last executing test programs: 1m50.944008257s ago: executing program 1 (id=987): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0xfffffffe, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback, 0xfffffffd}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @loopback}}}, 0x108) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) close_range(r0, 0xffffffffffffffff, 0x0) 1m50.260877648s ago: executing program 1 (id=988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x80, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x1108) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b6, 0x0, 0x25}]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) fsetxattr$security_capability(r4, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x9, 0x1}, {0x7, 0x3}], r5}, 0x18, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m49.964823765s ago: executing program 1 (id=989): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/96, 0x60, 0x12002, 0x0, 0x0) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/247, 0xf7, 0x102, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async) recvfrom$inet(r0, &(0x7f00000001c0)=""/223, 0xdf, 0x20, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x1, 0x109101) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) (async) shmget(0x2, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000340)=0x8, 0x4) (async) r3 = openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x440100, 0x100, 0x12}, 0x18) (async) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000440)={r4, r5/1000+10000}, 0x10) (async) fstatfs(r2, &(0x7f0000000480)=""/83) recvfrom$inet(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x40000101, &(0x7f0000001500)={0x2, 0x4e22, @empty}, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) (async) recvfrom$inet(r1, &(0x7f0000001540)=""/137, 0x89, 0x2, &(0x7f0000001600)={0x2, 0x4e22, @broadcast}, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x64}, 0x1, 0x0, 0x0, 0x4028001}, 0x41) 1m49.044045956s ago: executing program 1 (id=990): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x20, 0x68, 0x400, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x3d}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018224500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000208000000003300020900"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd6018232500282cfffe8000000000000000000000000000bbfe8000"/50], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)={0x44, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x32, 0x124, 0x0, 0x0, @str='09\xfb\'\x14Z\x86\x98\xa0\xca$s\xef!\x92\xf3\xd4W\x9d\xc1\xe3\x89\xa7[_e$>&X\xe4\xe9Ym\xa4\x93\"\xf2\xbdM\xad]*\xbd4.'}]}, 0x44}], 0x1}, 0x4000880) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r6, &(0x7f0000000100)='./file0\x00', 0x220) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x9, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) getpid() r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r7, &(0x7f0000000e00)='1m', 0x2, 0x200048d0, &(0x7f0000000e40)={0x2, 0x4e23, @empty}, 0x10) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) 1m46.546654558s ago: executing program 1 (id=996): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0xc00) 1m45.972496225s ago: executing program 1 (id=999): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000100)={0x0, 0x200, 0x80, 0x20203843, 0x2, [0x2, 0x0, 0x0, r6], [0x800, 0x0, 0x0, 0x9], [], [0xfffffffffffffffe]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x34, 0x2, 0x7, 0x20, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x80, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r7, 0x4, 0x1, 0x9, 0x9, 0x4d, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x80, 0x7, 0x800}}) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005800128008000100677265004c00028008000600ac1414aa050017000000000005000800020000000800150090650900060003000100000005000a00010000000900000000000000080007007f000001060010004e220000"], 0x78}}, 0x800) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc0040, 0x0) fcntl$setlease(r9, 0x400, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) ioctl$FICLONE(r10, 0x40049409, r10) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m45.707237028s ago: executing program 32 (id=999): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000100)={0x0, 0x200, 0x80, 0x20203843, 0x2, [0x2, 0x0, 0x0, r6], [0x800, 0x0, 0x0, 0x9], [], [0xfffffffffffffffe]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x34, 0x2, 0x7, 0x20, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x80, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r7, 0x4, 0x1, 0x9, 0x9, 0x4d, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x80, 0x7, 0x800}}) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005800128008000100677265004c00028008000600ac1414aa050017000000000005000800020000000800150090650900060003000100000005000a00010000000900000000000000080007007f000001060010004e220000"], 0x78}}, 0x800) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc0040, 0x0) fcntl$setlease(r9, 0x400, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) ioctl$FICLONE(r10, 