns). Using initial count to start timer. [ 587.624298][T14113] kvm: kvm [14111]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 587.697899][T14113] kvm: kvm [14111]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 588.193755][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 588.257312][T14125] netlink: 'syz.5.2122': attribute type 1 has an invalid length. [ 588.298151][T14123] tipc: Enabling of bearer rejected, failed to enable media [ 588.351240][T14125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.431448][T14126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.473798][T14126] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 588.515103][T14126] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 588.579684][T14128] vlan0: entered promiscuous mode [ 588.818578][T14142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.882717][T14142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.177579][ T43] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 589.360423][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 589.381734][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 589.403221][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 589.473903][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 589.482552][T14150] bridge0: port 3(ip6gretap0) entered disabled state [ 589.490999][T14150] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.619986][T14152] binder: BINDER_SET_CONTEXT_MGR already set [ 589.626098][T14152] binder: 14151:14152 ioctl 4018620d 200000000040 returned -16 [ 589.642315][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 589.663729][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.727244][ T43] usb 6-1: config 0 descriptor?? [ 591.500700][T14181] fuse: Bad value for 'group_id' [ 591.515986][T14181] fuse: Bad value for 'group_id' [ 591.881232][ T43] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 591.892288][ T43] hdpvr 6-1:0.0: device init failed [ 591.897737][ T43] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 591.965236][ T43] usb 6-1: USB disconnect, device number 70 [ 592.377900][ T43] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 592.715254][ T43] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 592.744662][ T43] usb 6-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config [ 592.797996][T14202] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 592.880231][ T43] usb 6-1: config 0 has no interface number 0 [ 592.893586][ T43] usb 6-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.915575][ T43] usb 6-1: config 0 interface 113 has no altsetting 0 [ 592.942452][ T43] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 592.951804][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 592.960365][ T43] usb 6-1: Product: syz [ 592.964722][ T43] usb 6-1: Manufacturer: syz [ 593.002264][ T43] usb 6-1: SerialNumber: syz [ 593.016856][ T43] usb 6-1: config 0 descriptor?? [ 593.154328][ T43] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 594.019317][T14212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2145'. [ 594.076141][T14212] binder: 14211:14212 ioctl c018620c 200000000000 returned -22 [ 594.140796][T14214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.161581][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 594.179414][T14214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.273514][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.283083][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.360694][T14215] bond0: (slave bond_slave_1): Releasing backup interface [ 594.614743][T14220] netlink: 'syz.3.2148': attribute type 10 has an invalid length. [ 595.134736][ T5894] usb 6-1: USB disconnect, device number 71 [ 595.858963][T14254] QAT: failed to copy from user. [ 595.981359][T14256] loop2: detected capacity change from 0 to 7 [ 595.991974][ T7769] Dev loop2: unable to read RDB block 7 [ 595.997989][ T7769] loop2: unable to read partition table [ 596.008981][ T7769] loop2: partition table beyond EOD, truncated [ 596.059201][T14256] Dev loop2: unable to read RDB block 7 [ 596.065027][T14256] loop2: unable to read partition table [ 596.106761][T14256] loop2: partition table beyond EOD, truncated [ 596.129692][T14256] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 596.177095][ T5201] Dev loop2: unable to read RDB block 7 [ 596.210326][ T5201] loop2: unable to read partition table [ 596.236432][ T5201] loop2: partition table beyond EOD, truncated [ 596.697140][T14266] geneve3: entered allmulticast mode [ 597.643305][T14289] KVM: debugfs: duplicate directory 14289-3 [ 597.717128][ T10] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 597.965979][ T10] usb 6-1: config 0 has no interfaces? [ 597.988951][ T10] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 598.027494][ T43] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 598.035938][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.051301][ T10] usb 6-1: Product: syz [ 598.055655][ T10] usb 6-1: Manufacturer: syz [ 598.060636][ T10] usb 