last executing test programs: 6m43.269785743s ago: executing program 0 (id=4931): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103200003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0xfee0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, '\t\t'}, @main=@item_012={0x2, 0x0, 0xc, "b608"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) r4 = semget(0x2, 0x4, 0x200) semop(r4, &(0x7f0000000340)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8005}, {0x2, 0x1009, 0x1000}, {0x0, 0x1008, 0x1000}], 0x4) (async) ioprio_get$uid(0x3, 0xee01) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x304, 0xa, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002e000900a7bd70000000000008000000e1ff008bc3fa9cc92814ba06008e43505af07f6bf271240cdc13198e7af9da1bbce5dfcb025ed74cbf0bea40"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 6m42.357244717s ago: executing program 0 (id=4938): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_pts(r0, 0x8000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x40, @tick, {0x40, 0xff}, {0x12, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5f6, {0x3}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r2, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0xc, 0xff9, &(0x7f0000001840)=""/4089, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000001c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffffd}) socket(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0x639) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x1e9a21, 0x20) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x1, 0x8, 0x0, 0x4}) 6m41.107716481s ago: executing program 0 (id=4944): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/4105, 0x1009}], 0x1, 0x6, 0xc052) 6m39.175768219s ago: executing program 0 (id=4954): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x181820, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, '\x00', "fe4f47bafbb67ae68dc462427bd5a94a", "a4dd10c8", "96499e2301e9d879"}, 0x28) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000380)="eb", 0x1}], 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000440)=0x4000000, 0x4) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x6, 0x3) recvfrom(r9, &(0x7f0000000140)=""/34, 0x22, 0x100, &(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @remote, 0x8}}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffeffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xffff, 0x2, 0x800}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r12 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r12, &(0x7f0000001600)=""/4081, 0x7, 0x12) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x1070bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, r11, {0xf000, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc00}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc8804) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000200025a729bd7000fddbdf250a001055ff00000102000100080006000000000014000200ff0100000000003dcf000100000000011400110076657c68305f746f5f68737200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4045}, 0x4000000) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000001c0)) 6m38.776943604s ago: executing program 0 (id=4957): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000514000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x500}], 0x2}, 0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@deltclass={0x3c, 0x29, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xa}, {0xffeb, 0xf}, {0xd, 0x8}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="cbde5714f157776cdb86fbdacbebf5f13979c8afc768d4795d65b02c329cacca561592241c00b1d2db400a", 0x2b}, {&(0x7f0000000440)="cfe44daf0372a368076a110448751528ca218fcfc2348c1456ad932d5aee27633f23e5dc76721b28fdecc08d5441349422ffbbc95d51c2849dfd87e1a929545481fe5963350b63eb9d9787049cb7ce05ee", 0x51}], 0x2, &(0x7f0000000680)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x89, 0xb, "42abdf77432c5e99f5"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x60}}, {{&(0x7f0000000700)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000740)="50df6a326ff56b1a212dcd04781ba54dd5b49625a48d9f99e8e2d84cf4c9175cc86e395000d7e59686f88c19eb460dde9e54b90ebd35e11d1ba520a664e9adcf322f4f41b36bf2f7239e6e1636a05e5d9fad4945fd57939107bb99b1e35751d4ae87feed6348a0033e5b48324d61ed9cef934906a9d72d8d71ce16e36f5e30c85f9e9677589514487ba75ab5c2363e928ef602977e6f1b3f2665e42f86c69a8136b87bd8c01988ef8e4ce8", 0xab}, {&(0x7f0000000800)="e2a7a868e7bbc3047593212eebb2a8321c17280e6092cb182092cbdf4c3e2417daf12fa7be7f557c66038e92a252eea3a8d7b28084a0f5cffb4b9880f0e17646407c9aa94854b88b51a809e62d2f58713641c82bf9bf9edc24e0907c7ff46635256b1836baeb07c3fe09f6eca5d2b7f4077414a5e36bccfb1b8ab6c4c7a68fabc23d", 0x82}, {&(0x7f00000008c0)="268a59c90511ee132c08ffaf8aebda6ed32444c58979139b4de3da10e8193d037ee945060aba8ab9b8cb4d1e8f223711d52b8815de4b245843e5d7b22c5ced4ada7f104165775c5a0a39223b8875fc5ee246d5a30ce585c06e5adb3ab6c4396a816d49ce8e102a6fc2893b94a343bb289f4348c531d24a82e5e158a2db8bd9f9cca7a56637f201ef51ce8593e6ef1d7d1086e594445556baff0955c649721736c3d1effefc093dfa743c10d8674671db53a255382f61e0", 0xb7}, {&(0x7f00000014c0)="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", 0x1000}], 0x4}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000a00)="77a279a5cb3552eee2bae867a7058aea8a32ec26d879813c394a302b08d836ecb2ca5ef2c5b761e9afbe1e4c3533bb3fd885625f231e702f19486c8d03cf736de9d3c58c0badba48e1d334a4693e719c9195810b8046e2d9851daaf3bda28bb924db1cd366f0d9309cf42a64fcf50e91f3dfd3c1130a1f1b9068ac7d050e9b4a48e88ed811121876c2882a64ee36b93b4898451a1a75cd6d5bc056ccd680703b77f50efc04f072cf", 0xa8}, {&(0x7f0000000ac0)="236ba2b7aaf28c4215b8214841341604b94e92f2f154648f5bb304f4fbc4c59e9b97b0e679e76e9f77ee3e6ee3af9bac8000918eb8f9775c4dfcfd713019453b4190b599118cd524323d10351f054ae909f74ee379a10ef71b47391cb74fdc15cb3cc4d3cc7d8c97aec4b018c4931442464d5b8f5b81f3e33eaa091532b026a1d2328faf5107f214ab85617ef972f78c83983e464706a746bd060059bb5df2c408db704d6965dcee87ad4a603aada479b9de867fc766d349dba93d7a9d71597664a18f20ab2885bc54dfa0feae555419b819439c1c75de", 0xd7}, {&(0x7f0000000bc0)="154f6ac12d1e9a31538034061b15de4ced2ae641f9e080fb8894625057b7d5aa73aeb91d10c81848c9", 0x29}, {&(0x7f0000000c00)="c45590a8163b61006e43a876e50396354b5211078ecf3b764609d04094658710a24d909ed809d8bd7977674559e46f17d4805df81eb6eaec110d3abf720264f5c4b0809ffccf99321a93a006af4fb893", 0x50}, {&(0x7f0000000c80)="2cc35bb3b66d4e91e578ec90e6626719170a4e1dd245371de4d15807f7e62401cb39255b755d7c995d3c815ad55cb389b6f1a45ee5681a352d8743b81f52b74c2ec72597b77d239748e1afde9dd5560e6cb483cdcf51c50014b219c40cdf82b9bc003943f5960c20bf697009fa53f922552b79b4e7a2857e3dd77cd2768677820c4089ad6c74a14eecd58275a1d73eef30994469b22dba226aa4c06a07cca8218b06360bba769d4abf6c2426f8d163381b8d4c34d6c70485bbd382b1346d98bc808246d7562bd2409d8476f776090d661b27aa60a323c30fdedbdfae6f9f7b5ea2b74fcc60e7dd659dff", 0xea}, {&(0x7f0000000d80)="5def9bd3c68c11aa", 0x8}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000000dc0)="8248c030eefed4e5cefb12b424ae3fb11141d9a4f850a91351f3a383bc91476f63f2971af48c752b6be1cc1f1da64622c920da7508cf93254ed9c53d30b6a1eccacd68c5538c01de57b0ecbc54c8a24c3071a890a7b2c50746f4be420607", 0x5e}, {&(0x7f0000000e40)="d0627b8fcd75861edd18a5140877e04b30364589c6455dda4373cff878a26803568d640250ed96c2bf1b294aec2d1a952216f6b2e6c7a32c0b87895ca7498b2d1d1b1cced33f6621011ccd5074d0f3c1ec5220eb61dd5500055602c569c958a8ba1c399155fe9872a546dc65242e0aa7310a8c36009a908860c0792302365957c4f34b811660b54d65925555432fa3db", 0x90}], 0x9}}, {{&(0x7f0000000fc0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001000)="ea7f8b342fdf163609f0364cec6cfc686ceffd9768f6ef8b015ba2f875bad38021ed010af605bca9eda6ee796884b9f140c899946ba721139f674258b88550aa293727d9653fee6aaacaa6b2f4983e8918187c5ada8d052bf5bcf02690d726e59aa00d810615f0fcc30535b2dd5edf5691d63a48fc26a23aec2810d59ef81d3a6d9b168d40525ee1c499c2ad635446a625d17fa8f01ffd083b3d903e14a98debeebfee", 0xa3}, {&(0x7f00000010c0)="a0ab9a69caec23", 0x7}, {&(0x7f0000001100)="30d82b3e0a427ca8ce247df2b4376a74cdc0204a51690d0874205cb6925f7af4c622ef58784cb8245a9a01e0b0b0badcf7ac0d6121920cb9f2fd62e622ec9a3d148eb86122c1e07cdef92e1819a53152991cbefce61e86e42f409de2059c017d827ef915d0fe", 0x66}, {&(0x7f0000001180)="f6a893045f78bb235a6a5ddc7ca70c8a06125ec5b16daa60d052978de11558ae1f525d8893356d95e3a5a968a8c8476f09fdecedc235d197623d66c27c9d70b26afb95b0c97d0c842acda009193e176d", 0x50}], 0x4, &(0x7f0000001240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}, {{&(0x7f0000001280)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000037c0)=[{&(0x7f00000012c0)="4b385ef558ee43496b5ac79e18a5311d6c1333d84643e13f28ae2c5e153a65329d57118dd371936b2d7ae3ce37f0dab0d3dfac01f542ed51317bfce559b999e80044487e3f478122c8d8056a06b8f99544b7408f18c3f3d1115e01845f0780f63cb3e14c3a44a5674d467091b4c77853e6e87e366a086a1e3ad70d1a31b96152bb3e315c09d5f2b5a169", 0x8a}, {&(0x7f0000001380)="79f6fa3158f01e8365b0762e9f4c7a2e3704357322c85b5e39", 0x19}, {&(0x7f00000034c0)="345b83df949ef0011ce4d48d6013d5fed17e5294752667bb10f226a8dabc85f11fbae6153e1df031fb41fb47c1c870f5c8923f02f8d465205123976d46d9b3a761e9b7e701ac31e9fb81c23697f8a540720fc7d7a349ba0c65da481bcfcff772faddd588adf844ca13d2f260000f57e8d29c1f569ef5dc47a33b0c3e85324beaf255de53ae78ef4ab6d36c686076be60ea6b0a5e0f17bf4a74ec2d070a32e91537b0afc2b899f07ad67e907b66eabc0ff0e9db08ffd63402e0cdcecf6b21d595aa21afe8b34d271c0e328a3c5941aea28ad7afa55d546341a6d6b9dc71a915b8", 0xe0}, {&(0x7f00000035c0)="3e939bc882946a70664b529b83c5e723ce51e46bc7f2783a6fed72b8ea4ffc020c8eb1f8fb961120d4abf123637b353c348f4e7be7ae2945f5206cccc8fc3365748010637b4ac8544869bb3863ea4dd200ba6f708a4dba3ee16548ada0366674449ffa51e79f4a38676c7fdc039d0a7dbb477a68554466de9eb33e053046856d8d8810f41adcb871d5fce427a5924c3a5d1ce266d9aeb97c5b09c857c6f2d0890c19d3c673a9e1a1cfba23a3fe55eeea8f1c2c857375847475829f8e2b2f4b538198fa8f988899b640558f87d87057daee1542e429d8ccd77ebeaf5516d68e0180391d424736b91411b0aa4983c20836ea4ee6ea7e2d9c06fb", 0xf9}, {&(0x7f00000013c0)="2886590ea07f0d2843eea7cbfcc9c3da91b589fbb3d77c9c0cca13aab7e86e1a748930eedbc8e62823088191fd63be8417ecd45c098c85eeacdde34b6579123e6ad40ce903ade2356366e4934e603ea7a4d517641ed6d3cba2ada6d1293b1e5ca29404674cf7b4a1c87a6c3ea391dc", 0x6f}, {&(0x7f00000036c0)="b095ac48d46e73b0fba97166755f105f21e9115a377c843918f43fb1893dd6af991ae3b3efcc040d03604b9281d5475f7862787b0c14611ba9013d247abe205831d282e17ef41896404fe7a86dca05e80cd5ec3c4e1581f437bb0b6e28e0003af722f6cb5306f472d1b486104c0281b545e088e7590df8fbcb2dd88e159828b3f5e59f751665e68342f79a44fc953cd9a15ce5633d31a1529a0467728e25599390b71eb73f579d301bafd62fb3d81142644cb34cc8f6728b5a8e11a1a47d0b5d6438edb2fce909f1d651fd1e38542e389cbc1056b3a1fddf681fa5a627b5c94183b147581024db3a20c105f776", 0xed}], 0x6, &(0x7f0000003840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast}}}], 0xa0}}, {{&(0x7f0000001440)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000003900)="614cc906cae5bf9532791ce8eb96621c5a8b6785d11bf586cd76717c32669363cfa8bb668471680f65c81c66a4a45ae8d3d56e4a74592685a884ab07bf6ee3ade3a7b16a38f294cdefa3fc6b4d33bbb1772637a0e5dc8bf83c02fe733c8a0fc72411b1bee7faea2ac4317811e8b1a626c710870600b954a5e712501846d8e036e65c0466b68b49681d5262f630f1cf3f62d94dc1f7bb549a5fe4720bf4441fc205e802a868bc17376f860bf64132cf99e564ef6a15503b225023315480541283061c8bc8d108acd441822d7456", 0xcd}, {&(0x7f0000003a00)="b7d5f68b964c2b5277939a9f59868515d3b23fe99a62b39aa6f94aa94dedade8d1354868a1f4ace7309f035b9539850e41cc6e53532227516f33e36dbfba18bd9f8b88e8636d79c4fd7e70d18ab411ce5afe1c43fc1f08a61b7abf45eba6168f0c400f31c695d08af8772254e228dd72dc1386", 0x73}, {&(0x7f0000003a80)="08c09f8c379bd3c47be60d2f3932407f520d30681f097faf4f64b3b54ab15f0634bdcbbfe37d67552150170cb91f89ece3f600b06dc7276aa5dde1d27fafe601f44cc7dedda41f3b4ab1", 0x4a}, {&(0x7f0000003b00)="516837408f48a539bb0328ec9a6c3a6763591f6e4a7fff5a8870dac761baa02cff3da496b89354ea4927e3856a9d4cd67d8f6ee4ccda6eda70ac1d842e32dc4b3ea1e24a1021f5cff56bc9357a02c8779a09a1aa908a6545968962775b67d0d0783ec99b5057b650fe4b4acc150876dc701d6b36309977f713807173a5cf47c4e44a9e68f7a767ee82c320c735cabc075f8b86f63196b6aed24d1df5c6ab8515670ac369f8643fd90015f02be65e61a39a09a1db6ce071d7f8730dd65c80f1bf044ac2551dcd3a804f06ea91dd33d7360418001584864c500aa0e2cba9ef1a3b1ccc548c02343c3c15e3fbb8f0f8d2723e91f2fb48be1c17116b815279b2501df3080d879dd073e69d1202e82e599bd7a544fd052f32451186efbeda64c1a3db4d3fe518ab4d7e72961280a2eb736c5e14f927cf5ae90c66d3face0a4c7a2553d736e414cbde2b8721488c536b8b374202c9ea4b686383ebffe73b08985450896e565e3b0a75fd7039dba8257d446979383555000bd663ac92311ae3b179f7e0f1c1598d8653cacc776892f479c25b0f95ecf673a97ad5dc442de3947e0bc0489dacb6d86dc431560758d233c978ea6fb0cabe5d0ff2aee826edc2d9fc1ca7ca448fb6880c0be3cd6d32f81c1729ee4412267114c450b1a840091fa73169bbbf9a7191c41202f61ddabeb1b125a70c5d373bd5fba87cf38227bcf98ac530080339d3617cf4c0e171fa3a49f42f8c3949a53d11cd2729080eba618ee9f55e92ce1825960a3598514e91353e238d190b553b5474a3e36b30fbdaec33d0baf72d8be701dd1ecf0b57d38d3da0abeb1ff9d43ad82b30dbaabcd0a75c933e3ed8f888ab390a79940e9c3fee28d4d675d3bcb3e38ec4a8bb09cf85e114a20adf1d7069b6ddcb0e9360c1acd476b68481fe50747060a52568f42e3b7895ecc127560e99b1783707949e49cb470d625e9647825b513f574763d309c8df6ad02e9a9a4963ad79650eb4c643ad3371bad7e173f817e7afc5e6228303f74ddfa69eeb5eedd38eb08f69bc2c3e346c60d05571ed701b4b2067c25bc9b1c96bf8b4775cabbc7468faa5ce5fe755f39818e7e0e927d3a20ddaaecd5c6598dae40711a574204b3e9367922e9b61aa5715a4f36c1ccc9597e6193b1a9182e85cee7300e813a854282290e076d720a746dfd6a423c98c6a6b1cd9fc26dcec22693f0e90195e3c3cecdd485fc8014f9059e3a944c297dab09ecda83f3aacda1f232ead03389719ae0af2c9a670f5397c669761b78e7d4b7b8562dead25f79fc694a6a28002ffa65127ab55747104947c508404e9574c5e9910639bc49f6a188a49b28316fbb2e6d1f1b1af7a61bc604343a3888f4d7204138298037970e51773d6de4e556b51d954ead8403d4b3aed4f7a5fdfd42061476e83bf852338e3910883614ff44f6032350ec701f9d5878d1fb9223e2b7eef461a6c3f2758b5c00ed07ce15bf1e4fc90f11831c463bbd94033060cdd2328cf63645e64057c577f4d0aea61354b24d5d88c2f0878de4d1d88a0c31ba024269020068c64f88b88f3caa3ce02d8616954d190a33e7e56f1e6be5d1ca38802bfa69885e12aee1586f2095d4aba71933a212aa8c9c463b375d2fe28b1596dd19152a36fea5e666c8adb26355752cb327186abd7638640fc7c304e7353d2474e6c21f87b8bffd786501bc06423ac1842273045e7444a6d1559ae0757797286598cce6e99b57f7658356b8be6255846926e6ae36dca5f63110dd0a6c4474c95d3d669a14ec44a7e66a6406929c8104ba1fb766fe01ffcf68cb8d72d5c5091c4ad8a97e38d874d1f495ca99056fe23f26cc61838aac8e5a4350d7b04bb03ed9b32d357f5a8d8c8f7ab853edc3780e5b27b0f87bd36f30ef36e3883be81764a318abd1246f3d750703b3a16cf510bbccf1780d14c956e8709c6ea6f49be3be6eab94a9128749d7eed4cb3577f984124b42e77e0f2d61849bd1cb1e89d6173eeaddeb007b6c18fe2ff7e44f7bb5b17245a56e53aa7cb927a3edd44aa826c142df6eefbfef016f43d8366d96953b7b2626260ada85ee558d35f9f87a0ac1947cdf1dbda01e0e3b4ed8aa7c233cd2b862776bff0a67d788c7e26e64d6fe7f27d8710d410bae668d0a80c8909ac973a6beacd98d27dbbc8f91abfef6a3abdbaadccf9a3ed5a0f8044bbc096f7d062760fd3a8bf5f7168d43f37c88005bdecd4fa86b240dfcb2bba42cb5f151a25eeda9a52420784acacdf81190543e6728e579760bad2dd56f640f579322c52c98c41e3c53e81ebef4854bbd94946c2c73688744ae74d07c7ebb9d495dfbe87f83fc5a096d7ceb6db8240a661e1a926f38a85a51f48ddfdda45503b1dc5149cfff387c2a83ad2b48893e6c908c04d9ccc987e76b74980e60640342f8a05c7d00f4e516fed8f6043cd8e94557293744c97c66f5b3b652207452e3f1047e9e69291fdf6d3b9602bfc04aaa9a817a0ff7ac15b7f84f4f90812941667d7f2ebb1c274a43f4449b9815abb9149ee10a489b95820ea0cb23939bacbf947c8d0a0100b2a9fe066c60f21d3334154cbb1d11944fe28dbe9962d348dce0b1d54b58ffdeb90a3122d401921aac238f61aa6dd6ce6c1e936273025197125fa712aff7fab834f9b5667e201b6494c37163cec05ea047f26dcd3a773c918ce7dcfa2da22a5ef531e34ab67b7ae664071b49f79cbec3a8bb443b33cc9ab26ab835b089d0d66e7022b0a6b579b5765ba11395f2e8cfd985a816ad2f433f7e4fb7b6b363a43fa646b1ea43a45cfca52339bafbb3850f03719cd89375aa6daf16b412c1243be47cbcb3008941069dc02f91b4788cd639bce2ff271e581981032b2c53a8ba796e4f7351c73a3df4ade42b95fa8e116cf2f5c45e1b86d3b38b4804bd1858771767df20d10d24d6f13e6e218b1511a277028b0b743e7ae58a1e922b316f6415559934c1229ae025f551ddb0b47979c7b9cdd6dd38221993d1429dc912b099e272fe6197dfc5421f4c8f8962ceef48beaefeae6410949236186ef1058cd7bd2fc83fdbb66f635b07b66d33b81a3bd076a5b2863dc2818bb5ea7967992fbb480ff8fe61128664e96f5434e57d28b05740ee0f3d9765ac26a252a78ae5cfb07b2915bdec7249c643011751ee72c4f37457f8006c29af392ee2293d6913eec70449bf7d7e977df6e200f295cb574ace78ef4ece43b5651d527dced67b7484a56654ee2ff9ac2b7b51a1f544d99c6988f424cf532b090b3922aed5f30e482ed8f32e7dda03eaa9650a5fc9c7b820fdf27f81ae6c315b97c6b0eb2911a2c1057c198040d03b9aead17a10e839dedcd5dbf0ee155d354a891aea2fb6767b2f1721e8a882c5f511112c76a52bf6fe46eda191942b1e93e396809065a2d82c38f74b6c42cfafb14862170103282592252ad982da316c8fbe342dfcbddaff4a2479ff873966846b906ee5558d4805259b188155b5d6b75a7fb5f8d7ebb0eb5735143b505f4b9644275cdc2a56cdb73c5e57237f3b87c605eee016f0ba3db8eed65fcf21268256f5ae0cf9ffaa5d1fa1603f28ce9108831629dbb92aaeaba4f0839cfb4859b5ad4e76660bd2cc2335322c881a985f14b7a5a1b2c89a94d1739481532cec98647599dce34eed8f9b7b2638031a9c882d815b90c34ceaa4cd68de6c33bf26ab762b28f45c2117c778f94144757e08ffc9fdc33ac1f9399391fb64fb307e867a4c54d08701b358decdaa921119954345ab888a432c98002a2073fbab6f4618b90c0a3f64e0cb57819410f9b75e18ede3554abb2586dd0c8b11ca50d3949eeee863763da2592443f21fb8bffe9de3b730f73d51a3b2787926dfe5de384bb263d8b4485f3a44f818147b3a5e26245cf9ff4dea0a64cbff1232b5beccc9261443477b537c75423b1ea7276160f9123035c6d90884b83f98afea13c4a8c12b8728b79f69a5ac8ec5187ee381222933e44c3668e344b4229cbe2573be2af1dd0333ae1d0139ff6805c9b1f6cff66974c774e498c09f4916122116cd049f050f17644bf59c18c997b55ded3a98c0292abc9e6579c9d08e01ae9ed69df46dc5f9ebc2e71fc3a9eeb6139b2ee86b87de84249355cd776ddbc034622ed1dbf2b0fa1cb3b12faf7333b836f7d9e1d894e9adeec7c7254d55d73ba1b680a346d20f3367a93ec390e59606f0ede4c4f0a726af857d043598b0b6cd33540a689ad7c720869c4a06fc5e62d0391da52dce3cbbe9ed569ee7482bf5cad56dcafca773556180afb9aeff326c7bdcf24a6857d3f7a2b8ee84b3fb01b0933ef8e9a66195dae89969ac4b4498e39d8525f7ff495fc152813d0f7ee9e95ba566b0d96a3ac64664943397ccbd1aa1804cf37becb00c82255c4ebb7412e01a0668bff76ad5a64628a5ee073b8e7eac3315bc8e266e74ce3dcda86cdf1bc5e482b253f9923b1c6d1473065412b8304699d47ac21bd010f5d0824ae7aec5656cb750a87ca27ceceafb70bcf7cb5754412aadb3fda9f80405db8694d1327b404670a2ebb542c044d8a8c49a3df24e31a1f843693f79e49b577d3c67733c86cba79f30948fe039fbd7a535ffc959161fc27a260221b50abbf15c63dc47d2914f8b0ad0633e191969abf202a652a926bd1cc1225701dbe65ec17e5f7404f45a24b93988681404b92b6886819141fae1ad6ad4d72108a2566023ceafda60e99ce85b5c16bbf5edcd81ab73b659e147ce242e53bd8b2c03c860ea935e838181d711e690a28fb93ab97922967893ba1ee0882255150fe768cbdeb8766e6cc70fb046ae34e2ffd042cf3f9055568547c674c854b99b21478ab464504160a96f37576c52d34809ee7036d1fdf9143057e8d8c4dd627102af3c98d661a2705545c86a906a634bc4810238fd131d3fd29a7d5b44d7fbce80265e02f96f85472a03f7c2cc4350972a0723e7ba854340238736d67571bb3a6f7cfb78087ffc388bbd30b6e1e006dc54d3fda7bba60e1024fbf745c4f7b202ba5516ae03078ac9d9cb900efdf8ce77a30a48bde58239178e3795e9e03bba276d2d04abefdaedf385c6eabba86a9e38e199a37a1d90ba6af9d15d380fc88479bbd9b41a897b88ca55413973c3eef3b17877c3871dc27b43183280b4339db392ecf8010ea11beb84fd57a520911b614e0ea658fea6b751e01aa80b98a3d4335aeaef19929082118265f431afd06dbb6a649b8240fad8e48508761c5208fcafd6c3f69e8cb8f74a47cfa47ac8f2cb3622786d74d2ef0f07907790d44716d3701fd9eaef77072ad0c59cb1b6334fc79a5fc812617a600de29b9b4cbc38095627cb6935e744dd9b178e27c24cac432cc263a701e9e85303f0a930571485080c8dcad9fecc01ad973ca2f16767478c359a9dc7fd255b86abdc1507cc09d1b0f64c27a71cfee41562be908abace51818f6c4eb75d56f0738500edbceedd0a7e2280905a96945f6b79f486a2cc629cc30aa8f7b7c4f32db67b7e2f2cfe67e69085015ac3546e22589c11ef481c8ca56d7d161ba6f1a13c7727ad7cc6e839428b75f29256a10cb92275672c40f444f3f40feaef50c8bcab3e04487b63adc255de242b36967853e33b9e3778068a4d2e3899af3f8ffeb017bf5f6fedf1ee9502fb47d04619d139539b657d745787411ae55bb67fe01cba2f175c81660d63367e97f952bb9742d6c5cab17e8bfad2a4289aecae31a9e96cb932d6af47d610ab0189b5adc502e3aac049f58445ff08b1b4ff6b58524bec37c914bac71f4d6eb2bc2f88042ab415f01ecb0be306190", 0x1000}], 0x4, &(0x7f0000004b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@generic={0x86, 0x5, "ed5744"}, @ssrr={0x89, 0xb, 0x33, [@multicast2, @loopback]}, @timestamp_addr={0x44, 0x4c, 0xdf, 0x1, 0x1, [{@remote, 0x1}, {@private=0xa010102, 0xf}, {@local, 0xc3}, {@rand_addr=0x64010102, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fe0}, {@local, 0x5}, {@multicast2, 0x8000}, {@rand_addr=0x64010101, 0x4}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x88, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x7a, [@remote, @local, @private=0xa010100, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}, @remote]}, @timestamp={0x44, 0x8, 0x5e, 0x0, 0xa, [0x7c8d]}, @timestamp_prespec={0x44, 0x14, 0x36, 0x3, 0x9, [{@rand_addr=0x64010101, 0x7ff}, {@broadcast, 0x891}]}, @lsrr={0x83, 0x27, 0xc3, [@empty, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, @multicast1, @empty, @loopback, @rand_addr=0x64010100, @private=0xa010102, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x85, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x148}}], 