0x40049409, r10) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 10.652043491s ago: executing program 4 (id=1412): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0x10}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r7 = open(0x0, 0x64842, 0x389b0d52417bb201) pwritev2(r7, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) r10 = socket$qrtr(0x2a, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100001042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b13000001c000000100008000000000677470000c00028008000300fbffffff"], 0x38}}, 0x20000844) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) write$binfmt_aout(r12, 0x0, 0xc8) sendmsg$sock(r10, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x40000c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 8.996375859s ago: executing program 3 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$ethtool(0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x1, 0x6) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xb) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (rerun: 64) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) (async) pipe2(&(0x7f0000000040), 0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) (async) socket$inet6(0xa, 0x200000000003, 0x87) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 8.456670878s ago: executing program 3 (id=1425): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000411fbf2740736409763a3d9e010000001df430246b675d5a000a74000000060a09040000000000000000020000000900010473797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000010800024000000002080005400000000f08000340000000000800064000000001140000001100010000000000000000000000000a"], 0x9c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {}, 0x1, 0x1, 0x70}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2f, 0xf3, 0x80000001, 0x1008, 0x726, 0x6, 0x1ff, 0x7f, 0x27, 0x10, {0x52b2, 0x100040}, 0x5, 0xfd}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x220, 0x0, 0x0, 0x75}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x8010, r5, 0x0) syz_usb_connect(0x4, 0x548, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x8, 0xa2, 0x3, 0x20, 0x4b}, 0xb2, &(0x7f0000000c80)=ANY=[@ANYBLOB="050fb2000503100b0b100104210005060100038810039841f57ffb9eeddfcd36cc8c9a87e88b2eab75ca0c936d35742ed846a4eb7073289c23e95785c1e6fb6ee667252d844a925c2393c1e832a30c4f72568162da2520e05ff4920ac60f69de95e5d469bc5ede4985fc060000008c3230471b75871ef1345a8e3f817a1ed2ee3acd27247d386181150cc6b566222d7e405f6fe7daf21a436ab3221048e6eef0368803100b14100409bb46d5f70000000000"], 0x2, [{0x84, &(0x7f0000000d40)=@string={0x84, 0x3, "f9b718d7f94a5c1232aaa3586d21b36bca96e0e2153cbfbe5b0b1f5c1374dd5414e10c5759e603052d832e3aee39a148acea21353d7b2a9eaf963f1b6a3b707569b8ae9490a74ee03545dd82da059557731e8217cab7b1c0b9b8eb30baedf6d2ffc5e963cca62c8d01a88b06aec213dc9ec1f8f512351fa2cdae20dec89feeba484d"}}, {0x91, &(0x7f0000000e00)=@string={0x91, 0x3, "d4ef23ba170d3036bc62c060c4b6b7487913de60801cd71e2ece516594e18a18805b87da5440ea1303729033eec6f60ffe0939c507d775b9e46d0942bfed87bf85da028b5c149c55626119ff8dc882ade810a7d3b7aaf1aa6a83985799cbba5edce2ac3d46ed8b22a829b0770c80d03a86acb5047b775c5bff3e1f53c2828353afb7a7aaa7db7c466a961997a70c3f"}}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r10, 0x3a}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)}], 0x1}, 0x894) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001000)="46ea7526d0f97eb6238067ce44219662668210be8ce9485a6a70e278b8b08c06fc3e0e60116e09a28d5a4a3e3985abd505095876277fe9cccc5d087f1c144b7db4b7dee1ef3922c8795f41c26cad0e33608d5500b0fbbdea41f8bfaedbfbd9b29d2cc49f905267a51530a9edc9c2a551cbf0b23b82e6b7df0154", &(0x7f0000000640)="0b6b2850941c33e494d6729bf54ad358cae0421237f2c5f4b24d2d86521eb50ccc81f465712ebb8dffe5c1ad68706d06092aa541a9f8d977c4fa6300ebe5727db9ac1a536eec734db0cb2108", 0xcb, r11, 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r11, 0x0, 0x0}, 0x20) 8.418932317s ago: executing program 0 (id=1426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x2, 0x100, 0xfff}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfdffffff) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000001c0)={0x1}) r4 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000100)={0xfffff001, "6bea09e0c98ec455ff2bfb6257404bb4509accdf17898cf9ffb0f522e486bebe", 0x0, 0x1}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b0002"], 0x0) 8.408791624s ago: executing program 4 (id=1427): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\xB\x00-^{', 0x3a, './file1'}, 0x3d) syz_usb_connect(0x3, 0x1b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002c2bae310c00900023c5801029a620902090000060780ff"], 0xfffffffffffffffe) r3 = socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r5}, &(0x7f0000000400)=""/121, 0x79, &(0x7f0000000500)={&(0x7f0000000480)={'rmd128\x00'}}) r6 = socket(0x10, 0x3, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r7 = inotify_init1(0x80000) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x14) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 7.644077136s ago: executing program 3 (id=1432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x1800) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000540)={0x0, 0x1, 0x4, "3fda48df"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) syz_usb_connect$uac1(0x6, 0x81, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xb, 0x0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x90, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0xd, 0x64, {0x7, 0x25, 0x1, 0x4, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x3, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x9e}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfe, 0x0, 0x5, {0x7, 0x25, 0x1, 0x8, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x280a}}]}) 6.932926396s ago: executing program 5 (id=1433): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) pipe2(&(0x7f0000000000), 0x80880) writev(r1, &(0x7f0000000000), 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xb1b]}, &(0x7f0000000080), &(0x7f0000000100)={0x0, 0x3938700}, 0x8) 6.689959005s ago: executing program 5 (id=1435): r0 = syz_usb_connect(0x4, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) syz_io_uring_setup(0x5d79, &(0x7f0000000380)={0x0, 0x2989, 0x20000, 0x3, 0x1ac, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000400), &(0x7f0000000480)) keyctl$clear(0x3, 0xfffffffffffffffd) r2 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='-&*%\x00', 0xfffffffffffffffc) r3 = socket$nl_route(0x10, 0x3, 0x0) keyctl$assume_authority(0x10, r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0xffffffffffffffdc, 0xa, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r8) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="e82a79edf6045829905ab788cc260028ce08dd19248e0904db0c5c0a7c29d31a8d9eedadba9cc8769f6132162fbda2ce47bfc363ce5aa85bf42018", 0x3b, r2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYBLOB="98218727f7e1084a6dda805831605231474402e23e3db061a6df58e217d423ab6f645335bebe33ee162519112fb671d01d05a7958bc2d26157b932aac02dfa", @ANYBLOB="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"]) 5.61410876s ago: executing program 5 (id=1440): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpid() kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 5.172295418s ago: executing program 0 (id=1442): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x5b05b05b05b06fc, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0xffffffffffffffd0}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 5.156875088s ago: executing program 4 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) (async) unshare(0x26020480) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async, rerun: 64) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) (rerun: 64) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) splice(r1, 0x0, r3, 0x0, 0x8001, 0xd) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x3c, "43720705000000004786b89e6fb2be5c3f000800a69e0825471829a0395ebb7bf7b5555f84e5e4ba020ffd700b5cd6fa2ae8463daa135676c64fd950"}}) (async, rerun: 64) epoll_create1(0x80000) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0)="34827f84eb5f6e981f277f0dc5532592ce4a4ce5df72db", 0x187, r5}, 0x38) (async) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000200), &(0x7f00000002c0)=""/56}, 0x20) (async) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x8826, 0x204fc99e9198adf8}}, @nested_create_vm={0x12d, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0xab6, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_code={0x12e, 0x82, {0x3, "c7442400d9000000c74424027e000000ff2c240f01c2b9800000c00f3235000400000f30c401fc514800b8010000000f01c166b804010f00d0c4c1637db80e000000c744240017010000c7442402fce7cdd7ff2c2466baf80cb827339682ef66bafc0cecc443596c2993"}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x64, 0x18, {0x2, 0x8}}, @nested_create_vm={0x12d, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x6, 0x4}}, @out_dx={0x6a, 0x28, {0x5a27, 0x4, 0x7}}, @nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x863b}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xee, 0x7, 0xd}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xbbc, 0x9}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x88, {0x1, 0x9, [@nested_vmlaunch={0x12f, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x2, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x479, 0x0, 0x100, 0x8}}]}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}], 0x30a}) ioctl$KVM_GET_SREGS2(r7, 0x8140aecc, &(0x7f0000000080)) (async) r8 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0xe3ec1000) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_UID={0x8}]}, 0x34}}, 0x20000050) 4.936030294s ago: executing program 4 (id=1444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0xd0, 0x448, 0x448, 0x0, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xb0, 0x0, 0xfffffffffffffff7, [{{0x1, 0x1, 0x400, 0x86, 0x9, 0x2, {0x3, 0x3, 0x7f, 0xa, 0x8, 0x7, 0xfffff1be, 0x2, 0x4, 0xe000, 0x6679aa80, r3, r4, 0x8, 0x8}}, {0x0, 0x1, 0x8, 0x2, 'rootmode'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x90000, 0xe0) r7 = syz_usb_connect$uac3(0x6, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x120, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x88, &(0x7f0000000480)=@string={0x88, 0x3, "3f5d2d9dfd4bdc33550d0ab3b8e61e3624cb8e33bd254f580d010303b59be64395a467ee8e8dad3d863e13c37a5090d9964164bf2cfc0edb93d74e47ea5e5ec7d78be5b678b55fad4fcdd9c0fb87f0608da25e3f902ee58fa2157085a981620b31ba88e71e47d65f63c9c721aa3c0416076b7717f60d757604e6d11d349925307b3034a5f2b9"}}, {0x40, &(0x7f0000000380)=@string={0x40, 0x3, "c90430ddc86a0e2f9bcb210d561a66e94816e30fbab803cdb6f14d35a57172eedcb5795e99e9817b6ff5c03f62ebab1c7020621d9259681327930304d1af"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4ff}}, {0x9b, &(0x7f00000005c0)=@string={0x9b, 0x3, "493b5aada8fe7b25748109a718706b7ad813d5911296842b577d964aae5e906d6ee941c6401704e2f8695c604500bf3ba072c7ac2f8ac995011ac7db89e207176d7a1c70dad5cdd27a7b413a314bceaa8352b4e23199620ceefdd87b597b74d8c3d55f58d9d8b69b75d830e5a5ca75fdf4b2113cfa18d18693379cf7f3bcb096d1d907d9fbde223c5aab04a664b42d34960158d869711ee0e9"}}]}) syz_usb_control_io$uac3(r7, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r7, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r7, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) readlinkat(r6, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=""/86, 0x56) connect$unix(r6, &(0x7f0000000680)=@file={0x0, './file1\x00'}, 0x6e) 4.398584357s ago: executing program 3 (id=1445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e7365740000080003"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109022400010000000009040000022ec25d000905ff01", @ANYRES64, @ANYRES32, @ANYRESHEX=r0], 0x0) 4.363732301s ago: executing program 5 (id=1446): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) eventfd(0x8) (async) r1 = eventfd(0x8) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0xc805}, 0x8d0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}], 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020603000000000000000000000000ee0d000300686173683a6e65740000000005000400000000000900020073797a310000000005000500020000000500010006000000"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000040), 0x4) (async) write$UHID_DESTROY(r7, &(0x7f0000000040), 0x4) preadv2(r3, &(0x7f0000000200)=[{&(0x7f0000001380)=""/129, 0x81}, {&(0x7f00000002c0)=""/118, 0x76}], 0x2, 0x0, 0x4, 0x0) (async) preadv2(r3, &(0x7f0000000200)=[{&(0x7f0000001380)=""/129, 0x81}, {&(0x7f00000002c0)=""/118, 0x76}], 0x2, 0x0, 0x4, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) io_submit(r0, 0x2, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000340), 0x0, 0x5, 0x0, 0x3, r1}]) 4.020754494s ago: executing program 5 (id=1447): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x101, 0x1, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80, 0x80800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000180)={0x0, 'batadv0\x00', {}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)={{0x3, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x2000, 0x4000000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 3.6194637s ago: executing program 2 (id=1450): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 3.587280463s ago: executing program 3 (id=1451): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0xfffffd33) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x48014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{}, 0xd8eb, 0x2}}, &(0x7f0000000300), 0x400) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff5, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x0, 0x6, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) time(0x0) 3.284135518s ago: executing program 2 (id=1452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000080900020073797a31000000000900010073797a31000000001800038014000080080003"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (fail_nth: 9) 3.092796185s ago: executing program 2 (id=1453): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x0, &(0x7f0000000040)={@align=0xc45, {0x8, 0x1ae0, 0xffff0001, 0x100}}, 0xcf46, &(0x7f0000000080), &(0x7f00000000c0)=0x2}, {[0x5, 0x0, 0x0, 0x2]}, 0x0, 0xef, &(0x7f0000000100)=""/239}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xc0, 0xc, 0xa, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x8, 0x0, 0x7, 0x2}}) r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x638, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81], 0x5}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x44000, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmar+\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x870, &(0x7f0000000980)='\x00', &(0x7f00000009c0), 0x0, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa3", 0x3d, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9", 0x65, 0xa}]}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r5, &(0x7f0000002f40)=""/4097, 0x1001) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r9 = memfd_secret(0x0) getdents64(r9, 0x0, 0x0) 3.077318974s ago: executing program 5 (id=1454): syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000000900020073797a32000000000900010073797a3100000000300004802c0001800b000100736f636b657400001c0002800800024000000000080003000000001d080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x7, 