6-1: SerialNumber: syz [ 598.143277][ T30] audit: type=1326 audit(1761089628.596:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 598.588458][ T10] usb 6-1: config 0 descriptor?? [ 598.623730][ T30] audit: type=1326 audit(1761089628.616:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 598.667204][ T30] audit: type=1326 audit(1761089628.616:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 598.717523][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 598.738639][T14298] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2164'. [ 598.787942][ T43] usb 4-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 598.895186][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.956472][ T30] audit: type=1326 audit(1761089628.616:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 598.987487][ T43] usb 4-1: Product: syz [ 599.014996][ T43] usb 4-1: Manufacturer: syz [ 599.022078][ T43] usb 4-1: SerialNumber: syz [ 599.033772][ T30] audit: type=1326 audit(1761089628.616:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 599.057186][ T43] usb 4-1: config 0 descriptor?? [ 599.076223][ T43] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 599.097834][ T30] audit: type=1326 audit(1761089628.616:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 599.133574][ T30] audit: type=1326 audit(1761089628.626:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 599.166235][ T30] audit: type=1326 audit(1761089628.626:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 599.193161][ T30] audit: type=1326 audit(1761089628.626:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 599.266190][ T30] audit: type=1326 audit(1761089628.626:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14292 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fb9f218efc9 code=0x7ffc0000 [ 599.712385][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.750580][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.821213][ T43] usb 4-1: USB disconnect, device number 96 [ 600.437752][ T43] usb 6-1: USB disconnect, device number 72 [ 600.451715][T14332] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2172'. [ 600.477734][ T8300] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 600.507513][ T8300] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 600.528669][ T8300] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 600.572251][ T8300] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 600.615977][T14336] loop2: detected capacity change from 0 to 7 [ 600.624897][ T7769] Dev loop2: unable to read RDB block 7 [ 600.631503][ T7769] loop2: unable to read partition table [ 600.637944][ T7769] loop2: partition table beyond EOD, truncated [ 600.647037][T14336] Dev loop2: unable to read RDB block 7 [ 600.657098][T14336] loop2: unable to read partition table [ 600.695557][T14336] loop2: partition table beyond EOD, truncated [ 600.732611][T14336] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 602.399477][T14372] fuse: Bad value for 'fd' [ 602.876926][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.993348][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.129145][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2187'. [ 603.627465][ T5916] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 603.782890][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.793413][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.805509][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.814779][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.823379][ T5916] usb 4-1: Product: syz [ 603.827750][ T5916] usb 4-1: Manufacturer: syz [ 603.832449][ T5916] usb 4-1: SerialNumber: syz [ 603.957505][ T5894] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 604.096568][ T5916] usb 4-1: 0:2 : does not exist [ 604.109422][ T5916] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 604.136412][ T5894] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 604.153810][ T5894] usb 2-1: config 0 has no interface number 0 [ 604.162689][ T5894] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 604.226489][ T5894] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 604.246262][ T5916] usb 4-1: USB disconnect, device number 97 [ 604.255418][T14411] fuse: Bad value for 'fd' [ 604.350120][ T5894] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 604.396435][ T5894] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 604.432354][ T5894] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 604.470748][ T7769] udevd[7769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 604.496642][ T5894] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 604.538581][ T5894] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 604.581792][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.625813][ T5894] usb 2-1: config 0 descriptor?? [ 604.691776][T14402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 604.699409][T14402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 604.717928][ T5894] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 