0x6, 0x48005) 6m37.38344804s ago: executing program 0 (id=4959): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x81, 0x2, 0x1, '\x00', 0x1000000000000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000000)="660b8fcffd635376e1fe007898f7200c67904d41b7cf075592f7f66d5ff464259af040ccbf554b1f711982796b3a1d9fb2fd66", 0xfdbe, 0x24044084, 0x0, 0xfffffffffffffe6d) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89", 0x1}, {&(0x7f0000000b00)="ab0b4af29da6a2a222fa6729fae965ad0000000000000004500ca2185e86f6510a7d4ee9620d268d7a356e6cc5a25c17cc638c058fef88bec49943c43f548091718948609d0f64050e", 0x49}], 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x810, r4, 0x60a42000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20801, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x81, 0x2, 0x1, '\x00', 0x1000000000000000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x7, 0x4) (async) sendto$inet(r0, &(0x7f0000000000)="660b8fcffd635376e1fe007898f7200c67904d41b7cf075592f7f66d5ff464259af040ccbf554b1f711982796b3a1d9fb2fd66", 0xfdbe, 0x24044084, 0x0, 0xfffffffffffffe6d) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89", 0x1}, {&(0x7f0000000b00)="ab0b4af29da6a2a222fa6729fae965ad0000000000000004500ca2185e86f6510a7d4ee9620d268d7a356e6cc5a25c17cc638c058fef88bec49943c43f548091718948609d0f64050e", 0x49}], 0x2) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x810, r4, 0x60a42000) (async) 6m23.544049666s ago: executing program 32 (id=4959): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x81, 0x2, 0x1, '\x00', 0x1000000000000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000000)="660b8fcffd635376e1fe007898f7200c67904d41b7cf075592f7f66d5ff464259af040ccbf554b1f711982796b3a1d9fb2fd66", 0xfdbe, 0x24044084, 0x0, 0xfffffffffffffe6d) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89", 0x1}, {&(0x7f0000000b00)="ab0b4af29da6a2a222fa6729fae965ad0000000000000004500ca2185e86f6510a7d4ee9620d268d7a356e6cc5a25c17cc638c058fef88bec49943c43f548091718948609d0f64050e", 0x49}], 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x810, r4, 0x60a42000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20801, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x81, 0x2, 0x1, '\x00', 0x1000000000000000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x7, 0x4) (async) sendto$inet(r0, &(0x7f0000000000)="660b8fcffd635376e1fe007898f7200c67904d41b7cf075592f7f66d5ff464259af040ccbf554b1f711982796b3a1d9fb2fd66", 0xfdbe, 0x24044084, 0x0, 0xfffffffffffffe6d) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89", 0x1}, {&(0x7f0000000b00)="ab0b4af29da6a2a222fa6729fae965ad0000000000000004500ca2185e86f6510a7d4ee9620d268d7a356e6cc5a25c17cc638c058fef88bec49943c43f548091718948609d0f64050e", 0x49}], 0x2) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x810, r4, 0x60a42000) (async) 5m16.870543315s ago: executing program 4 (id=5338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10190}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x50}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240020000032c000000030a01030000e6ff00000000010073797a30000000000900030073797a2a0000000014000000110001e2c17b71304131f775b408f97f49003d5ce03bc7330202681addff76fad4fb4a07b3"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac0000000060a010400000000000000000200000094000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000030800014000000000600001800d00010073796e70726f7879000000004c00028006000140f3690000080003400000000005000200060000000500020002000000050002007c00000006000140000900000600014000020000080003400000000008000340000000100900010073797a30000000000900020073797a32"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x0) 5m15.444034029s ago: executing program 4 (id=5346): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x8bc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x88c, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x934, 0x1, 0xbd2}, {0x3, 0x7, 0xd8a, 0x0, 0x8, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0x8}, {0x9, 0x37e2315b, 0x3, 0x1, 0x2, 0x0, 0x2}}}]}]}, @TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x5, 0x4, 0x20000, 0x3, {0x10, 0x1, 0xd, 0x2, 0x80, 0x4}, {0x9, 0x2, 0x1, 0x9, 0x1, 0x4}, 0x7ff, 0x6, 0x659}}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x3cd5, 0x3, 0x6, 0x9, 0x5, 0x0, 0x7, 0x1e5e, 0x80000001, 0x101, 0x7, 0x9, 0x80000, 0x8001, 0x2, 0x7, 0xffffa58e, 0x4c, 0x3, 0x1, 0x1ca7, 0x0, 0x0, 0x401, 0x5, 0x1, 0xfe8b, 0x7, 0x4, 0x1ff, 0x8, 0xba9, 0x27, 0xd, 0x5, 0x7, 0x81, 0xdc, 0xcf6b, 0x7fffffff, 0x8, 0x401, 0x8, 0x40, 0x80000000, 0x3, 0x101, 0x4, 0x101, 0xfffffffa, 0x716, 0x7, 0x1, 0x1ff, 0x5, 0x3, 0x0, 0xff, 0x2e7c, 0x4, 0x7, 0xa6d, 0x7123bcb0, 0x1, 0x5, 0x84, 0x9, 0x8001, 0x7, 0x800, 0xd1, 0x3, 0x8, 0x0, 0x4, 0x0, 0x9, 0x7, 0x1, 0x29800ea4, 0x8001, 0x4, 0xd6, 0x8, 0x9c3, 0x4, 0x4, 0x6e6, 0x6, 0xa5, 0x1000, 0x6, 0x8000, 0x5, 0x2, 0xb2c, 0xf, 0x43dd, 0x1, 0x2, 0x9, 0xc, 0x4, 0x7, 0xd9e5, 0xfffffffd, 0x7, 0x7, 0x6, 0x8001, 0xf7, 0x7, 0xff, 0x7, 0x8, 0x1, 0x0, 0x7, 0xd3, 0x0, 0x8, 0xfff, 0x918, 0x16b2, 0x3, 0x5f5, 0x9, 0x41a6, 0x8, 0x800, 0x9, 0x9, 0x7, 0x41dd8a97, 0xfbc, 0x5f, 0xffff, 0xc, 0x7, 0xe, 0xf, 0x3, 0xad, 0x81, 0x9, 0xeae2, 0xffff, 0x9, 0x3, 0xf, 0x697, 0x8, 0x3, 0x5, 0x9, 0x7, 0xfffffffe, 0x6, 0x0, 0xfffffffb, 0xfffffffd, 0x4, 0xa, 0x3, 0x9, 0x54, 0x0, 0x3, 0x9, 0x800, 0x0, 0x3, 0x0, 0x4, 0x7, 0x0, 0x8, 0x400, 0xe3a, 0x40, 0x5, 0x724, 0x10001, 0x80000001, 0x3, 0x1, 0x4, 0x100, 0x80, 0x2, 0x6, 0xfffffffb, 0x1, 0x4, 0x3, 0x7, 0xdf8, 0x2, 0x2, 0x10001, 0xfffffc00, 0x4, 0x4, 0x81, 0x5, 0x40, 0x6, 0x0, 0x9, 0x5, 0x1, 0x3, 0xad8, 0x3d525216, 0x7, 0xaed, 0x830, 0x7, 0x1, 0x81, 0x9, 0x1, 0x40, 0xfffffff0, 0x80000000, 0x5, 0x1000, 0x7, 0x80000000, 0x1000000, 0x2, 0xffffffff, 0xfffffffa, 0x8001, 0x4, 0x4, 0x2, 0xb, 0x4, 0x8, 0xffff, 0x3, 0x3, 0x583d, 0x1, 0x3, 0x17, 0x3ff, 0x1, 0x6, 0x32074488, 0x6, 0x83, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x4, 0x4, 0x1, 0xfffffffb, 0x4, 0x40, 0xd, 0x8, 0x2, 0x3, 0x100, 0x1, 0x3547, 0x4, 0xdcbc, 0x3, 0x2, 0x80000000, 0x8, 0x3, 0x4, 0x7, 0x1000, 0x2, 0x5, 0x8, 0x400, 0x81, 0x3, 0x3, 0x9, 0x8019, 0x2, 0x2, 0x80, 0xa3b, 0xfffffff8, 0x0, 0xfffffff7, 0x7, 0x8, 0x649, 0x5, 0x1, 0x3ff, 0x0, 0x5, 0x9, 0x4, 0x8001, 0x2, 0xbf, 0x2, 0x2000, 0x5, 0xe, 0x0, 0x3, 0x9, 0x3, 0x9, 0x648b, 0x2, 0x1, 0x80000001, 0x9, 0x0, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x5, 0x1a5, 0x1, 0x0, 0x3e68, 0x4, 0x1, 0x6, 0x0, 0x3, 0xde, 0x8, 0x6, 0xffffff68, 0x6058, 0x8d1d, 0x13a, 0x3, 0x6, 0x4da, 0x9, 0x1ff, 0x0, 0xcfd, 0x81, 0x0, 0x7, 0x11b5, 0x0, 0xffffffff, 0x80000000, 0x40, 0x6, 0x5, 0x3, 0xfff, 0xa7, 0x9, 0x8, 0xb, 0x411, 0x3, 0x7, 0x9251, 0x5, 0x2a, 0x3, 0xc, 0xc, 0xb, 0x3, 0x8000, 0x4, 0x4, 0x8a, 0xfffffff8, 0xffffffff, 0x3, 0xe3, 0x7, 0x7fff, 0xc, 0xfff, 0x800, 0x4, 0x6, 0x4, 0x2, 0x6, 0x8000, 0x80000001, 0x2, 0x8001, 0x1, 0x12000000, 0x1, 0x5, 0x5, 0x101, 0x8, 0x8, 0x7f, 0x5, 0x425, 0x401, 0x9, 0x1, 0x7ff, 0x2, 0xfffffff8, 0x7, 0x0, 0x2, 0x0, 0xfffffff8, 0x24, 0x6, 0x7, 0x100, 0x8, 0xef3b, 0x2000000, 0x3, 0x401, 0x4, 0x0, 0x3, 0x8, 0x154dfdcd, 0xab, 0x5, 0x1800000, 0x7f, 0x7, 0x80000001, 0x2, 0x7, 0xd382, 0x3ff, 0x8, 0x1011, 0xb845, 0x76, 0xffff, 0x8, 0x9, 0x2, 0xfffffff7, 0x6, 0x4, 0x0, 0x4, 0x1000, 0x7d1, 0x0, 0xa00, 0x8000, 0xffff, 0x100, 0x1, 0xffffffff, 0x7, 0x763, 0x1, 0x7, 0x10001, 0xfd0, 0x5, 0xffffffff, 0xea, 0x9, 0xc, 0x8001, 0x1, 0x2, 0x0, 0x6e, 0x6, 0x2, 0x7fffffff, 0x5, 0x6, 0x9, 0xfffffff8, 0x1, 0xf, 0x6, 0x6, 0x7fffffff, 0x0, 0x2, 0x400, 0x9, 0xaf9, 0x1, 0x10001, 0x4, 0xc00, 0xffff6ccf, 0x40, 0x3]}]}]}}]}, 0x8bc}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) 5m13.728298223s ago: executing program 4 (id=5354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r5, &(0x7f0000002440)={0x2020}, 0x2020) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETFILTER(r6, 0x801054db, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x400}}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) fsopen(&(0x7f00000002c0)='minix\x00', 0x0) 5m12.349968019s ago: executing program 4 (id=5359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r1, &(0x7f0000000000)=""/39, 0x82) getdents(r1, 0xffffffffffffffff, 0x5a) syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) r2 = fsopen(&(0x7f0000000000)='devpts\x00', 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000980)={0xb, @pix={0x2, 0x7, 0x38415261, 0x7, 0x6, 0x9, 0x9, 0x40009, 0x1, 0x7, 0x0, 0x3}}) close(r0) syz_mount_image$fuse(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x9801) move_mount(r4, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x20220a0, &(0x7f0000000440)=ANY=[@ANYBLOB="2c18198b989e1ff4f8aeb9e77225de02d2b45c1c77d3a0522834e6c03b1aafab613b910a9e094d55b618c167ca369595011102267840323c9d9b35ca8d8417eb100de632541cfef3f1cc0fad165a35fcc077ec9a56fd95fe55848dcd5da9b41cb1a154ce019eae6dbc1bcef99a19dce75003e55a15bcaa3c01114d3b80eb189e78590515395d67c59e828bf46e1a15f1dbc6ece63b4f878d91db1cf3ed9b8c750a7e5ee03ec6a4f9ce1610b77226adf69ce3e0440ff2719d2e3bd9c2ec80af3c32b34187a6fa13552c", @ANYRESOCT=r4], 0x0, 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff02, 0x0) 5m12.095669532s ago: executing program 4 (id=5360): pipe(&(0x7f0000000080)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004e80)=ANY=[@ANYBLOB="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"], 0x7e0}, 0x1, 0x0, 0x0, 0x4000091}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x130, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x100, 0x2, [@TCA_FLOWER_ACT={0xfc, 0x3, [@m_connmark={0xf8, 0x1, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3b, 0x200, 0x0, 0x100, 0x7}, 0x42}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0xffffffffffffffff, 0x9, 0x80}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x29, 0xffffffff, 0xffffffffffffffff, 0x9, 0xe}, 0x57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7c, 0x9, 0x3149c148d373c0ad, 0x1, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x7, 0x4, 0x1}, 0xfdfe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x0, 0x0, 0x6, 0xa07b}, 0xc00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x8, 0x9, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x328}}], 0x1, 0x810) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 5m11.892914888s ago: executing program 4 (id=5364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b15", 0x5b}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f00000002c0)=""/186, 0xba}], 0x2}, 0x40000022) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x7, 0x2200) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000100)={0x5, "5351e0a26537e35ce329e5b30b84082802fcd81a260a7994dde4d7d6b6d8af704dc77d8862331c0558cc0acf4dc7ce7eee7494d0727d335dd8e4ee013e01fae7"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) 5m11.669347445s ago: executing program 33 (id=5364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b15", 0x5b}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f00000002c0)=""/186, 0xba}], 0x2}, 0x40000022) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x7, 0x2200) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000100)={0x5, "5351e0a26537e35ce329e5b30b84082802fcd81a260a7994dde4d7d6b6d8af704dc77d8862331c0558cc0acf4dc7ce7eee7494d0727d335dd8e4ee013e01fae7"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) 8.226571353s ago: executing program 2 (id=6712): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=0x6e5, 0x8, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159}) r3 = socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r8, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) readv(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0}], 0x2) 6.172128505s ago: executing program 2 (id=6716): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6362, 0x3, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffffdc, 0x5, 0x11, 0x7, 0x1fb, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000000000006110a40000000000bf1a0000000000009500000000000000f718538aa378a60b0894ce4d713215e949a9ad4e93d1cd5289dafa471fdc7e492bd161dd0dc89e45319e5042bbaa835a3126905ba6fb0d380f9022a2d5ba03275652541736666cee6d64ac9f868dd85a2eda2abafcd6f3eeef01eb47d3d1709e02ab7c495ca5b958f1ba3ea740321751562e67621c7329f3dbc504e676a2b8ba8f6fc7d1ebeeaba33826dc60ad38623996003427e2642b9fe444e2ff18abf0dfba3484ea447669b67e68132ccd52a796a94b41277871b3355fb5f0a27925d6931066a27173f84f0c171f3b58ae47297da280ab"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x20, 0x8, 0x5, "75aa8c82a4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x2, 0x17, {0x17, 0x22, "96e83fb194905f3a20867f40a1124c8b3d489c0511"}}, &(0x7f00000000c0)={0x0, 0x3, 0x26, @string={0x26, 0x3, "9addcdc56ec588da24c751c54aed1cdc1797931fa3bcfc94490e5d97bafb8c4564ff635a"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000180)={0x0, 0x3, 0x11, "d45d5b94aaaf5d6313fd77429f71fe2d95"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "14e592"}, &(0x7f0000000340)={0x20, 0x82, 0x2, "59a6"}, &(0x7f0000000380)={0x20, 0x83, 0x2, '|G'}, &(0x7f0000000440)={0x20, 0x84, 0x2, "e703"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "a43e81"}}) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) fchdir(r2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a68100d7c727e7d63c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791010500a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd1445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000001c0)={0xa1, 0xf, 0xfffe, 0x100, 0x3f00, 0x2, 0x0}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$SNDCTL_TMR_TEMPO(r8, 0xc0045405, 0x0) 5.848508789s ago: executing program 6 (id=6718): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000dbdf255d00000008000300", @ANYRES32, @ANYBLOB="0c009900020000001f0000002800a6800a00060008021100000000000a00060008021100000000000a00060008021100000100000800a500000000001c00a6800a000600ffffffffffff00000a00060008021100000000000400a6800800a500000000003400a6800a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000800a500000000006400a6800a00060008021100000100000a000600ffffffffffff"], 0x120}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd0000000000000000000700", [0x0, 0x6]}}) 5.593857609s ago: executing program 6 (id=6720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setsig(r2, 0xa, 0x2d) (async) fcntl$setsig(r2, 0xa, 0x2d) fcntl$getflags(r2, 0xb) linkat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x1000) 5.578605412s ago: executing program 6 (id=6721): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) write$dsp(r1, &(0x7f0000000000)="20d3ff89946ae3268c918942064fa3708f55f65134c8477ce10c634aaa10a9cc09d6bf14af39641ad961d2797abad1ee8a45a3c558d9ce7024fa1fd6873dafeb216f02541a0e59fa59f3c84ce061dcb4401147e2d1c056838311fcab4d907470a24f75f31278140528c924936e1ba9662cd1935dd4406d0e490ba63cb9b87657cd1ec94fb324a4844f9c206f1b27ca067f9342fdef02b8d0651ac471bf63845ab6d4e4c461c2fb5cee2ede0ae28ee248ef67cef639e9cd079cca05b1774125f2", 0xc0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) accept$alg(r2, 0x0, 0x0) (async, rerun: 64) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b64657669636573202d6e65eeb6b12a74202b6e65745f636c73202d64657669636573202b706572665f6576656e74202d696f202d637075202d667245657a6572202d726c69"], 0x46) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 5.359523981s ago: executing program 6 (id=6723): r0 = socket(0x10, 0x80003, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000380)={0x77359400}, 0x10) (async) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) 5.284820626s ago: executing program 6 (id=6724): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) r6 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) get_robust_list(0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000001100)=[{&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000000dc0)=""/119, 0x77}, {&(0x7f0000000e40)=""/221, 0xdd}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/253, 0xfd}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000001040)=""/187, 0xbb}], 0x7, &(0x7f0000001240)=[{&(0x7f0000001180)=""/148, 0x94}], 0x1, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c3000000498d662e50e7e7bace33855f4329a8650d9331c170468859e1da477d31f61223db01340be7dc21e2a07b0b2fbfc02d8d387f33f89d0f6c45e15010f83612f9b3c77b82ac16585c48a5d1eeefd93f5ef5625e4b619810cd915b17821fc917cf41cd15b4a520130cce"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x5) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000004c0)) 5.083210004s ago: executing program 1 (id=6725): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x4, 0x4) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000001e8caffe76959a8000"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r2, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0) io_uring_enter(r6, 0x80002219, 0x7721, 0x16, 0x0, 0x0) syz_usb_ep_write(r1, 0x8, 0x32, &(0x7f00000001c0)="f8166aa7bed82fdc3eba737f3e6374a4f962bab81d4ffb72b6f45eab249c03ba5e371fcdf10cfb691a8daa07f4b5229beea2") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x3c3e}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_open_dev$vbi(&(0x7f0000002240), 0x1, 0x2) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc}) 3.53320728s ago: executing program 3 (id=6729): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0x78, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) write$cgroup_pid(r0, 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) (async) r5 = socket(0x1e, 0x4, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r7, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x4c}}, 0x4000) (async) connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) (async) sendmmsg$unix(r5, &(0x7f0000000080), 0x0, 0x80) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x24040004) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.055966294s ago: executing program 5 (id=6731): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRESOCT, @ANYRES32=r1], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x60, 0x80, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xbcb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x0, 0x61}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0xd}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0xf, 0x9, 0x10, 0x9}, 0x69, &(0x7f0000000140)={0x5, 0xf, 0x69, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "b9dbf9d346de112b4e7a2edd10f8a13a"}, @wireless={0xb, 0x10, 0x1, 0x18, 0x48, 0x0, 0xfa, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x5, 0x4, 0x9}, @generic={0x3a, 0x10, 0x3, "3e3c62b44d08fba6a8b3b2d85d8148baa627507e8ff92c6709f70827d8f97427953ab0cc6ef9a545e390f76e42b14abd55ae08c5b3aebf"}]}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x140c}}, {0x3c, &(0x7f0000000240)=@string={0x3c, 0x3, "bb32420d0d91ab4c42669b4a559bbce3b0416ef4a546a5736cb12edeb04a926bd329271c55a7c914fd414d2cf7208a3df315e5e5f47e43cb01f2"}}, {0xd4, &(0x7f0000000340)=@string={0xd4, 0x3, "58840e66f3bd99ebea5559b16624abfca0973739d127ff15661c0ac857c73ba1b3a21c8f3fccde3a779d9839e9264c318d441e39c2397055fd08e6de00629f1a0d166223022117ba4de838c12f0773eb55e00993b538fe26d37b8521515bdc7226f65ba0ee270f2665f38a4665f07255e871c45576351c84a8a7dea9f6888dcba6348e538c99211f626503332672e0466b3eddfddc46d4fd442681019360fbddd736a1448f0d4690fe91cb1f84d00958ec00b463706f9de518fbed18e391d153350de27b5931ceace9bc8e10a84a002619da"}}, {0x33, &(0x7f0000000280)=@string={0x33, 0x3, "0b21a7e55047003d7dcc40a35624a1fb934c82848ae3bc19ac05864e09bce55e5a9597df495d4dcb62e118fe251b69eb32"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c25}}, {0x9b, &(0x7f00000004c0)=@string={0x9b, 0x3, "0bf3d654e1e155ae03210f8c7ef2e503092c948af0069e3b495cfeed59ef3f3e79b38336610035b7bb55d85cacef5bafd28ef7638873429cde4e1c67d4c5eefa932c86f933a8b1621f7d91e86aff06fac8b6b4875203ed0d2e1f930fc46b979b554647d223d5bcb9ef29c803072bfcfeb61a2e37fdd00961023eb316118963747116ddf21b8bb497ca9051634718867ec4664578cee0329eeb"}}, {0xbc, &(0x7f0000000680)=@string={0xbc, 0x3, "3c36054a8f967d87e68a2b49575575cc0653e9dfe256e0800594e78663da67e32b3de19829e37f282d0bee288dfc5c3acfbd2d9904ba257bf9b278f6ca78737ff34ea07656c9d8482906b3fcd42795c6bea0a9c7e7142a0085252fb0b81ec6f9e19c8563545e05cf4061784a3a3d4312a5bea9b06642060fbf05f9968de3b6a60e3aaad24192cc3e32965bd499f1033ed433bcbd7e85293ca8097403ae5c6a13e31848be784cbc39d96748dbeeb49f0e9616f9a992a204fc0079"}}]}) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x27c440, 0x0) 2.561225295s ago: executing program 2 (id=6732): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140)='\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000200)) r2 = syz_io_uring_setup(0x1e7f, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x1, 0xc}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r6, 0xffff) close(0x3) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000001c0)={r6, 0x1, 0x0, 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x128b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x40, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x800000}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0x237, 