0x0, &(0x7f00000019c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000007340), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000007400)={0x0, 0x0, &(0x7f00000073c0)={&(0x7f0000007380)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x40000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, 0x0, &(0x7f0000000280)) r8 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) 2.528899278s ago: executing program 3 (id=1455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x408c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) openat$fb0(0xffffffffffffff9c, 0x0, 0x20002, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="700001dcdf250214140a0000000320"], 0x1c}, 0x1, 0x0, 0x0, 0x24048801}, 0x44046084) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000086a050e0100000000000109022400010000c00509040021c1030004000921d811280122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x7f, 0x8, 0x1, 'queue1\x00', 0xe5}) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0}, 0x0) 2.02631045s ago: executing program 0 (id=1456): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000740)="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", 0x6de}], 0x1}}], 0x1, 0x4002090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.018158201s ago: executing program 2 (id=1457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) ioctl$KDADDIO(r2, 0x4b34, 0x6) (async) syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)=ANY=[@ANYBLOB="120101026e694b109911039000d7010203010902290001fb0780020904000000ffd36b0505240600000000d10002004000"/59], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) 1.780048513s ago: executing program 4 (id=1458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001005010000000000000000000500000a140000000c0a010100000000000000000a000006140000001100010000000000000000000200000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r2, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f00000005c0)=0x40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000080900020073797a31000000000900010073797a31000000001800038014000080080003"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.041443237s ago: executing program 0 (id=1459): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311482a00010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2c, &(0x7f000000cf3d)=""/195}, 0x23) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311482a00010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2c, &(0x7f000000cf3d)=""/195}, 0x23) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000440)={0xfffffe7f, 0x0, {0xfffffffffffffffc, 0x1, 0xfffffffc, 0x3, 0x2}, 0x80000008}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r10, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r8}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r8}}, 0x30) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f0000000300)=""/95, 0x5f}, &(0x7f0000000400)=0x40) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0c0000000400000004"], 0x48) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x4, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x5000, 0x10000, 0x8, 0x0, 0x40, 0x45, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0x70000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xe000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x81, 0x80, 0x0, 0x1}, {0x2000, 0x1, 0x4, 0x1, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0xffffffff, 0x1000, 0x9, 0x5, 0xf, 0x7, 0x9, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x10140, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x10000000000e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 861.418612ms ago: executing program 4 (id=1460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x10}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002140)={0x50, 0x0, r7, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x30, 0x80}}, 0x50) read$FUSE(r5, 0x0, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) ioctl$FS_IOC_RESVSP(r6, 0x40086602, &(0x7f0000002740)={0xda}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000001140)=""/136) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e26, @local}, 0x10) sendmmsg$inet_sctp(r8, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x34000}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000c4d1a4088400000007000000ac1414bb00000000180000000000000084000000070000000a01010200000000"], 0x30}], 0x1, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r10, 0x21, &(0x7f0000000000)={0x0, 0xee1e, 0x8, 0x3, 0x2eb, 0x0, r10}, 0x1) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 492.044655ms ago: executing program 2 (id=1461): syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) (async) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) (async) close_range(r2, r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) eventfd(0x1ff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x7, 0xff, 0x10, @mcast1, @remote, 0x40, 0x700, 0x3, 