604.763463][T14425] netlink: 'syz.3.2196': attribute type 10 has an invalid length. [ 605.044598][T14425] veth0_macvtap (unregistering): left allmulticast mode [ 605.126078][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 605.126090][ T30] audit: type=1326 audit(1761089635.576:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 605.174601][ T5916] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 605.183408][ T30] audit: type=1326 audit(1761089635.616:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 605.208673][ T30] audit: type=1326 audit(1761089635.616:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 605.233882][ T9333] usb 2-1: USB disconnect, device number 3 [ 605.246713][ T9333] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 605.256001][ T30] audit: type=1326 audit(1761089635.616:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 605.281515][ T30] audit: type=1326 audit(1761089635.616:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb8f98d810 code=0x7ffc0000 [ 605.305596][ T30] audit: type=1326 audit(1761089635.616:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 605.334963][ T30] audit: type=1326 audit(1761089635.616:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 605.362060][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.373867][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.383251][ T30] audit: type=1326 audit(1761089635.616:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 605.408088][ T5916] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 605.417966][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 605.425961][ T5916] usb 4-1: SerialNumber: syz [ 605.435735][ T30] audit: type=1326 audit(1761089635.616:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 605.462078][ T30] audit: type=1326 audit(1761089635.616:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 605.484563][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.685213][ T5916] usb 4-1: 0:2 : does not exist [ 605.706549][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2201'. [ 605.800952][ T5916] usb 4-1: USB disconnect, device number 98 [ 605.851666][T14443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.885579][T14443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.003585][T14441] loop2: detected capacity change from 0 to 7 [ 606.050428][ T7769] Dev loop2: unable to read RDB block 7 [ 606.056198][ T7769] loop2: unable to read partition table [ 606.066267][ T7769] loop2: partition table beyond EOD, truncated [ 606.084531][T14441] Dev loop2: unable to read RDB block 7 [ 606.091086][T14441] loop2: unable to read partition table [ 606.098614][T14441] loop2: partition table beyond EOD, truncated [ 606.124006][T14441] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 606.237557][ T9333] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 606.291484][T14448] fuse: Bad value for 'fd' [ 606.399664][ T9333] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 606.450109][ T9333] usb 2-1: config 0 has no interface number 0 [ 606.508174][ T9333] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 606.517268][ T9333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.545375][ T9333] usb 2-1: Product: syz [ 606.557586][ T9333] usb 2-1: Manufacturer: syz [ 606.567421][ T9333] usb 2-1: SerialNumber: syz [ 606.599031][ T9333] usb 2-1: config 0 descriptor?? [ 606.869023][T14462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.904881][T14462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.051651][T14466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.064865][T14466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.605618][T14479] program syz.3.2213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.817175][ T9333] asix 2-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 607.843529][ T9333] asix 2-1:0.239: probe with driver asix failed with error -71 [ 607.889753][ T9333] usb 2-1: USB disconnect, device number 4 [ 607.953882][T14489] FAULT_INJECTION: forcing a failure. [ 607.953882][T14489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.970251][T14489] CPU: 0 UID: 0 PID: 14489 Comm: syz.5.2215 Not tainted syzkaller #0 PREEMPT(full) [ 607.970277][T14489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 607.970289][T14489] Call Trace: [ 607.970297][T14489] [ 607.970306][T14489] dump_stack_lvl+0x189/0x250 [ 607.970340][T14489] ? __pfx____ratelimit+0x10/0x10 [ 607.970370][T14489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.970411][T14489] ? __pfx__printk+0x10/0x10 [ 607.970435][T14489] ? __might_fault+0xb0/0x130 [ 607.970465][T14489] should_fail_ex+0x414/0x560 [ 607.970494][T14489] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 607.970521][T14489] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 607.970548][T14489] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 607.970568][T14489] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 607.970594][T14489] ? read_tsc+0x9/0x20 [ 607.970613][T14489] ? ktime_get+0x1d2/0x200 [ 607.970634][T14489] ? __lock_acquire+0xab9/0xd20 [ 607.970663][T14489] ? fpu__alloc_mathframe+0xad/0x130 [ 607.970687][T14489] get_sigframe+0x58d/0x7d0 [ 607.970712][T14489] ? __pfx_get_sigframe+0x10/0x10 [ 607.970734][T14489] ? irqentry_exit+0x74/0x90 [ 607.970765][T14489] x64_setup_rt_frame+0x15b/0xd40 [ 607.970793][T14489] ? _raw_spin_unlock_irq+0x29/0x50 [ 607.970817][T14489] ? _raw_spin_unlock_irq+0x2e/0x50 [ 607.970837][T14489] ? get_signal+0x1150/0x1340 [ 607.970868][T14489] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 607.970893][T14489] ? arch_do_signal_or_restart+0x385/0x790 [ 607.970918][T14489] arch_do_signal_or_restart+0x3f1/0x790 [ 607.970951][T14489] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 607.970973][T14489] ? __fget_files+0x2a/0x420 [ 607.971009][T14489] ? exit_to_user_mode_loop+0x40/0x130 [ 607.971034][T14489] exit_to_user_mode_loop+0x72/0x130 [ 607.971057][T14489] do_syscall_64+0x2bd/0xfa0 [ 607.971079][T14489] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.971102][T14489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.971121][T14489] ? clear_bhb_loop+0x60/0xb0 [ 607.971143][T14489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.971161][T14489] RIP: 0033:0x7fdb8f98ebcb [ 607.971178][T14489] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 607.971194][T14489] RSP: 002b:00007fdb90826490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.971214][T14489] RAX: fffffffffffffff7 RBX: 00007fdb90826be0 RCX: 00007fdb8f98ebcb [ 607.971228][T14489] RDX: 00007fdb90826be0 RSI: 000000004020ae46 RDI: 00000000ffffffff [ 607.971242][T14489] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000000000043 [ 607.971254][T14489] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000000000a [ 607.971267][T14489] R13: 0000200000ff2000 R14: 0000200000fe8000 R15: 00000000fec00000 [ 607.971299][T14489] [ 608.275932][T14499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.285403][T14499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.415535][ T5916] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 609.509836][T14511] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 609.639022][ T5916] usb 2-1: descriptor type invalid, skip [ 609.644836][ T5916] usb 2-1: descriptor type invalid, skip [ 609.655269][T14511] bond4 (unregistering): Released all slaves [ 609.712724][ T5916] usb 2-1: not running at top speed; connect to a high speed hub [ 609.744150][ T5916] usb 2-1: config 1 interface 0 has no altsetting 0 [ 609.841914][ T5916] usb 2-1: language id specifier not provided by device, defaulting to English [ 609.853911][ T5916] usb 2-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40 [ 609.863464][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.893994][ T5916] usb 2-1: Product: Г [ 609.939549][ T5916] usb 2-1: Manufacturer: 䖩瓾챏偿쑝뵝䂌얆嘈㢾숥텂黉⇲Ლ괰뚄쳳ꖟꅆᄈё拮씕놸傇幔엹⛃㋝ꗲ련獉䖒꣮䆃ɫஓǏ꽳怐䃨뤉窷摎ʧἂ͘䬊 [ 610.005736][T14517] netlink: 'syz.4.2225': attribute type 1 has an invalid length. [ 610.024236][T14517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2225'. [ 610.031408][ T5916] usb 2-1: SerialNumber: 榔ↈᝨ깐홼遶轺땀뫢芒ഃ漣ዺ鉠竫톏⪻ꊔ뛜ﶿ᩼䵴ﹳ뚷ﲑ䐜희䛘䉸뜝빢泌廙嗂볶툠켜춱୻㶔ￏଭꂩꖍ￿￿￿燨燣㰭穟붓椲帨䌀∂ᵋ㓪勋浦롂 [ 610.073850][T14517] netlink: 'syz.4.2225': attribute type 1 has an invalid length. [ 610.384351][ T5916] usbhid 2-1:1.0: can't add hid device: -71 [ 610.401857][ T5916] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 610.468027][ T5916] usb 2-1: USB disconnect, device number 5 [ 610.857030][T14540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.866495][T14540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.922447][T14547] input: syz1 as /devices/virtual/input/input45 [ 610.964705][T14549] FAULT_INJECTION: forcing a failure. [ 610.964705][T14549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.980463][T14549] CPU: 0 UID: 0 PID: 14549 Comm: syz.1.2234 Not tainted syzkaller #0 PREEMPT(full) [ 610.980491][T14549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 610.980502][T14549] Call Trace: [ 610.980511][T14549] [ 610.980520][T14549] dump_stack_lvl+0x189/0x250 [ 610.980547][T14549] ? __pfx____ratelimit+0x10/0x10 [ 610.980572][T14549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.980592][T14549] ? __pfx__printk+0x10/0x10 [ 610.980611][T14549] ? __might_fault+0xb0/0x130 [ 610.980642][T14549] should_fail_ex+0x414/0x560 [ 610.980674][T14549] _copy_from_user+0x2d/0xb0 [ 610.980701][T14549] __ia32_sys_rt_sigreturn+0x314/0x860 [ 610.980734][T14549] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 610.980754][T14549] ? _raw_spin_unlock_irq+0x2e/0x50 [ 610.980810][T14549] ? do_syscall_64+0xbe/0xfa0 [ 610.980837][T14549] do_syscall_64+0xfa/0xfa0 [ 610.980860][T14549] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.980885][T14549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.980903][T14549] ? clear_bhb_loop+0x60/0xb0 [ 610.980924][T14549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.980942][T14549] RIP: 0033:0x7fb9f212b099 [ 610.980959][T14549] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 610.980975][T14549] RSP: 002b:00007fb9f3065a80 