0x0, {0xfffffffffffffffe, 0x17, 0x0, 0x0, 0xd, 0x10000, 0x9, 0x2, 0x8, 0x8000, 0x2, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r9, &(0x7f0000000180), 0x4000190, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2.2138276s ago: executing program 5 (id=6733): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x2, 0x64bf8fe95ba35d0d, &(0x7f00000001c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000180)="4f0fc75e3566baf80cb8a827c683ef66bafc0c66edc463f916e1000f22c066440f38818f06d85dd3b9840a00000f32b998010000b808000000ba000000000f30460f23d4f3440f0966ba200066b8f57f66ef", 0x52}], 0x0, 0x40, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r10, 0x1}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x5000, 0x1, r10, 0x4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.131905715s ago: executing program 3 (id=6734): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r2 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x2f0}, &(0x7f0000000280), &(0x7f0000002c00)) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x3c1d, 0xc000, 0x3, 0x38}) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0xf, 0x10000) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.933336797s ago: executing program 1 (id=6735): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x6, 0xc, 0x4, 0x10000, 0x1, {r1, r2/1000+10000}, {0x4, 0x0, 0x7b, 0x1, 0x5, 0xe, "6a39b9ca"}, 0x2, 0x4, {0xffffffffffffffff}, 0x5}) close$fd_v4l2_buffer(r3) exit(0x10001) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x600, 0x32200}) 1.5548358s ago: executing program 2 (id=6736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000006080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002040)="b19ccccf84f5caed0dc74c42050b2583c9a949bc5fc3fe241a6f31d9214627c11430c100", 0x24) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x1a4, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x63}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x14c, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xfe, 0x1, "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"}}, {0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x3d, 0x1, "6c2b30a5eff15ba6362523cfc54f3833fee0b0fbe8dd2d4563642377604a5816ff2749a2d6740290611a1908c96fc3194afb2f39923078b6ae"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4008050}, 0x80) r4 = accept(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x30845aa81b591fe8) 1.385891522s ago: executing program 3 (id=6737): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x800000, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0xfffffffe, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000200000feff2c707f8f00ff", 0x58}], 0x1) 1.164707363s ago: executing program 3 (id=6738): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xe, 0xffe0}, {0x2, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xb5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.138958153s ago: executing program 6 (id=6739): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r4, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f00000002c0)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) 997.826391ms ago: executing program 2 (id=6740): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f4e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x0, r1}, 0x0) landlock_restrict_self(r0, 0xb) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x80, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x89f6, 0x9, 0x1, 0x7, 0x4, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x7, 0x0, 0x3, 0x4000042, 0x9, 0x4, 0x8000}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) capset(&(0x7f0000000000)={0x20071026, r3}, &(0x7f0000000040)) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000100)=0x1) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsync(r10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000140)) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_pressure(r11, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r12, &(0x7f0000000300)={'full', 0x25, 0x1ff, 0x20, 0x5}, 0x1d) 969.584637ms ago: executing program 1 (id=6741): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000dbdf255d00000008000300", @ANYRES32, @ANYBLOB="0c009900020000001f0000002800a6800a00060008021100000000000a00060008021100000000000a00060008021100000100000800a500000000001c00a6800a000600ffffffffffff00000a00060008021100000000000400a6800800a500000000003400a6800a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000800a500000000006400a6800a00060008021100000100000a000600ffffffffffff"], 0x120}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd0000000000000000000d00", [0x0, 0x6]}}) 767.104732ms ago: executing program 5 (id=6742): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x1}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0x113, 0x880, 0x0, 0x0) 636.703881ms ago: executing program 3 (id=6743): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_pts(0xffffffffffffffff, 0x101) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) r3 = eventfd2(0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) write$eventfd(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0xb3}]}}}], 0x30}}], 0x1, 0x40000) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r8, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r4, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 607.49284ms ago: executing program 1 (id=6744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x84, r2, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x48}}}}, [@NL80211_ATTR_KEYS={0x3c, 0x51, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a2d142bbc7db00696ca4920cf"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "936abe2936f7a93b0a89dfe409"}]}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x1, 0x3, 0x0, {0x800, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x8, 0x3}}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0xc0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 493.76995ms ago: executing program 5 (id=6745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) (async) sendmsg$nl_generic(r3, &(0x7f0000001600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000200)={0x13a8, 0x3, 0x100, 0x70bd2b, 0x25dfdbfd, {0x19}, [@generic, @nested={0x256, 0x138, 0x0, 0x1, [@generic="58ae7f3a4a3f14f33f4a12b1809af4b9e3222a26f08f78698c02a44d5d6cad36adb01df3e14f2ed53f276e7836bfd20bf6206605a11121412e883633c356af6cb5ec8ad40c155a5caecc98dd15681081303d490fb4a08b020c6e0ef64a6e8e9169596961ebf7a18365bd7ec0d83b3bc7841a3c9e683aa05c3d02ebd08fa7c22dfd55fc1d6d26370fef171f812e515ecf57beabfff23c38530559e127415583f330e0fd94091a91ab9254b05319acbaa90b7e6426b69413364b5b6ffd482e9940e4b4b61c06c81feebf49d0107cbe9a30dee3695c71ce07a593927e35fc8029ad2a15c6fcbb6a5a05a9e46c5655", @generic="18cd49acefe2edde90b49468b18915e1523378b0eb4b9c9f948a42c4e364b28e70867ea4a3d1b6a8129c262f03105abde59e5cb1f42322ef7188151a2342e1e08383a10ebda95363a4bcb5f1fbfe1a827c7d4c", @nested={0x4, 0xff}, @nested={0x4, 0xfc}, @nested={0x4, 0x1a}, @generic="dae5f7debd6ee5b5ff5aa5d4d220b8d3c5cae0c0797a29562b628304e2bed4c8bafe029576ca37e4653449d7b8dd3807a06fcf1f56c88580e9f695e337024c2882cffb1b92e98533480649be63d55a9cbdd4e0ccde0e89091c709ff983dd0352fafcadb7fae3b19c6eebbdc8073772d0a96f3b0a609ddb2325a6b8af26227b8f10e629b6835518512e1a1ba1b7cd7d3abbab5f13f9e5fde9b121897194a89eb997fd2a54", @generic="5b5f46c4f51ebebf53874b6a5bba7e13cc4ff97c20ba3fd9b24dee9f20d84df1e30be69f613032530d288bda1e26ef79332ff22e538082c6863b621be29bb0e5f7338b049045f94685cbc8197e06fb4564dafe44d78c1443bae4c5281000cd54a678"]}, @nested={0x10c2, 0xbe, 0x0, 0x1, [@generic="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", @typed={0x33, 0x26, 0x0, 0x0, @binary="695b92d827aacff55034a8054c12e757075875d512a54b8ce964a78e0a7984a739e15dd2166d39408a1bc12fd6ed86"}, @generic="19c1ec4ae12f27e04d8119a134d6ec0e829a05bba447ee248d99e586343388cae0c8de4f789f19123c815d512d419d69d0e62770f75e7c70810ef72e74edb693ac441570d03b2c950a7529f31354ead350fa29f1e8332de8a1ac375c82a9a6d22ec867cff5a30255086c6db2cdfc16197faacf182044681ca401b93f1fbbb594ca66", @typed={0x8, 0x30, 0x0, 0x0, @fd=r1}]}, @generic="48ebe0d1aedadc4d00ac779676d4af046cb30aa0969c0c3b4f5866811905fc9deee7cea7e1827e6a398023716e65d798e0eed5d44a2e5637d262270d7fd8f405e21482db56f751e788f8fd03893abeb507d0584be4db2bba75807b516d7ab0e3a7baf1c89020e25f5b78475baab01341415c6cf0df21"]}, 0x13a8}, 0x1, 0x0, 0x0, 0x4000010}, 0x8f886ed29b9eb774) (async) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x400, 0x70bd29, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8015}, 0x4004804) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x4, 0x8000000000000000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x1, 0x0, 0xd, 0x75, 0x4, 0xb, 0x3, 0x5, 0x5, 0x70, 0x0, 0x2, 0xb, 0xfc, 0x0, 0x3, 0xce, '\x00', 0x4, 0x4}) 272.829805ms ago: executing program 1 (id=6746): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0xffff) close(0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xffffffff) io_uring_enter(0xffffffffffffffff, 0x3516, 0xc2de, 0x63, 0x0, 0x0) 242.031044ms ago: executing program 2 (id=6747): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c4}, 0x4084) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c891}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x60, 0xe3, 0x5, 0x0, 0x5, 0x3, 0x0, 0x0, 0x5, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x6}) r6 = socket$igmp6(0xa, 0x3, 0x2) mq_open(&(0x7f0000000040)='*\x04\x02\x00\x00', 0x40, 0x118, 0x0) ioctl$sock_SIOCGSKNS(r6, 0x894c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) ioctl$KVM_RUN(r2, 0xae80, 0x0) 133.86328ms ago: executing program 5 (id=6748): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x800000, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0xfffffffe, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000001feff2c707f8f00ff", 0x58}], 0x1) 132.980175ms ago: executing program 1 (id=6749): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d44000000000c007a0a00fe00ffffffdb03000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) r6 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) get_robust_list(0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000001100)=[{&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000000dc0)=""/119, 0x77}, {&(0x7f0000000e40)=""/221, 0xdd}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/253, 0xfd}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000001040)=""/187, 0xbb}], 0x7, &(0x7f0000001240)=[{&(0x7f0000001180)=""/148, 0x94}], 0x1, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c3000000498d662e50e7e7bace33855f4329a8650d9331c170468859e1da477d31f61223db01340be7dc21e2a07b0b2fbfc02d8d387f33f89d0f6c45e15010f83612f9b3c77b82ac16585c48a5d1eeefd93f5ef5625e4b619810cd915b17821fc917cf41cd15b4a520130cce"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x5) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000004c0)) 64.485196ms ago: executing program 3 (id=6750): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x0) (async) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0xb, @raw_data="435530386d7045c07d0ced83659145ec87cda60fea0195e62c84f08c70a667dd931f3e0944ae0769d1db71d24638f00994f04ca9318da48efe59ecd5c4bc7e620f0052cf7501c6cb0bc9d6ea9d7f7fd580f51ffdc2205484a488b21c86765b2b6b13822337775fbb604bc443655025b4e6aab93c145aa062dab666d7bee24b65b2f7bed94cbd28be632bb7f7c6c5b301700f7c4af1bf90dd769f7de1d2e4a3e7c70f55979f51c2a89922c00cb68b7869210e8a823b63f4f65558c6d4688870907c1ad8e7ef553988"}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x2, 0x80000, 0xfffffffc) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'netpci0\x00', 0x8000}) (async) r6 = socket(0x2, 0x6, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0x1, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x206, 0xd, 0x5, 0x4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettaction={0x14, 0x32, 0x2, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8848}, 0x0) (async) bind$alg(r4, 0x0, 0x0) (async) r10 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_TRAP_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f0000000400), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/5, 0x5}, {&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)=""/146, 0x92}, {&(0x7f0000000580)=""/137, 0x89}, {&(0x7f0000000640)=""/26, 0x1a}, {&(0x7f0000000680)=""/31, 0x1f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000740)=""/169, 0xa9}], 0x2, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000001040)=[{&(0x7f00000009c0)=""/128, 0x80}, {&(0x7f0000000a40)=""/141, 0x8d}, {&(0x7f0000000b00)=""/144, 0x90}, {&(0x7f0000000bc0)=""/120, 0x78}, {&(0x7f0000000c40)=""/189, 0xbd}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/205, 0xcd}, {&(0x7f0000000ec0)=""/250, 0xfa}, {&(0x7f0000000fc0)=""/98, 0x62}], 0x9, &(0x7f0000001100)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x3, 0x12100, 0x0) (async) syz_usb_connect(0x4, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') 0s ago: executing program 5 (id=6751): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x17, 0x51, 0x29, 0x20, 0x557, 0x2009, 0xc71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x58, 0x7, 0x2, 0x8a, 0xb5, 0x38, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000540)={0x20, 0x1, 0x6, "30c2fabb0d6f"}, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000440)=[@decrefs], 0x0, 0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "0d3d4a3b5b7bc69a21cfb7f5eaac46dbe89b1347050000000000000002249341", 0x33524742}) kernel console output (not intermixed with test programs): ][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.184870][ T5914] usb 7-1: Product: syz [ 1403.189281][ T5914] usb 7-1: Manufacturer: syz [ 1403.194032][ T5914] usb 7-1: SerialNumber: syz [ 1403.201570][ T5914] usb 7-1: config 0 descriptor?? [ 1403.208882][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.220243][ T5851] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1403.232478][ T5851] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1403.255292][ T5851] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1403.270642][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1403.279086][ T5851] usb 3-1: SerialNumber: syz [ 1403.415490][ T5914] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1403.423572][ T918] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1403.440394][ T5914] uvcvideo 7-1:0.64: No valid video chain found. [ 1403.467284][ T5914] usb 7-1: USB disconnect, device number 62 [ 1403.515403][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1403.570058][T28133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.591487][T28146] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6259'. [ 1403.612854][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1403.642650][T28133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.693742][ T918] usb 2-1: Using ep0 maxpacket: 16 [ 1403.703917][T16179] usb 3-1: USB disconnect, device number 17 [ 1403.747205][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.763843][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.788696][ T918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1403.802363][ T918] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1403.815050][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.827099][ T918] usb 2-1: config 0 descriptor?? [ 1403.966559][T28151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6260'. [ 1403.991353][T28151] bond1: left promiscuous mode [ 1403.996967][T28151] bridge0: port 3(bond1) entered disabled state [ 1404.125305][T28151] bridge_slave_1: left allmulticast mode [ 1404.137600][T28151] bridge_slave_1: left promiscuous mode [ 1404.193940][T28151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.315089][T28151] bridge_slave_0: left allmulticast mode [ 1404.348001][T28151] bridge_slave_0: left promiscuous mode [ 1404.354339][T28151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.365303][T28160] loop6: detected capacity change from 0 to 7 [ 1404.374977][T28160] Dev loop6: unable to read RDB block 7 [ 1404.388519][T28160] loop6: unable to read partition table [ 1404.415956][T28160] loop6: partition table beyond EOD, truncated [ 1404.422397][T28160] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1404.763582][ T5915] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1404.860604][T28168] bond11: entered allmulticast mode [ 1404.872918][T28168] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1404.891532][T28168] bridge0: port 8(bond11) entered blocking state [ 1404.906920][T28168] bridge0: port 8(bond11) entered disabled state [ 1404.927310][ T5915] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 1404.929572][T28168] bond11: entered promiscuous mode [ 1404.952759][ T5915] usb 7-1: config 0 has no interface number 0 [ 1404.959533][T28168] bridge0: port 8(bond11) entered blocking state [ 1404.963735][ T5915] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1404.966086][T28168] bridge0: port 8(bond11) entered forwarding state [ 1404.985638][T16179] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1405.013965][ T5915] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1405.027839][ T5915] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1405.037643][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.045913][ T5915] usb 7-1: Product: syz [ 1405.050478][ T5915] usb 7-1: Manufacturer: syz [ 1405.056040][ T5915] usb 7-1: SerialNumber: syz [ 1405.077715][ T5915] usb 7-1: config 0 descriptor?? [ 1405.078572][T13728] bridge0: port 8(bond11) entered disabled state [ 1405.173602][T16179] usb 3-1: Using ep0 maxpacket: 32 [ 1405.194069][T16179] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1405.205136][T16179] usb 3-1: config 0 has no interface number 0 [ 1405.205211][T16179] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1405.238751][T16179] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1405.250279][T16179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.264384][T16179] usb 3-1: Product: syz [ 1405.269167][T16179] usb 3-1: Manufacturer: syz [ 1405.274386][T16179] usb 3-1: SerialNumber: syz [ 1405.291142][T16179] usb 3-1: config 0 descriptor?? [ 1405.325496][ T5915] usb 7-1: USB disconnect, device number 63 [ 1405.353881][T16179] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1405.367171][T16179] em28xx 3-1:0.132: Video interface 132 found: [ 1405.369206][T21399] udevd[21399]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1405.724195][T16179] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1405.896768][T28184] netlink: 'syz.6.6271': attribute type 29 has an invalid length. [ 1405.930092][T28184] netlink: 'syz.6.6271': attribute type 29 has an invalid length. [ 1405.957739][T28184] netlink: 500 bytes leftover after parsing attributes in process `syz.6.6271'. [ 1405.990355][ T918] usbhid 2-1:0.0: can't add hid device: -71 [ 1406.021849][ T918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1406.061881][ T918] usb 2-1: USB disconnect, device number 72 [ 1406.223559][ T5915] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1406.385355][ T5915] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1406.394704][ T5915] usb 6-1: not running at top speed; connect to a high speed hub [ 1406.404194][ T5915] usb 6-1: config 56 has an invalid interface number: 218 but max is 0 [ 1406.412501][ T5915] usb 6-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.424052][ T5915] usb 6-1: config 56 has no interface number 0 [ 1406.430741][ T5915] usb 6-1: config 56 interface 218 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1406.445231][ T5915] usb 6-1: config 56 interface 218 has no altsetting 0 [ 1406.454992][ T5915] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1406.464260][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.472283][ T5915] usb 6-1: Product: syz [ 1406.476750][ T5915] usb 6-1: Manufacturer: syz [ 1406.482026][ T5915] usb 6-1: SerialNumber: syz [ 1406.503519][ T918] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1406.665420][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1406.676824][ T918] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 1406.687174][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.712276][ T918] usb 2-1: config 0 descriptor?? [ 1406.718565][ T5915] radioshark2 6-1:56.218: Invalid radioSHARK2 device [ 1406.733768][ T5915] radioshark2 6-1:56.218: probe with driver radioshark2 failed with error -22 [ 1406.757372][ T5915] usbhid 6-1:56.218: couldn't find an input interrupt endpoint [ 1406.776785][ T5915] usb 6-1: USB disconnect, device number 65 [ 1406.904830][T16179] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1406.915347][T16179] em28xx 3-1:0.132: board has no eeprom [ 1406.915693][T28165] em28xx 3-1:0.132: failed to trigger read from i2c address 0x0 (error=-5) [ 1406.961057][T28193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.972679][T28193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.981103][T16179] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1406.990307][T16179] em28xx 3-1:0.132: analog set to bulk mode. [ 1406.996980][T20255] em28xx 3-1:0.132: Registering V4L2 extension [ 1407.038594][ T5851] usb 3-1: USB disconnect, device number 18 [ 1407.061863][T20255] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 1407.077217][T20255] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 1407.077321][ T5851] em28xx 3-1:0.132: Disconnecting em28xx [ 1407.123932][T26007] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1407.190730][T20255] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1407.198205][T20255] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1407.206534][T20255] em28xx 3-1:0.132: No AC97 audio processor [ 1407.220125][ T918] acrux 0003:1A34:F705.007D: unexpected long global item [ 1407.229364][T20255] usb 3-1: Decoder not found [ 1407.236022][ T918] acrux 0003:1A34:F705.007D: parse failed [ 1407.241858][ T918] acrux 0003:1A34:F705.007D: probe with driver acrux failed with error -22 [ 1407.250657][T20255] em28xx 3-1:0.132: failed to create media graph [ 1407.257633][T20255] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1407.267890][T20255] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1407.281201][ T5851] em28xx 3-1:0.132: Closing input extension [ 1407.294139][T26007] usb 7-1: Using ep0 maxpacket: 32 [ 1407.306348][ T5851] em28xx 3-1:0.132: Freeing device [ 1407.308118][T26007] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.324008][T26007] usb 7-1: config 0 has no interfaces? [ 1407.332288][T26007] usb 7-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 1407.362464][T26007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.370784][T26007] usb 7-1: Product: syz [ 1407.384810][T26007] usb 7-1: Manufacturer: syz [ 1407.389479][T26007] usb 7-1: SerialNumber: syz [ 1407.408232][T26007] usb 7-1: config 0 descriptor?? [ 1407.485021][T28205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.515862][T28193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1407.622391][T16179] usb 7-1: USB disconnect, device number 64 [ 1407.777790][T26007] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1407.846410][T28209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6276'. [ 1407.934461][T26007] usb 6-1: Using ep0 maxpacket: 8 [ 1408.010302][T26007] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 1408.019587][T28219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6279'. [ 1408.031510][T26007] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.049133][T26007] usb 6-1: config 127 has no interface number 1 [ 1408.049800][T28219] netlink: 'syz.3.6279': attribute type 2 has an invalid length. [ 1408.068239][T26007] usb 6-1: config 127 interface 171 has no altsetting 0 [ 1408.120630][T26007] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1408.157388][T26007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.184273][T16179] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1408.193491][T26007] usb 6-1: Product: syz [ 1408.206211][T26007] usb 6-1: Manufacturer: syz [ 1408.211121][T26007] usb 6-1: SerialNumber: syz [ 1408.273545][ T918] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1408.399795][T16179] usb 7-1: Using ep0 maxpacket: 8 [ 1408.409758][T28230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.425842][T16179] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1408.436738][T16179] usb 7-1: config 8 has an invalid interface number: 79 but max is 0 [ 1408.445100][T28232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.456015][T16179] usb 7-1: config 8 has no interface number 0 [ 1408.465581][T28230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.483211][T16179] usb 7-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1408.497701][ T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.509254][T28233] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1408.513810][ T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.527575][T16179] usb 7-1: config 8 interface 79 has no altsetting 0 [ 1408.542950][T28232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.546670][ T918] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1408.568645][T16179] usb 7-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 1408.589027][T16179] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.598368][ T918] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1408.827830][T16179] usb 7-1: Product: У [ 1408.832013][T16179] usb 7-1: Manufacturer: 㠊 [ 1408.838235][ T918] usb 3-1: Manufacturer: syz [ 1408.845391][ T918] usb 3-1: config 0 descriptor?? [ 1408.851028][T16179] usb 7-1: SerialNumber: ੢롿뤮䦔媀䭾꽧玑淽凜힯鳊﹞㗩㔢裛䕕┿䃟ρ啣䅛索읢꿲⵲簦䊮브څꡳ듫腜㸖 [ 1408.879117][T28230] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6283'. [ 1408.963498][ T5851] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1409.087193][T16179] usb 7-1: bad CDC descriptors [ 1409.100066][T16179] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1409.152947][T16179] snd-usb-audio 7-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 1409.229614][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.250451][ T5851] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1409.283118][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.299561][ T918] pyra 0003:1E7D:2CF6.007E: unknown main item tag 0x0 [ 1409.306919][ T918] pyra 0003:1E7D:2CF6.007E: unknown main item tag 0x0 [ 1409.318696][ T918] pyra 0003:1E7D:2CF6.007E: unknown main item tag 0x0 [ 1409.333119][ T5851] usb 4-1: config 0 descriptor?? [ 1409.355501][ T918] pyra 0003:1E7D:2CF6.007E: unknown main item tag 0x0 [ 1409.362922][T16179] usb 7-1: USB disconnect, device number 65 [ 1409.371571][ T918] pyra 0003:1E7D:2CF6.007E: unknown main item tag 0x0 [ 1409.381731][ T918] pyra 0003:1E7D:2CF6.007E: unknown main item tag 0x0 [ 1409.392135][ T918] pyra 0003:1E7D:2CF6.007E: unknown main item tag 0x0 [ 1409.419191][ T918] pyra 0003:1E7D:2CF6.007E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1409.461925][T21926] udevd[21926]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1409.995943][ T5851] logitech-djreceiver 0003:046D:C71F.007F: hidraw1: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 1410.763237][T26007] xr_serial 6-1:127.171: xr_serial converter detected [ 1410.812848][T26007] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1410.847301][T26007] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1410.909470][T26007] usb 6-1: USB disconnect, device number 66 [ 1410.937089][T26007] xr_serial 6-1:127.171: device disconnected [ 1411.029634][T28249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6286'. [ 1411.275105][T20254] usb 4-1: reset high-speed USB device number 59 using dummy_hcd [ 1411.395621][ T918] pyra 0003:1E7D:2CF6.007E: couldn't init struct pyra_device [ 1411.418853][ T918] pyra 0003:1E7D:2CF6.007E: couldn't install mouse [ 1411.440901][ T918] pyra 0003:1E7D:2CF6.007E: probe with driver pyra failed with error -71 [ 1411.492567][ T918] usb 3-1: USB disconnect, device number 19 [ 1411.789670][T28258] fido_id[28258]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1412.115569][ T5910] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1412.146159][ T5910] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1412.224952][T28269] tipc: Resetting bearer [ 1412.273504][ T5851] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1412.303939][T24655] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1412.447284][ T5851] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1412.454845][ T5851] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1412.464635][T24655] usb 3-1: Using ep0 maxpacket: 32 [ 1412.470629][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.480076][T24655] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1412.488562][T24655] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1412.497541][T24655] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1412.510541][ T5851] usb 7-1: config 0 descriptor?? [ 1412.527301][ T5914] usb 4-1: USB disconnect, device number 59 [ 1412.552441][T24655] usb 3-1: config 1 has no interface number 0 [ 1412.577929][T24655] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1412.589544][T24655] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1412.610813][T24655] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1412.620109][T24655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.648698][T28267] loop5: detected capacity change from 0 to 7 [ 1412.668965][T24655] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1412.866680][T24655] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1412.925405][T28277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.935392][T28277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.978949][ T5851] sigmamicro 0003:1C4F:0059.0081: hidraw1: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.6-1/input0 [ 1412.990744][T21399] Dev loop5: unable to read RDB block 7 [ 1412.996540][T21399] loop5: unable to read partition table [ 1413.002530][T21399] loop5: partition table beyond EOD, truncated [ 1413.068793][T24655] usb 3-1: USB disconnect, device number 20 [ 1413.077490][T28269] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1413.086510][T24655] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1413.094164][T28269] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1413.181823][ T5851] usb 7-1: USB disconnect, device number 66 [ 1413.379710][T28280] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 1413.794025][T28298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6297'. [ 1413.873513][ T5915] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1414.053543][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 1414.063016][ T5915] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 1414.077780][ T5915] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.100204][ T5915] usb 6-1: config 127 has no interface number 1 [ 1414.127073][ T5915] usb 6-1: config 127 interface 171 has no altsetting 0 [ 1414.148739][ T5915] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1414.159710][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.188608][ T5915] usb 6-1: Product: syz [ 1414.207275][ T5915] usb 6-1: Manufacturer: syz [ 1414.211933][ T5915] usb 6-1: SerialNumber: syz [ 1414.212122][T28307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.267230][T28307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.820480][T28318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6305'. [ 1414.852332][T28318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1415.172901][T28323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6306'. [ 1415.532281][ T30] audit: type=1326 audit(1764730718.276:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28324 comm="syz.1.6307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf1d38f749 code=0x0 [ 1416.403513][T24655] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1416.549723][T24655] usb 4-1: device descriptor read/64, error -71 [ 1416.824650][T24655] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1416.853006][ T5915] xr_serial 6-1:127.171: xr_serial converter detected [ 1416.875124][ T5915] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1416.893189][ T5915] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1416.959125][ T5915] usb 6-1: USB disconnect, device number 67 [ 1416.986642][ T5915] xr_serial 6-1:127.171: device disconnected [ 1416.993740][T24655] usb 4-1: device descriptor read/64, error -71 [ 1417.158555][T24655] usb usb4-port1: attempt power cycle [ 1417.178852][ T30] audit: type=1804 audit(1764730719.936:3503): pid=28355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6314" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=144381 res=1 errno=0 [ 1417.275071][ T30] audit: type=1804 audit(1764730720.036:3504): pid=28355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6314" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=144381 res=1 errno=0 [ 1417.395131][T28361] FAULT_INJECTION: forcing a failure. [ 1417.395131][T28361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1417.424937][T28361] CPU: 0 UID: 0 PID: 28361 Comm: syz.2.6317 Not tainted syzkaller #0 PREEMPT(full) [ 1417.424964][T28361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1417.424973][T28361] Call Trace: [ 1417.424978][T28361] [ 1417.424984][T28361] dump_stack_lvl+0x189/0x250 [ 1417.425007][T28361] ? __pfx____ratelimit+0x10/0x10 [ 1417.425022][T28361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.425033][T28361] ? __pfx__printk+0x10/0x10 [ 1417.425047][T28361] ? __might_fault+0xb0/0x130 [ 1417.425066][T28361] should_fail_ex+0x414/0x560 [ 1417.425082][T28361] _copy_from_iter+0x1de/0x1790 [ 1417.425099][T28361] ? rcu_is_watching+0x15/0xb0 [ 1417.425113][T28361] ? __pfx__copy_from_iter+0x10/0x10 [ 1417.425127][T28361] ? __build_skb_around+0x22d/0x3c0 [ 1417.425144][T28361] ? netlink_sendmsg+0x642/0xb30 [ 1417.425157][T28361] ? skb_put+0x11b/0x210 [ 1417.425172][T28361] netlink_sendmsg+0x6b2/0xb30 [ 1417.425191][T28361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.425207][T28361] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1417.425220][T28361] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1417.425230][T28361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.425246][T28361] __sock_sendmsg+0x21c/0x270 [ 1417.425261][T28361] ____sys_sendmsg+0x505/0x820 [ 1417.425278][T28361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1417.425297][T28361] ? import_iovec+0x74/0xa0 [ 1417.425315][T28361] ___sys_sendmsg+0x21f/0x2a0 [ 1417.425341][T28361] ? __pfx____sys_sendmsg+0x10/0x10 [ 1417.425372][T28361] ? rcu_read_lock_any_held+0xb3/0x120 [ 1417.425415][T28361] ? __fget_files+0x2a/0x420 [ 1417.425431][T28361] ? __fget_files+0x3a0/0x420 [ 1417.425447][T28361] __x64_sys_sendmsg+0x19b/0x260 [ 1417.425463][T28361] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1417.425482][T28361] ? __pfx_ksys_write+0x10/0x10 [ 1417.425499][T28361] ? do_syscall_64+0xbe/0xf80 [ 1417.425510][T28361] do_syscall_64+0xfa/0xf80 [ 1417.425519][T28361] ? lockdep_hardirqs_on+0x98/0x140 [ 1417.425533][T28361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.425543][T28361] ? clear_bhb_loop+0x60/0xb0 [ 1417.425555][T28361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.425565][T28361] RIP: 0033:0x7fae62b8f749 [ 1417.425576][T28361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1417.425585][T28361] RSP: 002b:00007fae63ae2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1417.425597][T28361] RAX: ffffffffffffffda RBX: 00007fae62de5fa0 RCX: 00007fae62b8f749 [ 1417.425604][T28361] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1417.425611][T28361] RBP: 00007fae63ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.425617][T28361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1417.425623][T28361] R13: 00007fae62de6038 R14: 00007fae62de5fa0 R15: 00007fae62f0fa28 [ 1417.425640][T28361] [ 1418.005307][T24655] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1418.034096][T24655] usb 4-1: device descriptor read/8, error -71 [ 1418.310539][T24655] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1418.364754][T24655] usb 4-1: device descriptor read/8, error -71 [ 1418.409875][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6322'. [ 1418.485717][T24655] usb usb4-port1: unable to enumerate USB device [ 1418.545904][T28379] [U]  [ 1418.549667][T28379] [U] K{ [ 1418.552699][T28379] [U] t 1ŠFfˊ`GJgo/mC [ 1418.559641][T28379] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1418.575178][T28379] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1418.585585][T28379] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1418.621182][T28379] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1418.644695][T28379] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1418.655788][T28379] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1418.667323][T28379] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1418.896890][T28379] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1418.906164][T28379] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1418.914732][T28379] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1418.920879][T28379] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1418.933177][T28379] [U] ec [ 1418.936272][T28379] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1418.948623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.123508][T24655] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1419.283480][T24655] usb 3-1: Using ep0 maxpacket: 8 [ 1419.290937][T24655] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 1419.316044][T24655] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.332415][T28378] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1419.333605][ T5910] usb 7-1: new low-speed USB device number 67 using dummy_hcd [ 1419.367095][T24655] usb 3-1: config 127 has no interface number 1 [ 1419.387449][T24655] usb 3-1: config 127 interface 171 has no altsetting 0 [ 1419.416680][T24655] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1419.433547][T24655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.463537][T24655] usb 3-1: Product: syz [ 1419.468202][T24655] usb 3-1: Manufacturer: syz [ 1419.472814][T24655] usb 3-1: SerialNumber: syz [ 1419.600991][T28410] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6329'. [ 1419.615473][ T5910] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1419.626435][ T5910] usb 7-1: config 0 has no interface number 0 [ 1419.641887][ T5910] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1419.660601][ T5910] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1419.671460][ T5910] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1419.683288][ T5910] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1419.694546][ T5910] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1419.712508][T24655] xr_serial 3-1:127.171: xr_serial converter detected [ 1419.720120][ T5910] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1419.744360][T24655] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1419.750782][T24655] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1419.760811][ T5910] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1419.778185][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.788748][T24655] usb 3-1: USB disconnect, device number 21 [ 1419.804572][T24655] xr_serial 3-1:127.171: device disconnected [ 1419.812254][ T5910] usb 7-1: config 0 descriptor?? [ 1419.824656][T28388] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1419.838789][T28388] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1419.875677][ T5910] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1420.077939][T28421] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6325'. [ 1420.144102][T24655] usb 7-1: USB disconnect, device number 67 [ 1420.159464][T24655] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1420.260303][T28426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1420.326042][T28428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.345072][T28428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.370339][T28428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.380446][T28428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.445674][T28430] bond6: entered allmulticast mode [ 1420.451108][T28430] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1420.458872][T28430] bridge0: port 7(bond6) entered blocking state [ 1420.466156][T28430] bridge0: port 7(bond6) entered disabled state [ 1420.475051][T28430] bond6: entered promiscuous mode [ 1420.532427][T28439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6337'. [ 1420.583495][T24655] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1420.633961][ T5910] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1420.745813][T24655] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1420.757259][T24655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1420.769274][T24655] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1420.789876][T24655] usb 7-1: language id specifier not provided by device, defaulting to English [ 1420.799037][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 1420.823921][ T5910] usb 6-1: config 2 has an invalid interface number: 241 but max is 0 [ 1420.832160][ T5910] usb 6-1: config 2 has no interface number 0 [ 1420.841081][ T5910] usb 6-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1420.880183][ T5910] usb 6-1: config 2 interface 241 has no altsetting 0 [ 1420.888167][T24655] usb 7-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1420.908738][T24655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.918856][ T5910] usb 6-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 1420.929169][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.943544][T24655] usb 7-1: Manufacturer: ‰  [ 1420.949121][T24655] usb 7-1: SerialNumber: syz [ 1420.953830][ T5910] usb 6-1: Product: syz [ 1420.959401][ T5910] usb 6-1: Manufacturer: syz [ 1420.967137][ T5910] usb 6-1: SerialNumber: syz [ 1420.972495][T24655] usb 7-1: config 0 descriptor?? [ 1420.985600][ T5910] ti_usb_3410_5052 6-1:2.241: TI USB 3410 1 port adapter converter detected [ 1421.006609][ T5910] ti_usb_3410_5052 6-1:2.241: missing endpoints [ 1421.041181][T24655] em28xx 7-1:0.0: New device ‰  @ 480 Mbps (2013:0251, interface 0, class 0) [ 1421.050485][T24655] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1421.120319][T28456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6343'. [ 1421.358338][T26007] usb 6-1: USB disconnect, device number 68 [ 1421.363910][T24655] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1421.383974][T24655] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1421.409320][T24655] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1421.423641][T24655] em28xx 7-1:0.0: No AC97 audio processor [ 1421.443895][T24655] usb 7-1: USB disconnect, device number 68 [ 1421.468192][T24655] em28xx 7-1:0.0: Disconnecting em28xx [ 1421.497289][T24655] em28xx 7-1:0.0: Freeing device [ 1421.569145][T28465] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1421.587214][T28466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.630192][T28466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.774894][T28468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6347'. [ 1422.235259][T28475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6349'. [ 1422.503508][ T5915] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1422.683510][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 1422.695827][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.711351][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1422.731630][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1422.751584][ T5915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1422.771611][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1422.802846][ T5915] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1422.818385][ T5915] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1422.836182][ T5915] usb 6-1: Manufacturer: syz [ 1422.847975][ T5915] usb 6-1: config 0 descriptor?? [ 1422.903817][T24655] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1422.988032][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.025826][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.063547][T24655] usb 3-1: Using ep0 maxpacket: 16 [ 1423.078157][T24655] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1423.101533][T24655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.132883][T24655] usb 3-1: Product: syz [ 1423.149611][T24655] usb 3-1: Manufacturer: syz [ 1423.173156][T24655] usb 3-1: SerialNumber: syz [ 1423.198804][T24655] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1423.216776][T24655] r8152-cfgselector 3-1: config 0 descriptor?? [ 1423.224417][T28489] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6355'. [ 1423.261182][T28489] sctp: [Deprecated]: syz.3.6355 (pid 28489) Use of int in maxseg socket option. [ 1423.261182][T28489] Use struct sctp_assoc_value instead [ 1423.291748][T28489] xt_hashlimit: invalid interval [ 1423.513654][T20254] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1423.526856][T28492] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6349'. [ 1423.706060][T20254] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.729787][T24655] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1423.738299][T24655] r8152-cfgselector 3-1: bad CDC descriptors [ 1423.744729][T20254] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00 [ 1423.790394][T24655] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 1423.809194][T20254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.829577][T28502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.864206][T28502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.877148][T20254] usb 7-1: config 0 descriptor?? [ 1424.305095][T20254] hid (null): usage index exceeded [ 1424.315048][T20254] hid-corsair-void 0003:1B1C:0A30.0082: ignoring exceeding usage max [ 1424.516868][T20254] hid-corsair-void 0003:1B1C:0A30.0082: ignoring exceeding usage max [ 1424.529511][T20254] hid-corsair-void 0003:1B1C:0A30.0082: usage index exceeded [ 1424.544263][T20254] hid-corsair-void 0003:1B1C:0A30.0082: item 0 1 2 2 parsing failed [ 1424.558746][T20254] hid-corsair-void 0003:1B1C:0A30.0082: parse failed (reason: -22) [ 1424.567171][T20254] hid-corsair-void 0003:1B1C:0A30.0082: probe with driver hid-corsair-void failed with error -22 [ 1424.876384][T28517] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20003 [ 1424.887535][T28516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6360'. [ 1425.271775][T28523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.381056][T28523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.727163][T28547] loop3: detected capacity change from 0 to 7 [ 1425.739783][T28547] Dev loop3: unable to read RDB block 7 [ 1425.749895][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1425.759909][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1425.768173][T28547] loop3: unable to read partition table [ 1425.776962][T28547] loop3: partition table beyond EOD, truncated [ 1425.783994][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1425.786754][T28547] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1425.791661][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1425.889219][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1425.911339][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1425.926572][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1425.940883][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1425.955213][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1425.988131][T26007] hid-generic 0008:0006:0007.0083: unknown main item tag 0x0 [ 1426.036368][T26007] hid-generic 0008:0006:0007.0083: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1426.200991][T28554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6372'. [ 1426.263664][T20254] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1426.295750][T26007] usb 7-1: USB disconnect, device number 69 [ 1426.423548][T20254] usb 4-1: Using ep0 maxpacket: 16 [ 1426.445002][T20254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.456027][T20254] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1426.465571][T20254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.517907][T20254] usb 4-1: config 0 descriptor?? [ 1426.947921][T28574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.957346][T28574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.072629][T20254] apple 0003:05AC:026C.0084: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.3-1/input0 [ 1427.085115][T24655] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1427.208138][T28576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6378'. [ 1427.252526][T28576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6378'. [ 1427.277959][ T30] audit: type=1400 audit(1764730730.046:3505): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":&\" pid=28549 comm="syz.3.6371" [ 1427.357438][T28576] binder: 28575:28576 ioctl 400c620e 0 returned -14 [ 1427.384489][T24655] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1427.392789][T24655] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.463984][T26007] usb 4-1: USB disconnect, device number 64 [ 1427.477482][T24655] usb 3-1: config 8 has no interface number 0 [ 1427.488666][T24655] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1427.501975][T24655] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1427.510091][T24655] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1427.519903][T24655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.632225][T28577] fido_id[28577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1427.737791][T24655] ir_toy 3-1:8.177: required endpoints not found [ 1428.323570][ T5915] rc_core: IR keymap rc-hauppauge not found [ 1428.330778][ T5915] Registered IR keymap rc-empty [ 1428.347519][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.383554][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.396312][T28590] loop3: detected capacity change from 0 to 7 [ 1428.414707][T28590] Dev loop3: unable to read RDB block 7 [ 1428.421890][T28587] FAULT_INJECTION: forcing a failure. [ 1428.421890][T28587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.437599][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1428.449766][T28590] loop3: unable to read partition table [ 1428.461470][T28590] loop3: partition table beyond EOD, truncated [ 1428.478761][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input163 [ 1428.491475][T28590] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1428.506631][T28587] CPU: 1 UID: 0 PID: 28587 Comm: syz.6.6380 Not tainted syzkaller #0 PREEMPT(full) [ 1428.506657][T28587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1428.506669][T28587] Call Trace: [ 1428.506678][T28587] [ 1428.506686][T28587] dump_stack_lvl+0x189/0x250 [ 1428.506712][T28587] ? __pfx____ratelimit+0x10/0x10 [ 1428.506737][T28587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1428.506760][T28587] ? __pfx__printk+0x10/0x10 [ 1428.506783][T28587] ? __might_fault+0xb0/0x130 [ 1428.506817][T28587] should_fail_ex+0x414/0x560 [ 1428.506852][T28587] _copy_from_user+0x2d/0xb0 [ 1428.506872][T28587] snd_seq_write+0x300/0x810 [ 1428.506907][T28587] ? __pfx_snd_seq_write+0x10/0x10 [ 1428.506929][T28587] ? bpf_lsm_file_permission+0x9/0x20 [ 1428.506949][T28587] ? security_file_permission+0x75/0x290 [ 1428.506975][T28587] ? rw_verify_area+0x255/0x4d0 [ 1428.506999][T28587] ? __pfx_snd_seq_write+0x10/0x10 [ 1428.507021][T28587] vfs_write+0x27e/0xb30 [ 1428.507054][T28587] ? __pfx_vfs_write+0x10/0x10 [ 1428.507080][T28587] ? __fget_files+0x2a/0x420 [ 1428.507102][T28587] ? __fget_files+0x2a/0x420 [ 1428.507120][T28587] ? __fget_files+0x3a0/0x420 [ 1428.507137][T28587] ? __fget_files+0x2a/0x420 [ 1428.507166][T28587] ksys_write+0x145/0x250 [ 1428.507192][T28587] ? __pfx_ksys_write+0x10/0x10 [ 1428.507220][T28587] ? do_syscall_64+0xbe/0xf80 [ 1428.507241][T28587] do_syscall_64+0xfa/0xf80 [ 1428.507256][T28587] ? lockdep_hardirqs_on+0x98/0x140 [ 1428.507279][T28587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.507296][T28587] ? clear_bhb_loop+0x60/0xb0 [ 1428.507318][T28587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.507335][T28587] RIP: 0033:0x7f0c9218f749 [ 1428.507351][T28587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1428.507367][T28587] RSP: 002b:00007f0c930c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1428.507386][T28587] RAX: ffffffffffffffda RBX: 00007f0c923e5fa0 RCX: 00007f0c9218f749 [ 1428.507400][T28587] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 1428.507413][T28587] RBP: 00007f0c930c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.507424][T28587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.507436][T28587] R13: 00007f0c923e6038 R14: 00007f0c923e5fa0 R15: 00007f0c9250fa28 [ 1428.507468][T28587] [ 1428.745118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.820124][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.843597][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.863645][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.883572][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.903566][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.923549][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.944249][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.963579][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1428.993685][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1429.013943][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1429.035184][ T5915] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1429.043214][ T5915] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1430.505551][T24655] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1430.693551][T24655] usb 7-1: Using ep0 maxpacket: 32 [ 1430.704067][ T5915] usb 3-1: USB disconnect, device number 23 [ 1430.716662][T24655] usb 7-1: config 0 has an invalid interface number: 209 but max is 0 [ 1430.775119][T24655] usb 7-1: config 0 has no interface number 0 [ 1430.781778][T24655] usb 7-1: config 0 interface 209 has no altsetting 0 [ 1430.835432][T24655] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 1430.844746][T24655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.852752][T24655] usb 7-1: Product: syz [ 1430.857939][T24655] usb 7-1: Manufacturer: syz [ 1430.862559][T24655] usb 7-1: SerialNumber: syz [ 1430.921112][T24655] usb 7-1: config 0 descriptor?? [ 1430.991593][T28613] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6387'. [ 1431.061722][T28613] fuse: Unknown parameter ']ֽNvgd' [ 1431.081045][T16179] IPVS: starting estimator thread 0... [ 1431.153237][T28622] FAULT_INJECTION: forcing a failure. [ 1431.153237][T28622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.202726][T28620] IPVS: using max 47 ests per chain, 112800 per kthread [ 1431.307900][T28622] CPU: 1 UID: 0 PID: 28622 Comm: syz.2.6390 Not tainted syzkaller #0 PREEMPT(full) [ 1431.307928][T28622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1431.307938][T28622] Call Trace: [ 1431.307943][T28622] [ 1431.307950][T28622] dump_stack_lvl+0x189/0x250 [ 1431.307966][T28622] ? __pfx____ratelimit+0x10/0x10 [ 1431.307981][T28622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1431.307997][T28622] ? __pfx__printk+0x10/0x10 [ 1431.308020][T28622] ? __might_fault+0xb0/0x130 [ 1431.308057][T28622] should_fail_ex+0x414/0x560 [ 1431.308084][T28622] _copy_from_user+0x2d/0xb0 [ 1431.308098][T28622] kstrtouint_from_user+0xc4/0x170 [ 1431.308113][T28622] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1431.308135][T28622] proc_fail_nth_write+0x88/0x200 [ 1431.308155][T28622] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1431.308187][T28622] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1431.308214][T28622] vfs_write+0x27e/0xb30 [ 1431.308242][T28622] ? __pfx_vfs_write+0x10/0x10 [ 1431.308257][T28622] ? __fget_files+0x2a/0x420 [ 1431.308270][T28622] ? __fget_files+0x3a0/0x420 [ 1431.308280][T28622] ? __fget_files+0x2a/0x420 [ 1431.308296][T28622] ksys_write+0x145/0x250 [ 1431.308323][T28622] ? __pfx_ksys_write+0x10/0x10 [ 1431.308352][T28622] ? do_syscall_64+0xbe/0xf80 [ 1431.308373][T28622] do_syscall_64+0xfa/0xf80 [ 1431.308386][T28622] ? lockdep_hardirqs_on+0x98/0x140 [ 1431.308400][T28622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.308410][T28622] ? clear_bhb_loop+0x60/0xb0 [ 1431.308422][T28622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.308431][T28622] RIP: 0033:0x7fae62b8e1ff [ 1431.308441][T28622] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1431.308456][T28622] RSP: 002b:00007fae63ae2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1431.308477][T28622] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae62b8e1ff [ 1431.308490][T28622] RDX: 0000000000000001 RSI: 00007fae63ae20a0 RDI: 0000000000000004 [ 1431.308501][T28622] RBP: 00007fae63ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.308513][T28622] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1431.308525][T28622] R13: 00007fae62de6038 R14: 00007fae62de5fa0 R15: 00007fae62f0fa28 [ 1431.308545][T28622] [ 1431.537085][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.743756][ T5915] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1431.936098][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.947567][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1431.978258][ T5915] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1432.025233][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.051651][ T5915] usb 4-1: config 0 descriptor?? [ 1432.209258][T28631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.236694][T28631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.310294][T28631] pim6reg1: entered promiscuous mode [ 1432.322545][T28631] pim6reg1: entered allmulticast mode [ 1432.411765][T28632] pim6reg1: left promiscuous mode [ 1432.426067][T28632] pim6reg1: left allmulticast mode [ 1432.465207][T28631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.492256][T28631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.503707][ T5915] keytouch 0003:0926:3333.0085: fixing up Keytouch IEC report descriptor [ 1432.531608][ T5915] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0085/input/input164 [ 1432.713784][T28618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.724277][T28618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.778048][ T5915] keytouch 0003:0926:3333.0085: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1432.821384][T28618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.897814][T28618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.187385][ T5851] usb 4-1: USB disconnect, device number 65 [ 1433.567110][T24655] usb 7-1: USB disconnect, device number 70 [ 1434.513625][ T5915] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1434.554629][T28635] FAULT_INJECTION: forcing a failure. [ 1434.554629][T28635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1434.632501][T28635] CPU: 1 UID: 0 PID: 28635 Comm: syz.6.6395 Not tainted syzkaller #0 PREEMPT(full) [ 1434.632529][T28635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1434.632542][T28635] Call Trace: [ 1434.632550][T28635] [ 1434.632559][T28635] dump_stack_lvl+0x189/0x250 [ 1434.632589][T28635] ? __pfx____ratelimit+0x10/0x10 [ 1434.632614][T28635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1434.632633][T28635] ? __pfx__printk+0x10/0x10 [ 1434.632656][T28635] ? __might_fault+0xb0/0x130 [ 1434.632692][T28635] should_fail_ex+0x414/0x560 [ 1434.632720][T28635] _copy_from_user+0x2d/0xb0 [ 1434.632740][T28635] snd_seq_write+0x300/0x810 [ 1434.632774][T28635] ? __pfx_snd_seq_write+0x10/0x10 [ 1434.632796][T28635] ? bpf_lsm_file_permission+0x9/0x20 [ 1434.632816][T28635] ? security_file_permission+0x75/0x290 [ 1434.632844][T28635] ? rw_verify_area+0x255/0x4d0 [ 1434.632867][T28635] ? __pfx_snd_seq_write+0x10/0x10 [ 1434.632889][T28635] vfs_write+0x27e/0xb30 [ 1434.632922][T28635] ? __pfx_vfs_write+0x10/0x10 [ 1434.632948][T28635] ? __fget_files+0x2a/0x420 [ 1434.632971][T28635] ? __fget_files+0x2a/0x420 [ 1434.632989][T28635] ? __fget_files+0x3a0/0x420 [ 1434.633007][T28635] ? __fget_files+0x2a/0x420 [ 1434.633035][T28635] ksys_write+0x145/0x250 [ 1434.633062][T28635] ? __pfx_ksys_write+0x10/0x10 [ 1434.633090][T28635] ? do_syscall_64+0xbe/0xf80 [ 1434.633111][T28635] do_syscall_64+0xfa/0xf80 [ 1434.633128][T28635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.633146][T28635] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1434.633162][T28635] ? clear_bhb_loop+0x60/0xb0 [ 1434.633183][T28635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.633201][T28635] RIP: 0033:0x7f0c9218f749 [ 1434.633217][T28635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1434.633232][T28635] RSP: 002b:00007f0c930c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1434.633251][T28635] RAX: ffffffffffffffda RBX: 00007f0c923e5fa0 RCX: 00007f0c9218f749 [ 1434.633265][T28635] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 1434.633277][T28635] RBP: 00007f0c930c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.633288][T28635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1434.633299][T28635] R13: 00007f0c923e6038 R14: 00007f0c923e5fa0 R15: 00007f0c9250fa28 [ 1434.633330][T28635] [ 1434.865478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.286311][ T5915] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1435.316343][ T5915] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.347615][ T5915] usb 3-1: config 8 has no interface number 0 [ 1435.372190][T24655] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1435.411581][T28654] tipc: Enabling of bearer rejected, failed to enable media [ 1435.429040][ T5915] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1435.482751][ T5915] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1435.508687][ T5915] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1435.534023][T24655] usb 4-1: Using ep0 maxpacket: 8 [ 1435.538428][T28661] kvm: user requested TSC rate below hardware speed [ 1435.550353][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.568226][T24655] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 1435.590582][T24655] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.601850][ T5915] ir_toy 3-1:8.177: required endpoints not found [ 1435.602187][T24655] usb 4-1: config 127 has no interface number 1 [ 1435.672600][T24655] usb 4-1: config 127 interface 171 has no altsetting 0 [ 1435.697767][T24655] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1435.704435][T28664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6402'. [ 1435.707578][T24655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.756036][T24655] usb 4-1: Product: syz [ 1435.760259][T24655] usb 4-1: Manufacturer: syz [ 1435.792745][T24655] usb 