EFLAGS: 00000293 ORIG_RAX: 000000000000000f [ 610.980995][T14549] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fb9f212b099 [ 610.981008][T14549] RDX: 00007fb9f3065a80 RSI: 00007fb9f3065bb0 RDI: 0000000000000011 [ 610.981022][T14549] RBP: 00007fb9f3066090 R08: 0000000000000000 R09: 00007fb9f3065df7 [ 610.981034][T14549] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 610.981045][T14549] R13: 00007fb9f23e6038 R14: 00007fb9f23e5fa0 R15: 00007fb9f250fa28 [ 610.981076][T14549] [ 611.201551][T14541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.210514][T14541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.297596][ T5925] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 611.464034][T14559] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 611.494582][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.503937][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.929366][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 612.111596][ T5894] usb 2-1: config 9 has an invalid interface number: 32 but max is 0 [ 612.180769][ T5894] usb 2-1: config 9 has no interface number 0 [ 612.326365][ T5894] usb 2-1: config 9 interface 32 has no altsetting 0 [ 612.341824][ T5894] usb 2-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 612.352333][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.370107][ T5894] usb 2-1: Product: syz [ 612.385681][ T5894] usb 2-1: Manufacturer: syz [ 612.610224][ T5894] usb 2-1: SerialNumber: syz [ 612.634470][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 612.739903][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 612.739921][ T30] audit: type=1326 audit(1761089643.196:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.4.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d65d8efc9 code=0x7ffc0000 [ 612.838277][ T30] audit: type=1326 audit(1761089643.196:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.4.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d65d8efc9 code=0x7ffc0000 [ 612.908087][ T30] audit: type=1326 audit(1761089643.196:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.4.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d65d8efc9 code=0x7ffc0000 [ 612.992186][ T30] audit: type=1326 audit(1761089643.196:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.4.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d65d8efc9 code=0x7ffc0000 [ 613.015758][ T30] audit: type=1326 audit(1761089643.196:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.4.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d65d8efc9 code=0x7ffc0000 [ 613.092219][ T30] audit: type=1326 audit(1761089643.196:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.4.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d65d8efc9 code=0x7ffc0000 [ 613.236671][ T30] audit: type=1326 audit(1761089643.686:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.5.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 613.383809][ T30] audit: type=1326 audit(1761089643.686:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.5.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 613.467551][ T30] audit: type=1326 audit(1761089643.686:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.5.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 613.507280][ T30] audit: type=1326 audit(1761089643.726:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.5.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8f98efc9 code=0x7ffc0000 [ 613.879909][T14600] netlink: 'syz.5.2247': attribute type 1 has an invalid length. [ 614.117869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.247521][ T43] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 614.366535][T14609] loop2: detected capacity change from 0 to 7 [ 614.393979][T14609] Dev loop2: unable to read RDB block 7 [ 614.400330][ T43] usb 6-1: device descriptor read/64, error -71 [ 614.416322][T14609] loop2: unable to read partition table [ 614.427928][T14609] loop2: partition table beyond EOD, truncated [ 614.437515][T14609] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 614.514467][ T5894] usbhid 2-1:9.32: couldn't find an input interrupt endpoint [ 614.579257][ T5894] usb 2-1: USB disconnect, device number 6 [ 614.647821][ T43] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 614.797508][ T43] usb 6-1: device descriptor read/64, error -71 [ 614.921486][ T43] usb usb6-port1: attempt power cycle [ 615.267480][ T43] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 615.342512][ T43] usb 6-1: device descriptor read/8, error -71 [ 615.425165][T14626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.547783][T14626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.561030][T14626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.573873][T14626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.765051][ T43] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 615.785167][T14626] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2253'. [ 615.794908][T14626] ..0: renamed from hsr0 [ 615.800558][ T43] usb 6-1: device