4-1: SerialNumber: syz [ 1435.872366][T28667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6403'. [ 1435.918159][T28667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6403'. [ 1436.344306][ T5851] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 1436.521072][ T5851] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1436.602669][ T5851] usb 7-1: can't read configurations, error -61 [ 1436.763583][ T5851] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1436.924532][T28684] netlink: 'syz.5.6407': attribute type 1 has an invalid length. [ 1436.933084][T28687] netlink: 'syz.5.6407': attribute type 1 has an invalid length. [ 1436.947473][ T5851] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1436.955660][ T5851] usb 7-1: can't read configurations, error -61 [ 1436.962852][ T5851] usb usb7-port1: attempt power cycle [ 1437.363679][ T5851] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 1437.395510][T24655] xr_serial 4-1:127.171: xr_serial converter detected [ 1437.425162][T24655] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1437.434980][T24655] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1437.455885][ T5851] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1437.475753][ T5851] usb 7-1: can't read configurations, error -61 [ 1437.499230][T24655] usb 4-1: USB disconnect, device number 66 [ 1437.518833][T24655] xr_serial 4-1:127.171: device disconnected [ 1437.625556][ T5851] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 1437.647673][ T5915] usb 3-1: USB disconnect, device number 24 [ 1437.676115][ T5851] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1437.709427][ T5851] usb 7-1: can't read configurations, error -61 [ 1437.753889][ T5851] usb usb7-port1: unable to enumerate USB device [ 1437.759327][T28700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6412'. [ 1437.897732][T28707] support for the xor transformation has been removed. [ 1437.982932][T28713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.003935][T28713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.150112][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1438.159957][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1438.170141][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1438.180505][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1438.190665][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1438.200729][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1438.210829][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1438.220818][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1438.232110][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1438.313506][ T5851] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1438.553613][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 1438.563853][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1438.606522][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1438.623787][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1438.669099][ T5851] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1438.706770][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1438.724569][ T5851] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1438.751914][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1438.767606][ T5851] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 1438.776979][T24655] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1438.785058][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.794260][ T5851] usb 4-1: Product: syz [ 1438.798439][ T5851] usb 4-1: Manufacturer: syz [ 1438.803054][ T5851] usb 4-1: SerialNumber: syz [ 1438.824119][ T5851] usb 4-1: config 0 descriptor?? [ 1438.834369][T28717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1438.843334][ T5851] usb 4-1: NFC: Reader power on cmd error -90 [ 1438.851934][ T5851] pn533_usb 4-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 1438.869328][ T5851] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 1438.958815][T28727] bond13: entered allmulticast mode [ 1438.965285][T24655] usb 3-1: Using ep0 maxpacket: 8 [ 1438.979651][T24655] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 1438.988167][T24655] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.022491][T24655] usb 3-1: config 127 has no interface number 1 [ 1439.061026][T28727] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1439.082208][T24655] usb 3-1: config 127 interface 171 has no altsetting 0 [ 1439.084731][T28727] bridge0: port 9(bond13) entered blocking state [ 1439.121361][T28727] bridge0: port 9(bond13) entered disabled state [ 1439.170913][T28727] bond13: entered promiscuous mode [ 1439.205043][T24655] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1439.270486][T16179] usb 4-1: USB disconnect, device number 67 [ 1439.279496][T24655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.319100][T24655] usb 3-1: Product: syz [ 1439.346296][T24655] usb 3-1: Manufacturer: syz [ 1439.351328][T24655] usb 3-1: SerialNumber: syz [ 1439.425046][T28732] could not allocate digest TFM handle sha1_mb [ 1439.673776][ T5915] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1439.838319][ T5915] usb 7-1: config 0 has no interfaces? [ 1439.847282][ T5915] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1439.920497][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.968716][ T5915] usb 7-1: Product: syz [ 1439.987551][ T5915] usb 7-1: Manufacturer: syz [ 1440.047638][ T5915] usb 7-1: SerialNumber: syz [ 1440.087858][ T5915] usb 7-1: config 0 descriptor?? [ 1440.320182][ T5915] usb 7-1: USB disconnect, device number 75 [ 1440.383901][T20254] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1440.584300][T20254] usb 4-1: Using ep0 maxpacket: 16 [ 1440.617231][T20254] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1440.628057][T20254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.636662][T20254] usb 4-1: Product: syz [ 1440.641241][T20254] usb 4-1: Manufacturer: syz [ 1440.646551][T20254] usb 4-1: SerialNumber: syz [ 1440.668148][T20254] usb 4-1: config 0 descriptor?? [ 1440.842046][T28751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.857284][T28751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.878546][T20254] usb 4-1: ignoring: not an USB2CAN converter [ 1440.957370][T28753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.988007][T28754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.013922][T28753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.017658][T28754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.909365][T24655] xr_serial 3-1:127.171: xr_serial converter detected [ 1441.947037][T24655] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1441.977622][T24655] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1442.039370][T24655] usb 3-1: USB disconnect, device number 25 [ 1442.049840][T24655] xr_serial 3-1:127.171: device disconnected [ 1443.281905][T16179] usb 4-1: USB disconnect, device number 68 [ 1443.751759][T28786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.759380][ T5910] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1443.761961][T28786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.884228][T28781] vxcan2: entered allmulticast mode [ 1443.941427][ T5910] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1443.951219][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.963975][T28797] netlink: 'syz.2.6439': attribute type 29 has an invalid length. [ 1443.975117][T28797] netlink: 'syz.2.6439': attribute type 29 has an invalid length. [ 1443.995469][T28797] __nla_validate_parse: 56 callbacks suppressed [ 1443.995495][T28797] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6439'. [ 1444.003204][ T5910] usb 4-1: config 0 descriptor?? [ 1444.070142][ T5910] cp210x 4-1:0.0: cp210x converter detected [ 1444.270555][ T5910] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1444.310547][ T5910] cp210x 4-1:0.0: querying part number failed [ 1444.329678][ T5910] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1444.367609][T28807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.437312][T28807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.696171][T20255] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1444.858671][T28816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.875106][T20255] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 1444.884510][T20255] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.907645][T20255] usb 7-1: config 8 has no interface number 0 [ 1444.930324][T28816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.944480][T20255] usb 7-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1444.986327][T20255] usb 7-1: config 8 interface 177 has no altsetting 0 [ 1445.002845][T20255] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1445.027396][T20255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.086924][T20255] ir_toy 7-1:8.177: required endpoints not found [ 1445.178048][T28818] loop1: detected capacity change from 0 to 7 [ 1445.658276][T28824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.682970][T28818] Dev loop1: unable to read RDB block 7 [ 1445.689191][T28818] loop1: unable to read partition table [ 1445.696929][T28818] loop1: partition table beyond EOD, truncated [ 1445.711012][T28818] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1445.738676][T28824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.788001][T21399] buffer_io_error: 40 callbacks suppressed [ 1445.788016][T21399] Buffer I/O error on dev loop1, logical block 0, async page read [ 1445.825329][T28824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.843635][T28824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.873692][T21399] Buffer I/O error on dev loop1, logical block 0, async page read [ 1445.875752][T28824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.893587][T20255] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1445.957535][T21399] Buffer I/O error on dev loop1, logical block 0, async page read [ 1445.967761][T28824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.988303][T28824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.045174][T28824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.099112][T28824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.131201][T20255] usb 3-1: not running at top speed; connect to a high speed hub [ 1446.146741][T28824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.173624][T20255] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1446.232979][T20255] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1446.269627][T20255] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1446.302470][T20255] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 1446.316880][T20255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.340630][T20255] usb 3-1: Product: Ў [ 1446.350875][T20255] usb 3-1: Manufacturer: 袸ꥯ Ꝃ낅淈 [ 1446.375867][T20255] usb 3-1: SerialNumber: ࠒ [ 1446.409555][T28823] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 1446.492917][T24655] usb 4-1: USB disconnect, device number 69 [ 1446.502343][T24655] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1446.539865][T24655] cp210x 4-1:0.0: device disconnected [ 1446.767904][T20255] usbhid 3-1:1.0: can't add hid device: -71 [ 1446.791590][T20255] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1446.872075][T20255] usb 3-1: USB disconnect, device number 26 [ 1447.577952][T28844] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6450'. [ 1447.608341][ T5910] usb 7-1: USB disconnect, device number 76 [ 1447.667407][T28840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.686542][T28845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.687031][T28840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.718556][T28845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.758152][T28840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6450'. [ 1447.768581][T28850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6453'. [ 1447.792059][T28845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6452'. [ 1447.794797][T28850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6453'. [ 1447.821243][T28853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6454'. [ 1447.880721][T28853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6454'. [ 1447.995865][T15836] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.014049][T15836] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.033247][T15836] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.054724][T13728] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.433537][ T5910] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1448.943530][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 1448.965023][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.503966][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.513328][ T5910] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1449.541894][ T5910] usb 3-1: config 0 has no interface number 0 [ 1449.554596][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.563002][ T5910] usb 3-1: too many endpoints for config 0 interface 109 altsetting 52: 41, using maximum allowed: 30 [ 1449.583595][ T5910] usb 3-1: config 0 interface 109 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 1449.597570][ T5910] usb 3-1: config 0 interface 109 has no altsetting 0 [ 1449.608907][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.637729][T28874] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6461'. [ 1449.692490][ T5910] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1449.703444][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.721629][ T5910] usb 3-1: Product: syz [ 1449.727449][ T5910] usb 3-1: Manufacturer: syz [ 1449.736274][ T5910] usb 3-1: SerialNumber: syz [ 1449.749613][ T5910] usb 3-1: config 0 descriptor?? [ 1450.596725][ T5915] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1450.697351][T28895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.707124][T28895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.747683][T28897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.757414][T28897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.823077][ T5915] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 1450.835827][ T5915] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.858588][ T5915] usb 7-1: config 8 has no interface number 0 [ 1450.867227][ T5915] usb 7-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1450.885828][ T5915] usb 7-1: config 8 interface 177 has no altsetting 0 [ 1450.931834][ T5915] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1450.993936][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.050765][ T5915] ir_toy 7-1:8.177: required endpoints not found [ 1451.675618][T24655] usb 3-1: USB disconnect, device number 27 [ 1452.196812][T28909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6469'. [ 1453.177294][T24655] usb 7-1: USB disconnect, device number 77 [ 1454.483731][T24655] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1454.609254][T28947] program syz.5.6478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1454.623659][T24655] usb 3-1: device descriptor read/64, error -71 [ 1454.708450][T28948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.752131][T28948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.882382][T24655] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1455.025275][T24655] usb 3-1: device descriptor read/64, error -71 [ 1455.089043][T28952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6480'. [ 1455.154046][T24655] usb usb3-port1: attempt power cycle [ 1455.525061][T28958] netlink: 'syz.6.6482': attribute type 13 has an invalid length. [ 1455.563526][T24655] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1455.597716][T24655] usb 3-1: device descriptor read/8, error -71 [ 1455.849286][ T5915] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1455.849303][T24655] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1455.864334][T24655] usb 3-1: device descriptor read/8, error -71 [ 1455.873132][T28962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.889549][T28962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.973914][T24655] usb usb3-port1: unable to enumerate USB device [ 1456.081685][ T5915] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1456.123294][ T5915] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.141852][ T5915] usb 4-1: config 8 has no interface number 0 [ 1456.198037][ T5915] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1456.272194][ T5915] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1456.299780][ T5915] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1456.339845][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.465562][T28968] mac80211_hwsim hwsim38 syzkaller0: Caught tx_queue_len zero misconfig [ 1456.487541][ T5915] ir_toy 4-1:8.177: required endpoints not found [ 1456.609625][T28968] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6486'. [ 1456.915295][T28982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6489'. [ 1456.955073][T28983] program syz.5.6488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1456.964859][T28983] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1457.029387][T28982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6489'. [ 1457.171540][T28985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.185884][T28985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.588323][T28995] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6493'. [ 1457.607896][T28995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6493'. [ 1457.712502][T28997] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1457.864592][T29001] openvswitch: netlink: Flow key attr not present in new flow. [ 1457.950562][T29004] netlink: 'syz.1.6496': attribute type 3 has an invalid length. [ 1458.022828][T29004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6496'. [ 1458.111506][T29009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.139126][T29009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.223575][T29011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6497'. [ 1458.929476][ T5851] usb 4-1: USB disconnect, device number 70 [ 1459.083703][T24655] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1459.245637][T24655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1459.261171][T24655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1459.290465][T24655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1459.327148][T24655] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1459.343340][T24655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.403030][T24655] usb 3-1: Product: syz [ 1459.407392][ T5851] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1459.426858][T24655] usb 3-1: Manufacturer: syz [ 1459.431496][T24655] usb 3-1: SerialNumber: syz [ 1459.463920][T24655] usb 3-1: config 0 descriptor?? [ 1459.565975][ T5851] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1459.577678][T29039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.587800][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.602740][ T5851] usb 4-1: config 0 descriptor?? [ 1459.608342][T29039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.626172][ T5851] cp210x 4-1:0.0: cp210x converter detected [ 1459.677412][T24655] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1459.804389][T29042] bond8: entered promiscuous mode [ 1459.810003][T29042] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1459.854739][T29044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6507'. [ 1460.010569][T29045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6500'. [ 1460.053538][ T5851] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1460.110678][ T5851] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1460.258782][T29055] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6511'. [ 1460.413623][ T5851] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1460.586010][ T5851] usb 7-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1460.605411][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.619460][ T5851] usb 7-1: Product: syz [ 1460.627116][ T5851] usb 7-1: Manufacturer: syz [ 1460.636503][ T5851] usb 7-1: SerialNumber: syz [ 1460.650671][ T5851] usb 7-1: config 0 descriptor?? [ 1460.665136][ T5851] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1461.129475][T29066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.141098][T29066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.164802][T29053] Cannot find add_set index 1 as target [ 1461.183923][ T5851] sonixb 7-1:0.0: Error reading register 00: -110 [ 1461.815220][ T5851] usb 3-1: USB disconnect, device number 32 [ 1462.208863][ T5851] usb 4-1: USB disconnect, device number 71 [ 1462.267577][ T5851] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1462.332701][ T5851] cp210x 4-1:0.0: device disconnected [ 1462.677790][T29092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.716300][T29092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.882512][ T30] audit: type=1804 audit(1764730765.626:3506): pid=29097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6518" name="bus" dev="ramfs" ino=149935 res=1 errno=0 [ 1463.495769][T20255] usb 7-1: USB disconnect, device number 78 [ 1463.590128][T29093] loop9: detected capacity change from 0 to 7 [ 1463.656158][T29093] Dev loop9: unable to read RDB block 7 [ 1463.663077][T29093] loop9: unable to read partition table [ 1463.669506][T29093] loop9: partition table beyond EOD, truncated [ 1463.814019][T29093] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1463.932055][T29103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6519'. [ 1464.555652][T29113] netlink: 'syz.6.6522': attribute type 29 has an invalid length. [ 1464.577863][T29113] netlink: 'syz.6.6522': attribute type 29 has an invalid length. [ 1464.600506][T29113] netlink: 500 bytes leftover after parsing attributes in process `syz.6.6522'. [ 1465.747775][T29125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.798816][T29125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.805094][T29140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.838467][T29140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.580454][T29149] bond0: option miimon: invalid value (18446744073707978753) [ 1467.605521][T29149] bond0: option miimon: allowed values 0 - 2147483647 [ 1467.691655][T29150] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 1467.698298][T29150] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1467.713789][T29149] tunl0: Caught tx_queue_len zero misconfig [ 1467.721480][T29150] vhci_hcd vhci_hcd.0: Device attached [ 1467.742905][T29149] netlink: 'syz.6.6531': attribute type 1 has an invalid length. [ 1467.803801][T29149] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 1467.930012][T29151] vhci_hcd: connection closed [ 1467.930242][ T3076] vhci_hcd: stop threads [ 1467.953281][ T3076] vhci_hcd: release socket [ 1467.993271][ T3076] vhci_hcd: disconnect device [ 1467.998253][ T5915] usb 40-1: SetAddress Request (2) to port 0 [ 1468.016803][ T5915] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1468.054691][ T5915] usb 40-1: enqueue for inactive port 0 [ 1468.474380][ T5915] usb usb40-port1: attempt power cycle [ 1468.528994][T29080] syz.2.6514 (29080): drop_caches: 1 [ 1469.082963][ T5915] usb usb40-port1: unable to enumerate USB device [ 1470.681088][ T5915] IPVS: starting estimator thread 0... [ 1470.785369][T29191] IPVS: using max 27 ests per chain, 64800 per kthread [ 1470.883896][T29194] bond14: entered allmulticast mode [ 1470.889874][T29194] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1470.898101][T29194] bridge0: port 10(bond14) entered blocking state [ 1470.908223][T29194] bridge0: port 10(bond14) entered disabled state [ 1470.926720][T29194] bond14: entered promiscuous mode [ 1471.013646][T29198] kvm: apic: phys broadcast and lowest prio [ 1471.041842][T29198] kvm: apic: phys broadcast and lowest prio [ 1471.458302][T29218] x_tables: duplicate underflow at hook 2 [ 1471.465039][T29219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.474962][T29219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.773803][ T5915] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1471.941756][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1471.959826][ T5915] usb 4-1: not running at top speed; connect to a high speed hub [ 1471.981542][ T5915] usb 4-1: config 3 has an invalid interface number: 146 but max is 0 [ 1471.996727][ T5915] usb 4-1: config 3 has no interface number 0 [ 1472.009126][ T5915] usb 4-1: config 3 interface 146 has no altsetting 0 [ 1472.019779][T29233] netlink: 'syz.6.6551': attribute type 25 has an invalid length. [ 1472.027758][T29233] netlink: 'syz.6.6551': attribute type 7 has an invalid length. [ 1472.035644][T29233] netlink: 'syz.6.6551': attribute type 1 has an invalid length. [ 1472.055895][T29233] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6551'. [ 1472.078900][ T5915] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=56.ea [ 1472.102602][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.113432][T29233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.125130][ T5915] usb 4-1: Product: syz [ 1472.135543][ T5915] usb 4-1: Manufacturer: syz [ 1472.146967][ T5915] usb 4-1: SerialNumber: syz [ 1472.380665][ T5915] cdc_ether 4-1:3.146: More than one union descriptor, skipping ... [ 1472.415452][ T5915] usb 4-1: bad CDC descriptors [ 1472.441330][T29239] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1472.457087][ T5915] usb 4-1: unsupported MDLM descriptors [ 1472.483692][ T5915] usb 4-1: USB disconnect, device number 72 [ 1472.990950][ T30] audit: type=1326 audit(1764730775.756:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29245 comm="syz.5.6556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f610118f749 code=0x0 [ 1473.148923][T29255] netlink: 'syz.5.6556': attribute type 4 has an invalid length. [ 1473.219539][T29254] program syz.6.6558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1474.513551][T24655] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1474.683029][T29281] fuse: Bad value for 'fd' [ 1474.697540][T24655] usb 3-1: config 0 has no interfaces? [ 1474.708185][T29281] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 1474.724469][T24655] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1474.737049][T29281] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 1474.750645][T24655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.780189][T24655] usb 3-1: Product: syz [ 1474.780212][T24655] usb 3-1: Manufacturer: syz [ 1474.780228][T24655] usb 3-1: SerialNumber: syz [ 1474.792653][T24655] usb 3-1: config 0 descriptor?? [ 1474.976355][ T30] audit: type=1326 audit(1764730777.736:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1d38f749 code=0x7ffc0000 [ 1475.012657][ T30] audit: type=1326 audit(1764730777.736:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7faf1d38f749 code=0x7ffc0000 [ 1475.013833][T29274] vlan2: entered promiscuous mode [ 1475.063848][ T30] audit: type=1326 audit(1764730777.736:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1d38f749 code=0x7ffc0000 [ 1475.079774][T29274] veth0: entered promiscuous mode [ 1475.088425][T29289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.114841][T29289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.127611][ T30] audit: type=1326 audit(1764730777.736:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7faf1d38f749 code=0x7ffc0000 [ 1475.152248][ T30] audit: type=1326 audit(1764730777.736:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1d38f749 code=0x7ffc0000 [ 1475.174753][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.187634][ T30] audit: type=1326 audit(1764730777.736:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7faf1d38f749 code=0x7ffc0000 [ 1475.187703][ T30] audit: type=1326 audit(1764730777.736:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1d38f749 code=0x7ffc0000 [ 1475.187744][ T30] audit: type=1326 audit(1764730777.736:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf1d38df90 code=0x7ffc0000 [ 1475.187786][ T30] audit: type=1326 audit(1764730777.736:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29285 comm="syz.1.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1d38f749 code=0x7ffc0000 [ 1475.216219][T29297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.216657][T29297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.256138][T20255] hid_parser_main: 43 callbacks suppressed [ 1475.256161][T20255] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1475.309806][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.480535][T20255] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1475.823585][T20255] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1475.983993][T20255] usb 4-1: Using ep0 maxpacket: 32 [ 1475.992102][T29315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6575'. [ 1476.005161][T20255] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1476.016370][T20255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.024644][T20255] usb 4-1: Product: syz [ 1476.028898][T20255] usb 4-1: Manufacturer: syz [ 1476.033619][T20255] usb 4-1: SerialNumber: syz [ 1476.051738][T20255] usb 4-1: config 0 descriptor?? [ 1476.061148][T20255] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1476.105790][T29315] team0: Port device team_slave_0 removed [ 1476.511245][T20255] gspca_stk1135: reg_w 0x0 err -71 [ 1476.526534][T20255] gspca_stk1135: serial bus timeout: status=0x00 [ 1476.533011][T20255] gspca_stk1135: Sensor write failed [ 1476.540157][T20255] gspca_stk1135: serial bus timeout: status=0x00 [ 1476.547711][T20255] gspca_stk1135: Sensor write failed [ 1476.553205][T20255] gspca_stk1135: serial bus timeout: status=0x00 [ 1476.560216][T20255] gspca_stk1135: Sensor read failed [ 1476.565890][T20255] gspca_stk1135: serial bus timeout: status=0x00 [ 1476.606574][T29328] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1476.615686][T29328] team0: Port device batadv1 added [ 1476.644471][T20255] gspca_stk1135: Sensor read failed [ 1476.649711][T20255] gspca_stk1135: Detected sensor type unknown (0x0) [ 1476.670876][T20255] gspca_stk1135: serial bus timeout: status=0x00 [ 1476.684693][T20255] gspca_stk1135: Sensor read failed [ 1476.698354][T20255] gspca_stk1135: serial bus timeout: status=0x00 [ 1476.713737][T20255] gspca_stk1135: Sensor read failed [ 1476.720758][T20255] gspca_stk1135: serial bus timeout: status=0x00 [ 1476.758901][T20255] gspca_stk1135: Sensor write failed [ 1476.773473][T20255] gspca_stk1135: serial bus timeout: status=0x00 [ 1476.785782][T29332] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6578'. [ 1476.802460][T20255] gspca_stk1135: Sensor write failed [ 1476.808157][T20255] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1476.832572][T29328] hub 9-0:1.0: USB hub found [ 1476.867781][T29328] hub 9-0:1.0: 1 port detected [ 1477.069042][T20255] usb 4-1: USB disconnect, device number 73 [ 1477.465934][ T918] usb 3-1: USB disconnect, device number 33 [ 1477.992137][T29346] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1478.041992][T29346] bond7 (unregistering): Released all slaves [ 1478.793913][T24655] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1478.955819][T24655] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1479.000884][T24655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.034282][T29365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.048367][T24655] usb 7-1: config 0 descriptor?? [ 1479.087468][T29365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.305867][T24655] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1479.463548][ T5851] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1479.509504][T29356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.527508][T24655] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1479.557011][T29356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.564104][T24655] [drm] Initialized udl on minor 2 [ 1479.690670][ T5851] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1479.703534][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.735613][T24655] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1479.745814][ T5851] usb 4-1: Product: syz [ 1479.778800][ T5851] usb 4-1: Manufacturer: syz [ 1479.784461][T24655] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1479.796422][ T5851] usb 4-1: SerialNumber: syz [ 1479.827873][T24655] usb 7-1: USB disconnect, device number 80 [ 1479.835268][ T5910] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1479.848062][ T5851] usb 4-1: config 0 descriptor?? [ 1479.881624][T29375] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6590'. [ 1479.899703][ T5851] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1479.908251][ T5910] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1480.498481][T29390] ptrace attach of "./syz-executor exec"[20038] was attempted by "\x09   \x07  \x0a /dev/vmci [ 1480.879636][T29403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1481.338999][T29406] loop6: detected capacity change from 0 to 7 [ 1481.369453][T29406] Dev loop6: unable to read RDB block 7 [ 1481.388663][T29406] loop6: unable to read partition table [ 1481.422194][T29406] loop6: partition table beyond EOD, truncated [ 1481.447492][T29406] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1482.273837][ T5851] usb 4-1: USB disconnect, device number 74 [ 1482.291127][T29430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.339595][T29430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.840756][ T5910] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1484.187819][ T5910] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1484.196329][ T5910] usb 3-1: config 0 has no interface number 0 [ 1484.484110][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.490470][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.504566][ T5910] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1484.515259][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.795734][ T5910] usb 3-1: config 0 descriptor?? [ 1484.831440][T24655] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1484.840210][ T5910] usb 3-1: selecting invalid altsetting 1 [ 1484.849144][ T5910] dvb_ttusb_budget: ttusb_init_controller: error [ 1484.869623][ T5910] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1484.993608][T24655] usb 7-1: Using ep0 maxpacket: 8 [ 1485.000915][T24655] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 1485.031887][T24655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 256, setting to 64 [ 1485.077923][T24655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.141280][ T5910] DVB: Unable to find symbol cx22700_attach() [ 1485.170177][T24655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.256634][T24655] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1485.268432][T29458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.289904][T24655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1485.300738][T29458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.322742][T24655] usb 7-1: SerialNumber: syz [ 1485.349848][T24655] usb 7-1: config 0 descriptor?? [ 1485.375956][T24655] hso 7-1:0.0: Can't find BULK IN endpoint [ 1485.401028][ T5910] DVB: Unable to find symbol tda10046_attach() [ 1485.439016][ T5910] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1485.454245][T29463] loop6: detected capacity change from 0 to 7 [ 1485.469626][ T5910] usb 3-1: USB disconnect, device number 34 [ 1485.477135][T29463] Dev loop6: unable to read RDB block 7 [ 1485.508782][T29463] loop6: unable to read partition table [ 1485.524175][T29463] loop6: partition table beyond EOD, truncated [ 1485.543698][T29463] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1485.612232][T24655] usb 7-1: USB disconnect, device number 81 [ 1485.742901][T29473] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1486.163520][ T5910] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1486.284254][T29488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.352591][T29488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.371423][ T5910] usb 3-1: config index 0 descriptor too short (expected 149, got 148) [ 1486.412041][ T5910] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.461604][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1486.517186][ T5910] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1486.544139][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1486.575869][ T5910] usb 3-1: SerialNumber: syz [ 1486.616535][ T5910] usb 3-1: 0:2 : does not exist [ 1486.849301][ T5910] usb 3-1: USB disconnect, device number 35 [ 1487.564220][T29514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.572937][T29514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.823590][ T5910] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1487.985717][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1488.010765][ T5910] usb 3-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 1488.025499][ T5910] usb 3-1: config 66 interface 0 has no altsetting 0 [ 1488.039723][ T5910] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1488.067905][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.094022][ T5910] usb 3-1: Product: syz [ 1488.106861][ T5910] usb 3-1: Manufacturer: syz [ 1488.121727][ T5910] usb 3-1: SerialNumber: syz [ 1488.158369][T29513] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1488.423694][T29518] loop6: detected capacity change from 0 to 7 [ 1488.440976][T21551] Dev loop6: unable to read RDB block 7 [ 1488.467993][T21551] loop6: unable to read partition table [ 1488.491028][T21551] loop6: partition table beyond EOD, truncated [ 1488.516159][T29518] Dev loop6: unable to read RDB block 7 [ 1488.530920][T29518] loop6: unable to read partition table [ 1488.554352][T29518] loop6: partition table beyond EOD, truncated [ 1488.562387][T29518] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1488.688784][T29523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.698159][T29523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.234960][ T5910] ati_remote2 3-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 1489.265518][ T5910] usb 3-1: USB disconnect, device number 36 [ 1490.008198][T20254] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1490.174550][T20254] usb 3-1: Using ep0 maxpacket: 16 [ 1490.182488][T20254] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 1490.192191][T20254] usb 3-1: config 0 has no interface number 0 [ 1490.199268][T20254] usb 3-1: config 0 interface 48 has no altsetting 0 [ 1490.238994][T20254] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 1490.280439][T20254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.288597][T20254] usb 3-1: Product: syz [ 1490.292779][T20254] usb 3-1: Manufacturer: syz [ 1490.297465][T20254] usb 3-1: SerialNumber: syz [ 1490.312939][T20254] usb 3-1: config 0 descriptor?? [ 1490.570347][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6631'. [ 1490.607324][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6631'. [ 1490.645557][T29545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.667686][T29545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.690923][T29547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.700869][ T918] usb 3-1: USB disconnect, device number 37 [ 1490.734439][T29547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.845245][T20255] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1490.869337][T29550] netlink: 'syz.6.6634': attribute type 2 has an invalid length. [ 1490.878696][T20255] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1490.899567][T29550] !: entered promiscuous mode [ 1490.914405][T29550] netlink: 'syz.6.6634': attribute type 2 has an invalid length. [ 1491.154483][T29551] fido_id[29551]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1491.910979][T29565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6638'. [ 1491.945082][T29565] tipc: Enabling not permitted [ 1491.990491][T29565] tipc: Enabling of bearer rejected, failed to enable media [ 1492.076610][T29568] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6639'. [ 1492.386345][T29574] trusted_key: encrypted_key: insufficient parameters specified [ 1492.821862][T29584] netlink: 'syz.6.6642': attribute type 7 has an invalid length. [ 1492.964320][T29589] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6645'. [ 1492.986858][T29589] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6645'. [ 1493.153515][T20254] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1493.204571][T29593] fuse: Bad value for 'user_id' [ 1493.243637][T29593] fuse: Bad value for 'user_id' [ 1493.306403][T20254] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1493.325086][T20254] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.353997][T20254] usb 7-1: config 220 has no interface number 2 [ 1493.404007][T20254] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1493.450203][T20254] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1493.500407][T20254] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1493.519339][T20254] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1493.575580][T20254] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1493.593615][T20254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.628933][T20254] usb 7-1: Product: syz [ 1493.643475][T20254] usb 7-1: Manufacturer: syz [ 1493.648115][T20254] usb 7-1: SerialNumber: syz [ 1493.741245][T24655] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1493.880917][T29584] ip6tnl0: Caught tx_queue_len zero misconfig [ 1493.933997][T24655] usb 3-1: Using ep0 maxpacket: 8 [ 1493.945286][T24655] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1493.964158][T29584] netlink: 'syz.6.6642': attribute type 7 has an invalid length. [ 