descriptor read/8, error -71 [ 615.813048][T14626] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 615.876991][T14626] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.919208][ T43] usb usb6-port1: unable to enumerate USB device [ 615.928794][T14626] ..0: entered allmulticast mode [ 615.933876][T14626] hsr_slave_0: entered allmulticast mode [ 615.964016][T14626] hsr_slave_1: entered allmulticast mode [ 615.973694][T14626] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check. [ 615.992949][T14629] lo: Caught tx_queue_len zero misconfig [ 616.688126][T14640] vlan2: entered promiscuous mode [ 616.693244][T14640] bond0: entered promiscuous mode [ 616.700924][T14640] bond_slave_0: entered promiscuous mode [ 616.706773][T14640] bond_slave_1: entered promiscuous mode [ 616.714061][T14640] batadv0: entered promiscuous mode [ 616.720054][T14640] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 616.728004][T14640] dummy0: entered promiscuous mode [ 616.768813][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.777784][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.844325][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.854081][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.054826][T14647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2260'. [ 617.127117][T14650] netlink: 'syz.5.2261': attribute type 2 has an invalid length. [ 617.141661][T14653] netlink: 'syz.5.2261': attribute type 2 has an invalid length. [ 617.323502][T14664] loop2: detected capacity change from 0 to 7 [ 617.333362][ T7769] Dev loop2: unable to read RDB block 7 [ 617.339327][ T7769] loop2: unable to read partition table [ 617.345509][ T7769] loop2: partition table beyond EOD, truncated [ 617.358480][T14664] Dev loop2: unable to read RDB block 7 [ 617.364392][T14664] loop2: unable to read partition table [ 617.376007][T14664] loop2: partition table beyond EOD, truncated [ 617.384156][T14664] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 617.487579][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 617.507640][ T5916] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 617.647671][ T5916] usb 6-1: device descriptor read/64, error -71 [ 617.658426][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 617.667887][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.690485][ T10] usb 2-1: config 0 descriptor?? [ 617.720262][ T10] cp210x 2-1:0.0: cp210x converter detected [ 618.098408][ T5916] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 618.237526][ T5916] usb 6-1: device descriptor read/64, error -71 [ 618.552969][ T5916] usb usb6-port1: attempt power cycle [ 618.562013][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 619.039133][ T5916] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 619.074371][ T5916] usb 6-1: device descriptor read/8, error -71 [ 619.176288][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 619.317543][ T5916] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 619.355571][ T5916] usb 6-1: device descriptor read/8, error -71 [ 619.400644][T14695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.410378][T14695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.421910][T14695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.432913][T14695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.446873][ T43] usb 2-1: USB disconnect, device number 7 [ 619.455688][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 619.477891][ T5916] usb usb6-port1: unable to enumerate USB device [ 619.498593][ T43] cp210x 2-1:0.0: device disconnected [ 619.922597][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.020811][T14708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.044735][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.147924][T14708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.563640][T14750] sctp: [Deprecated]: syz.3.2282 (pid 14750) Use of int in maxseg socket option. [ 622.563640][T14750] Use struct sctp_assoc_value instead [ 622.851018][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 623.667052][T14779] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 623.677174][T14779] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 623.707867][T14779] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 624.099252][T14785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.108354][T14785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.223853][T14786] [ 624.226226][T14786] ============================================ [ 624.232360][T14786] WARNING: possible recursive locking detected [ 624.238675][T14786] syzkaller #0 Not tainted [ 624.243081][T14786] -------------------------------------------- [ 624.249299][T14786] syz.0.2291/14786 is trying to acquire lock: [ 624.255454][T14786] ffff888057a48d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 624.266494][T14786] [ 624.266494][T14786] but task is already holding lock: [ 624.273944][T14786] ffff888057a48d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 624.283856][T14786] and the lock comparison