1493.976325][T24655] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1494.008795][T24655] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1494.018971][ T5910] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1494.050184][T24655] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1494.076649][T29584] netlink: 'syz.6.6642': attribute type 7 has an invalid length. [ 1494.078287][T29615] loop6: detected capacity change from 0 to 7 [ 1494.104654][T24655] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1494.122439][T29615] Dev loop6: unable to read RDB block 7 [ 1494.183560][T29615] loop6: unable to read partition table [ 1494.196381][T24655] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1494.232109][T29615] loop6: partition table beyond EOD, truncated [ 1494.294310][T29615] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1494.310941][T24655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.333306][ T5910] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.382434][T20254] usb 7-1: selecting invalid altsetting 0 [ 1494.433638][ T5910] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.448213][T20254] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1494.462969][ T5203] Dev loop6: unable to read RDB block 7 [ 1494.471463][ T5203] loop6: unable to read partition table [ 1494.483210][T20254] uvcvideo 7-1:220.0: No valid video chain found. [ 1494.516523][ T5203] loop6: partition table beyond EOD, truncated [ 1494.527463][ T5910] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1494.543107][T20254] usb 7-1: selecting invalid altsetting 0 [ 1494.549484][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.561244][T20254] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1494.575149][ T5910] usb 4-1: Product: syz [ 1494.590750][ T5910] usb 4-1: Manufacturer: syz [ 1494.603778][T20254] usb 7-1: USB disconnect, device number 82 [ 1494.610266][ T5910] usb 4-1: SerialNumber: syz [ 1494.628114][T24655] usb 3-1: usb_control_msg returned -32 [ 1494.635968][T24655] usbtmc 3-1:16.0: can't read capabilities [ 1494.666731][T29601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.687956][T29601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.827956][T29623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6655'. [ 1494.842899][T29627] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6656'. [ 1494.860262][T29627] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6656'. [ 1495.291754][T20255] usb 3-1: USB disconnect, device number 38 [ 1495.532664][T29642] qrtr: Invalid version 255 [ 1495.541701][T29642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.587498][T29642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.696947][ T5910] cdc_ncm 4-1:1.0: bind() failure [ 1496.707956][ T5910] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1496.712384][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1496.712399][ T30] audit: type=1326 audit(1764730799.476:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29649 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610118f749 code=0x7ffc0000 [ 1496.743872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1496.853505][ T5910] cdc_ncm 4-1:1.1: bind() failure [ 1496.885462][ T30] audit: type=1326 audit(1764730799.516:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29649 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f610118f749 code=0x7ffc0000 [ 1496.895721][ T5910] usb 4-1: USB disconnect, device number 75 [ 1496.907900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1496.924163][T29656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.998351][T29656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.063573][ T30] audit: type=1326 audit(1764730799.526:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29649 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610118f749 code=0x7ffc0000 [ 1497.170340][ T30] audit: type=1326 audit(1764730799.616:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29649 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610118f749 code=0x7ffc0000 [ 1497.192785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1497.426823][T29664] loop6: detected capacity change from 0 to 7 [ 1497.446934][T29664] Dev loop6: unable to read RDB block 7 [ 1497.452553][T29664] loop6: unable to read partition table [ 1497.477934][T29664] loop6: partition table beyond EOD, truncated [ 1497.513576][T29664] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1498.077602][T29676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6669'. [ 1498.092532][T29676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6669'. [ 1498.492150][ T30] audit: type=1326 audit(1764730801.176:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29689 comm="syz.3.6672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd631f8f749 code=0x0 [ 1498.524205][T29688] netlink: 'syz.5.6671': attribute type 29 has an invalid length. [ 1498.593917][T29697] netlink: 'syz.5.6671': attribute type 29 has an invalid length. [ 1498.707369][T29700] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6675'. [ 1498.771923][T29700] vlan2: entered allmulticast mode [ 1498.855743][T29700] gretap0: entered allmulticast mode [ 1498.996549][T29706] loop6: detected capacity change from 0 to 7 [ 1499.054806][T29706] Dev loop6: unable to read RDB block 7 [ 1499.083671][T29706] loop6: unable to read partition table [ 1499.121426][T29706] loop6: partition table beyond EOD, truncated [ 1499.148983][T29706] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1499.199906][T29712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6676'. [ 1499.373764][ T5203] Dev loop6: unable to read RDB block 7 [ 1499.391047][ T5203] loop6: unable to read partition table [ 1499.403518][T20255] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1499.414920][ T5203] loop6: partition table beyond EOD, truncated [ 1499.543569][T20255] usb 3-1: device descriptor read/64, error -71 [ 1499.668257][T29717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.710005][T29717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.790059][T20255] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1499.963623][T20255] usb 3-1: device descriptor read/64, error -71 [ 1500.074227][T20255] usb usb3-port1: attempt power cycle [ 1500.453700][T20255] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1500.474478][T20255] usb 3-1: device descriptor read/8, error -71 [ 1500.551665][T29733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6683'. [ 1500.753642][T20255] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1500.852548][T20255] usb 3-1: device descriptor read/8, error -71 [ 1500.863051][T29738] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6684'. [ 1500.876995][T29738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1500.942763][T29741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.015096][T20255] usb usb3-port1: unable to enumerate USB device [ 1501.029373][T29741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.109852][T29746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.148433][T29746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.608213][T29754] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6689'. [ 1501.951201][T29760] loop3: detected capacity change from 0 to 7 [ 1501.972399][T29760] Dev loop3: unable to read RDB block 7 [ 1501.993829][T29760] loop3: unable to read partition table [ 1502.003728][T29760] loop3: partition table beyond EOD, truncated [ 1502.028443][T29760] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1502.664056][T20254] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1502.833483][T20254] usb 3-1: Using ep0 maxpacket: 32 [ 1502.842328][T20254] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 1502.873176][T20254] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1502.910697][T20254] usb 3-1: Product: syz [ 1502.920770][T20254] usb 3-1: Manufacturer: syz [ 1502.943507][T20254] usb 3-1: SerialNumber: syz [ 1503.012972][T20254] usb 3-1: config 0 descriptor?? [ 1503.028094][T20254] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1503.058978][T20254] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1503.183559][T20255] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 1503.231733][T29770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6693'. [ 1503.356201][T20255] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1503.366282][T20255] usb 7-1: not running at top speed; connect to a high speed hub [ 1503.382804][T20255] usb 7-1: config 6 has an invalid interface number: 30 but max is 0 [ 1503.402968][T20255] usb 7-1: config 6 has no interface number 0 [ 1503.413747][T20255] usb 7-1: config 6 interface 30 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 1503.436845][T20255] usb 7-1: config 6 interface 30 altsetting 0 endpoint 0x7 has invalid maxpacket 40968, setting to 64 [ 1503.465018][T20255] usb 7-1: config 6 interface 30 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1503.489477][T29783] bond2: entered allmulticast mode [ 1503.499286][T29783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1503.502739][T20254] usb 3-1: USB disconnect, device number 43 [ 1503.506379][T20255] usb 7-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11 [ 1503.521203][T20255] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.524961][T29783] bridge0: port 1(bond2) entered blocking state [ 1503.529472][T20255] usb 7-1: Product: syz [ 1503.539753][T20255] usb 7-1: Manufacturer: syz [ 1503.544452][T20255] usb 7-1: SerialNumber: syz [ 1503.557763][T29778] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1503.593684][T29783] bridge0: port 1(bond2) entered disabled state [ 1503.602340][T29783] bond2: entered promiscuous mode [ 1503.781936][T20255] usbtest 7-1:6.30: usb test device [ 1503.795762][T29788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.799085][T20255] usbtest 7-1:6.30: full-speed {control in/out iso-out} tests (+alt) [ 1503.815941][T29788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.862753][T20255] usb 7-1: USB disconnect, device number 83 [ 1504.025048][T29792] netlink: 476 bytes leftover after parsing attributes in process `syz.5.6702'. [ 1504.035271][T29792] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6702'. [ 1504.793506][ T5851] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1504.955713][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.987496][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.017732][ T5851] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1505.073596][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.154621][ T5851] usb 4-1: config 0 descriptor?? [ 1505.364987][T29809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.552140][T29809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.663763][ T5851] uclogic 0003:5543:0042.0088: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 1505.932567][ T5851] usb 4-1: USB disconnect, device number 76 [ 1506.011929][T29832] fido_id[29832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1506.686003][T29838] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6713'. [ 1506.943511][ T5851] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1507.084942][ T5851] usb 4-1: device descriptor read/64, error -71 [ 1507.194469][T29843] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1507.244433][T29843] gretap1: entered allmulticast mode [ 1507.323155][T29847] syzkaller0: entered promiscuous mode [ 1507.333535][ T5851] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1507.361901][T29847] syzkaller0: entered allmulticast mode [ 1507.504860][ T5851] usb 4-1: device descriptor read/64, error -71 [ 1507.518352][T29850] loop3: detected capacity change from 0 to 7 [ 1507.527467][T21399] Dev loop3: unable to read RDB block 7 [ 1507.533075][T21399] loop3: unable to read partition table [ 1507.539510][T21399] loop3: partition table beyond EOD, truncated [ 1507.545593][T29852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.556959][T29852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.567254][T29850] Dev loop3: unable to read RDB block 7 [ 1507.572860][T29850] loop3: unable to read partition table [ 1507.581276][T29850] loop3: partition table beyond EOD, truncated [ 1507.587998][T29850] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1507.616014][ T5851] usb usb4-port1: attempt power cycle [ 1507.653511][T20254] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1507.745727][T29860] netlink: 'syz.6.6721': attribute type 4 has an invalid length. [ 1507.754242][T29860] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6721'. [ 1507.779989][T29860] .`: renamed from bond0 (while UP) [ 1507.825251][T20254] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1507.856084][T20254] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1507.877873][T20254] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1507.906460][T20254] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1507.920148][T29862] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1507.934190][T20254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.944695][T29862] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1507.955798][T29847] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1507.963631][ T5851] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1508.005246][ T5851] usb 4-1: device descriptor read/8, error -71 [ 1508.248262][ T5851] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1508.264287][ T5851] usb 4-1: device descriptor read/8, error -71 [ 1508.353247][T29874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.357322][T29874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.358783][T29874] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6725'. [ 1508.373990][ T5851] usb usb4-port1: unable to enumerate USB device [ 1508.443567][ T5910] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1508.593655][ T5910] usb 7-1: Using ep0 maxpacket: 8 [ 1508.609608][ T5910] usb 7-1: config 127 has an invalid interface number: 171 but max is 1 [ 1508.625119][ T5910] usb 7-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.651955][ T5910] usb 7-1: config 127 has no interface number 1 [ 1508.672932][ T5910] usb 7-1: config 127 interface 171 has no altsetting 0 [ 1508.697855][ T5910] usb 7-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1508.718060][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.732567][ T5910] usb 7-1: Product: syz [ 1508.741175][ T5910] usb 7-1: Manufacturer: syz [ 1508.752057][ T5910] usb 7-1: SerialNumber: syz [ 1509.357581][T29883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.373327][T29883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.031010][T29889] loop3: detected capacity change from 0 to 7 [ 1510.043431][T29889] Dev loop3: unable to read RDB block 7 [ 1510.050550][T29889] loop3: unable to read partition table [ 1510.065443][T29889] loop3: partition table beyond EOD, truncated [ 1510.080642][T29889] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1510.272684][T20254] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1510.295043][T20254] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input166 [ 1510.394382][T29891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.440309][T20254] usb 3-1: USB disconnect, device number 44 [ 1510.446369][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1510.459039][T29891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.068303][ T5910] xr_serial 7-1:127.171: xr_serial converter detected [ 1512.092871][ T5910] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1512.124969][ T5910] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1512.212486][ T5910] usb 7-1: USB disconnect, device number 84 [ 1512.247087][T29919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1512.257457][ T5910] xr_serial 7-1:127.171: device disconnected [ 1512.398563][T29919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1512.435023][T29926] loop3: detected capacity change from 0 to 7 [ 1512.451841][T29926] Dev loop3: unable to read RDB block 7 [ 1512.468232][T29926] loop3: unable to read partition table [ 1512.483068][T29926] loop3: partition table beyond EOD, truncated [ 1512.533552][T29926] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1512.785990][T29933] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6739'. [ 1512.829860][T29933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1513.286966][T29952] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 1513.298869][T29952] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 1513.307271][T29952] CPU: 1 UID: 0 PID: 29952 Comm: syz.2.6747 Not tainted syzkaller #0 PREEMPT(full) [ 1513.316621][T29952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1513.326659][T29952] RIP: 0010:fd_install+0x57/0x3d0 [ 1513.331669][T29952] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 c7 4c e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 1513.351260][T29952] RSP: 0018:ffffc90004d77ca0 EFLAGS: 00010202 [ 1513.357330][T29952] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 1513.365294][T29952] RDX: ffffc90010165000 RSI: 00000000000000b4 RDI: 00000000000000b5 [ 1513.373255][T29952] RBP: dffffc0000000000 R08: ffff88802567583b R09: 1ffff11004aceb07 [ 1513.381215][T29952] R10: dffffc0000000000 R11: ffffed1004aceb08 R12: 0000000000000008 [ 1513.389173][T29952] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88803392e1c0 [ 1513.397138][T29952] FS: 00007fae63ac06c0(0000) GS:ffff8881261c5000(0000) knlGS:0000000000000000 [ 1513.406056][T29952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1513.412623][T29952] CR2: 00007fae63abff98 CR3: 0000000032702000 CR4: 00000000003526f0 [ 1513.420581][T29952] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1513.428540][T29952] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1513.436499][T29952] Call Trace: [ 1513.439766][T29952] [ 1513.442684][T29952] ? do_mq_open+0x595/0x770 [ 1513.447185][T29952] do_mq_open+0x5a0/0x770 [ 1513.451509][T29952] ? __pfx_do_mq_open+0x10/0x10 [ 1513.456351][T29952] ? __pfx_do_futex+0x10/0x10 [ 1513.461024][T29952] __x64_sys_mq_open+0x16a/0x1c0 [ 1513.465963][T29952] ? fd_install+0x95/0x3d0 [ 1513.470368][T29952] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1513.475819][T29952] ? do_syscall_64+0xbe/0xf80 [ 1513.480486][T29952] do_syscall_64+0xfa/0xf80 [ 1513.484972][T29952] ? lockdep_hardirqs_on+0x98/0x140 [ 1513.490163][T29952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.496213][T29952] ? clear_bhb_loop+0x60/0xb0 [ 1513.500877][T29952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.506753][T29952] RIP: 0033:0x7fae62b8f749 [ 1513.511155][T29952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.530746][T29952] RSP: 002b:00007fae63ac0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1513.539156][T29952] RAX: ffffffffffffffda RBX: 00007fae62de6090 RCX: 00007fae62b8f749 [ 1513.547121][T29952] RDX: 0000000000000118 RSI: 0000000000000040 RDI: 0000200000000040 [ 1513.555091][T29952] RBP: 00007fae62c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1513.563048][T29952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1513.571002][T29952] R13: 00007fae62de6128 R14: 00007fae62de6090 R15: 00007fae62f0fa28 [ 1513.578967][T29952] [ 1513.581983][T29952] Modules linked in: [ 1513.585898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1513.592371][T29952] ---[ end trace 0000000000000000 ]--- [ 1513.671335][T29952] RIP: 0010:fd_install+0x57/0x3d0 [ 1513.683015][T29961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.692226][T29961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.735686][T29963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.757805][T29952] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 c7 4c e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 1513.799237][T29963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.807818][T29952] RSP: 0018:ffffc90004d77ca0 EFLAGS: 00010202 [ 1513.816588][T29952] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 1513.830413][T29952] RDX: ffffc90010165000 RSI: 00000000000000b4 RDI: 00000000000000b5 [ 1513.843883][T29952] RBP: dffffc0000000000 R08: ffff88802567583b R09: 1ffff11004aceb07 [ 1513.871857][T29952] R10: dffffc0000000000 R11: ffffed1004aceb08 R12: 0000000000000008 [ 1513.880307][T29952] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88803392e1c0 [ 1513.888710][T29952] FS: 00007fae63ac06c0(0000) GS:ffff8881261c5000(0000) knlGS:0000000000000000 [ 1513.898265][T29952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1513.917774][T29952] CR2: 000000110c3db79f CR3: 0000000032702000 CR4: 00000000003526f0 [ 1513.933621][T24655] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1513.944129][T29952] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1513.952851][T29952] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1513.989154][T29952] Kernel panic - not syncing: Fatal exception [ 1513.995710][T29952] Kernel Offset: disabled [ 1514.000040][T29952] Rebooting in 86400 seconds..