function returns 0: [ 624.290513][T14786] [ 624.290513][T14786] other info that might help us debug this: [ 624.298904][T14786] Possible unsafe locking scenario: [ 624.298904][T14786] [ 624.306425][T14786] CPU0 [ 624.310054][T14786] ---- [ 624.313314][T14786] lock(&dev_instance_lock_key#20); [ 624.318945][T14786] lock(&dev_instance_lock_key#20); [ 624.324263][T14786] [ 624.324263][T14786] *** DEADLOCK *** [ 624.324263][T14786] [ 624.332749][T14786] May be due to missing lock nesting notation [ 624.332749][T14786] [ 624.341278][T14786] 2 locks held by syz.0.2291/14786: [ 624.346466][T14786] #0: ffffffff8f4df388 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 624.355921][T14786] #1: ffff888057a48d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 624.366372][T14786] [ 624.366372][T14786] stack backtrace: [ 624.371081][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.372360][T14786] CPU: 0 UID: 0 PID: 14786 Comm: syz.0.2291 Not tainted syzkaller #0 PREEMPT(full) [ 624.372382][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 624.372394][T14786] Call Trace: [ 624.372407][T14786] [ 624.372417][T14786] dump_stack_lvl+0x189/0x250 [ 624.372444][T14786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.372463][T14786] ? __pfx__printk+0x10/0x10 [ 624.372483][T14786] ? print_lock_name+0xde/0x100 [ 624.372507][T14786] print_deadlock_bug+0x28b/0x2a0 [ 624.372536][T14786] validate_chain+0x1a3f/0x2140 [ 624.372572][T14786] __lock_acquire+0xab9/0xd20 [ 624.372597][T14786] ? __netdev_update_features+0xcb1/0x1be0 [ 624.372618][T14786] lock_acquire+0x120/0x360 [ 624.372639][T14786] ? __netdev_update_features+0xcb1/0x1be0 [ 624.372665][T14786] __mutex_lock+0x187/0x1350 [ 624.372690][T14786] ? __netdev_update_features+0xcb1/0x1be0 [ 624.372711][T14786] ? stack_trace_save+0x9c/0xe0 [ 624.372729][T14786] ? __pfx_stack_trace_save+0x10/0x10 [ 624.372747][T14786] ? stack_depot_save_flags+0x40/0x860 [ 624.372766][T14786] ? __netdev_update_features+0xcb1/0x1be0 [ 624.372787][T14786] ? __pfx___mutex_lock+0x10/0x10 [ 624.372811][T14786] ? bond_fix_features+0x191/0x1d0 [ 624.372841][T14786] __netdev_update_features+0xcb1/0x1be0 [ 624.372868][T14786] ? __pfx___netdev_update_features+0x10/0x10 [ 624.372890][T14786] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 624.372912][T14786] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.372937][T14786] ? cfg80211_netdev_notifier_call+0x1e5/0x1440 [ 624.372957][T14786] ? __wake_up_common_lock+0x190/0x1f0 [ 624.372976][T14786] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 624.372993][T14786] ? consume_skb+0xce/0xf0 [ 624.373011][T14786] ? netlink_broadcast_filtered+0xf55/0x1000 [ 624.373040][T14786] netdev_change_features+0x72/0xd0 [ 624.373061][T14786] ? __pfx_netdev_change_features+0x10/0x10 [ 624.373084][T14786] ? netif_set_tso_max_size+0x10e/0x1d0 [ 624.373104][T14786] bond_compute_features+0x615/0x680 [ 624.373126][T14786] ? __pfx_bond_compute_features+0x10/0x10 [ 624.373147][T14786] bond_netdev_event+0x72e/0xe80 [ 624.373171][T14786] ? __pfx_bond_netdev_event+0x10/0x10 [ 624.373193][T14786] ? inetdev_event+0x464/0x15b0 [ 624.373220][T14786] ? igmp_netdev_event+0x7c/0x770 [ 624.373246][T14786] notifier_call_chain+0x1b6/0x3e0 [ 624.373274][T14786] netdev_features_change+0x85/0xc0 [ 624.373300][T14786] ? __pfx_netdev_features_change+0x10/0x10 [ 624.373324][T14786] ? security_capable+0x7e/0x2e0 [ 624.373345][T14786] dev_ethtool+0x1541/0x19c0 [ 624.373371][T14786] ? __pfx_dev_ethtool+0x10/0x10 [ 624.373397][T14786] ? dev_load+0x21/0x1f0 [ 624.373420][T14786] dev_ioctl+0x392/0x1150 [ 624.373438][T14786] sock_do_ioctl+0x22c/0x300 [ 624.373463][T14786] ? __pfx_sock_do_ioctl+0x10/0x10 [ 624.373491][T14786] sock_ioctl+0x576/0x790 [ 624.373515][T14786] ? __pfx_sock_ioctl+0x10/0x10 [ 624.373538][T14786] ? __fget_files+0x3a0/0x420 [ 624.373559][T14786] ? __fget_files+0x2a/0x420 [ 624.373581][T14786] ? bpf_lsm_file_ioctl+0x9/0x20 [ 624.373606][T14786] ? __pfx_sock_ioctl+0x10/0x10 [ 624.373627][T14786] __se_sys_ioctl+0xfc/0x170 [ 624.373645][T14786] do_syscall_64+0xfa/0xfa0 [ 624.373668][T14786] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.373690][T14786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.373708][T14786] ? clear_bhb_loop+0x60/0xb0 [ 624.373727][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.373745][T14786] RIP: 0033:0x7fa646d8efc9 [ 624.373762][T14786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.373778][T14786] RSP: 002b:00007fa647b5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.373798][T14786] RAX: ffffffffffffffda RBX: 00007fa646fe6090 RCX: 00007fa646d8efc9 [ 624.373813][T14786] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 624.373826][T14786] RBP: 00007fa646e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 624.373838][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.373850][T14786] R13: 00007fa646fe6128 R14: 00007fa646fe6090 R15: 00007fa64710fa28 [ 624.373871][T14786] [ 624.847577][ T1302] ieee802154 phy1 wpan1: encryption failed: -22