0x7}}) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@newtclass={0x58, 0x28, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0x2, 0xfff3}, {0x10, 0xd}}, [@tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_clsact={0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) (async) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) connect$can_j1939(r0, &(0x7f00000002c0)={0x1d, r12, 0x0, {0x2, 0x1, 0x3}, 0xff}, 0x18) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) (async) readv(r10, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 449.740735ms ago: executing program 0 (id=1462): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 427.771765ms ago: executing program 2 (id=1463): prctl$PR_SET_IO_FLUSHER(0x34, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000640)={{@my=0x0, 0x4}, {@local, 0xc}, 0x400, "ce577977170dabbe7eb912a831edc4e3cd77a66b5c50de3bd1552428bd1c01c039c9d8f7a1309089ea33862f85ec6348174b095abc772a9b033b68810f39a0b23579a46c11c4542fdebd3998fb674674c2e25ff28de2dbd6d989ef435dab54f90b419a3f6e6be88e99225835fb0aa01dde46d4abaa23858a740ed78d6bfe6c8beff55bc460a65f18a09b611e0741f5adb176e2b5aff566860e66c603dbbdf72b7202858ee73d0bdddaff1edb0e459ded11295fd9dcefa6035e7c882d74a4af6c4e7726c9ed2ed5dee1c891991f544b34fafb14cec83cc77874792f57e0e5994b745363e4a46b325c29db6b2429da436983a3fbf262f5d865770cc5dcc8b41c396f592e031529ce1fdc8f445883c7bda23d383439a7397957b2f6c204f004ad1387cbc2018da906d790ec6ded5cb91cf011c2f23146767f9201002c28ab003991d8f23c9aa1a8d432c68cf46c2bc21b3518c3c10eecba56463738c241c7a66e8f0bffe42330942d4af08e316ef80cc07c5a87324a7ccea468b3c9462afa7d7f94f2cc60e16fb796263d8097e4cbc6e7959dd3ddc7abc22eef207c6d865f08818d4ff7fb8e4f7377c2ea70549786ef27007d80032b5fc48441d19ffcbbd2583fdf2feaea267481a330e2a2bba2095b51b0b8425da656ed1a2fbb0a50e8b53cd3e8db5307e053b01f37cf5c12bc103483a0c1f60a263f9e49b8b267bb697faf2f77c7f4a3f34186860bf3f85aaa9d0b80a7b31edffa9b742e3130279fe789244a5d2d44f5548edbbece19683826e170d383df7569c549afd0d0b69c44fcd12cd3a9e5f056a15532db4afa46eb879278f2895b15cd696b2579b290295550c6fee6e98d913ad81b9879d4ff4ae0f42e8c893b07b16a41740fcffe9f15b7ef8af9cdfa45337fd37a0d578e9c3af8cc165ec597dffb261d589a529961a601a71d6c791d0f413fee8cfff10dac5a1568eda57d4370afe988702b49504cdab4b142dae9334117bf729648531e632ad4f7c573751d2603959549f90c173eba2f27a176e741a51307bd4db506bbca1d295829aaea855ebe09b7d5b9372e9d9560ed7a085ff6a34684f1644a7b23b7d043caaf1d9c41a027cd80e3e789e4877c25cf4f4c77ce1ed9e8cc2871530ff9c2c1bf3cd55845594213be905654334749c0190b7abb47d7425a0e307c0cf9ab22c06dd71495564ce1e2b8962e985257c023b33caeb162e28a18e3923a445642d582d91783a02422c1cae11295f02ccbc14ed1f9dc9f1106c9b3f8ea7ae660eb0c0313a8a6eadfbd3864c64afaa00f03c863a4cd4fef9e8a1c96c7c62dcc182656132d6939a291e0d0502ca9e24629456f9bdc0e5c34884255d21a1d9d753adf7d48acbe035743bb74623c413bb007e7aa54cf74440f68e987e5054cdf204a97d69ffbee890c851483dab37f7ba5273737a38860ab383a"}, 0x418, 0xa}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = epoll_create(0x7) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000022000"/24], 0x10000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r8 = syz_io_uring_setup(0x6367, &(0x7f0000000280)={0x0, 0x0, 0x400, 0x101, 0xfffffffd, 0x0, r6}, &(0x7f0000000300), &(0x7f00000000c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x3, 0x0, [{0x2c3, 0x0, 0x5}, {0x33c, 0x0, 0x8}, {0x2c, 0x0, 0x7}]}) 0s ago: executing program 0 (id=1464): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet(0x2, 0x5, 0x9) (async, rerun: 64) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async, rerun: 64) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r2, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) (async, rerun: 64) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="2000000008000000000000090000000506004d5a0000001000000003000001ff0000004000000014"], &(0x7f0000000140), 0x1200) (rerun: 64) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x478, 0x190, 0x258, 0x0, 0x190, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xb4b7, 0xb2, @empty, 0x4e24}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xffffffff, 0x0, 'ip6tnl0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x4, 0x1, 0x27}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x18}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xdc3f, @local, 0x4e24}}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 'gre0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x4, 0x3, 0x7}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x7, @private=0xa010102, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xc8}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "3db9"}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x505, 0x6, @remote, 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) (async) r4 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) kernel console output (not intermixed with test programs): 0003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 322.242425][ T30] audit: type=1326 audit(1775041309.310:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 322.243938][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.333692][ T9682] syzkaller1: entered promiscuous mode [ 322.339892][ T9682] syzkaller1: entered allmulticast mode [ 322.348670][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 322.385715][ T29] usb 3-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice= 0.40 [ 322.395464][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.425605][ T30] audit: type=1326 audit(1775041309.310:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 322.430206][ T29] usb 3-1: Product: syz [ 322.491045][ T29] usb 3-1: Manufacturer: syz [ 322.537370][ T30] audit: type=1326 audit(1775041309.310:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 322.567368][ T5826] Bluetooth: hci1: command tx timeout [ 322.583125][ T29] usb 3-1: SerialNumber: syz [ 322.621634][ T30] audit: type=1326 audit(1775041309.310:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 322.711992][ T9629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.729550][ T5194] Dev loop3: unable to read RDB block 7 [ 322.735185][ T5194] loop3: AHDI p3 p4 [ 322.751933][ T9629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.758783][ T30] audit: type=1326 audit(1775041309.310:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 322.777410][ T5194] loop3: partition table partially beyond EOD, truncated [ 322.814600][ T29] usb 3-1: 0:1 : does not exist [ 322.823476][ T30] audit: type=1326 audit(1775041309.310:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 322.847766][ T29] usb 3-1: unit 0 not found! [ 322.876525][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 322.883652][ T9629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.913391][ T30] audit: type=1326 audit(1775041309.310:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 322.979153][ T9685] tipc: Started in network mode [ 322.984093][ T9685] tipc: Node identity 8eef2bf6fbfd, cluster identity 4711 [ 323.042673][ T9685] tipc: Enabled bearer , priority 0 [ 323.057674][ T29] usb 3-1: USB disconnect, device number 62 [ 323.091501][ T9689] syzkaller0: entered promiscuous mode [ 323.119113][ T9689] syzkaller0: entered allmulticast mode [ 323.136813][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.160860][ T9629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.179756][ T9685] tipc: Resetting bearer [ 323.203722][ T9685] tipc: Resetting bearer [ 323.247926][ T9685] tipc: Disabling bearer [ 323.366691][ T5194] Dev loop3: unable to read RDB block 7 [ 323.405733][ T5194] loop3: AHDI p3 p4 [ 323.450363][ T5194] loop3: partition table partially beyond EOD, truncated [ 323.540438][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 323.608313][ T9702] tipc: Enabled bearer , priority 0 [ 323.740571][ T9703] syzkaller0: entered promiscuous mode [ 323.771972][ T9703] syzkaller0: entered allmulticast mode [ 323.808315][ T9702] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1018'. [ 323.834397][ T9707] loop2: detected capacity change from 0 to 7 [ 323.856967][ T9707] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 323.868055][ T9707] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 323.878415][ T9699] tipc: Resetting bearer [ 323.888050][ T9707] Dev loop2: unable to read RDB block 7 [ 323.893956][ T9698] tipc: Resetting bearer [ 323.903058][ T9707] loop2: unable to read partition table [ 323.910017][ T9707] loop2: partition table beyond EOD, truncated [ 323.916792][ T9707] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 323.953532][ T9698] tipc: Disabling bearer [ 324.116043][ T5194] Dev loop3: unable to read RDB block 7 [ 324.122263][ T5194] loop3: AHDI p3 p4 [ 324.126369][ T5194] loop3: partition table partially beyond EOD, truncated [ 324.133775][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 324.134513][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.215611][ T9629] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.250283][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.257547][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.306408][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.313635][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.324353][ T9724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'. [ 324.394897][ T5194] Dev loop3: unable to read RDB block 7 [ 324.401413][ T5194] loop3: AHDI p3 p4 [ 324.405635][ T5194] loop3: partition table partially beyond EOD, truncated [ 324.413817][ T5910] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 324.419635][ T9629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.433613][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 324.502894][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.511091][ T9731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.558525][ T9731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.577002][ T9629] veth0_vlan: entered promiscuous mode [ 324.587971][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 324.594238][ T9629] veth1_vlan: entered promiscuous mode [ 324.595975][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.613873][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 324.624215][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.636658][ T5910] usb 5-1: config 0 descriptor?? [ 324.650472][ T5826] Bluetooth: hci1: command tx timeout [ 324.660692][ T9629] veth0_macvtap: entered promiscuous mode [ 324.663119][ T5910] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 324.672438][ T9629] veth1_macvtap: entered promiscuous mode [ 324.694357][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.715176][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.733959][ T9039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.750445][ T9039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.802776][ T9039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.813478][ T9039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.076816][ T9049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.166445][ T9049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.209917][ T5194] Dev loop3: unable to read RDB block 7 [ 325.215576][ T5194] loop3: AHDI p3 p4 [ 325.310540][ T5194] loop3: partition table partially beyond EOD, truncated [ 325.339731][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 325.350793][ T9046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.359180][ T9046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.600478][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.620211][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.759422][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.808271][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.984049][ T5910] gspca_vc032x: reg_r err -71 [ 325.989082][ T5910] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 326.058817][ T5910] usb 5-1: USB disconnect, device number 55 [ 326.643192][ T9762] loop2: detected capacity change from 0 to 7 [ 326.660447][ T9762] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 326.682716][ T9762] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 326.690295][ T9762] Dev loop2: unable to read RDB block 7 [ 326.698695][ T9762] loop2: unable to read partition table [ 326.705893][ T9762] loop2: partition table beyond EOD, truncated [ 326.724353][ T9762] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 326.736867][ T5826] Bluetooth: hci1: command tx timeout [ 327.297779][ T5909] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 327.955976][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 328.017799][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 328.073582][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.122176][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 328.151059][ T5909] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 328.167259][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.187233][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 328.194784][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.205717][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 328.217937][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.229969][ T5909] usb 3-1: Product: syz [ 328.232421][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 328.244603][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.257890][ T9] usb 5-1: Product: syz [ 328.262205][ T9] usb 5-1: Manufacturer: syz [ 328.263848][ T5909] usb 3-1: Manufacturer: syz [ 328.271954][ T9] usb 5-1: SerialNumber: syz [ 328.282092][ T5909] usb 3-1: SerialNumber: syz [ 328.316518][ T5909] usb 3-1: config 0 descriptor?? [ 328.357369][ T5919] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 328.519657][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 328.531308][ T9] usb 5-1: Fast Track Pro switching to config #2 [ 328.553139][ T5919] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 328.563666][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.590335][ T9] usb 5-1: USB disconnect, device number 56 [ 328.596449][ T5919] usb 6-1: Product: syz [ 328.615703][ T5919] usb 6-1: Manufacturer: syz [ 328.629679][ T5919] usb 6-1: SerialNumber: syz [ 328.780156][ T5909] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 328.851524][ T5194] Dev loop3: unable to read RDB block 7 [ 328.868031][ T5194] loop3: AHDI p3 p4 [ 328.872459][ T5194] loop3: partition table partially beyond EOD, truncated [ 328.892940][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 328.894981][ T9780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.921402][ T9780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.932976][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 328.952245][ T5909] imon:send_packet: packet tx failed (-71) [ 328.977230][ T5909] imon 3-1:0.0: panel buttons/knobs setup failed [ 329.070530][ T5909] rc_core: IR keymap rc-imon-pad not found [ 329.091415][ T5909] Registered IR keymap rc-empty [ 329.096396][ T5909] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 329.115431][ T5909] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 329.127323][ T5909] imon:send_packet: packet tx failed (-71) [ 329.149444][ T5909] imon 3-1:0.0: remote input dev register failed [ 329.156066][ T5909] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 329.189330][ T5909] imon 3-1:0.0: unable to initialize intf0, err 0 [ 329.199610][ T5909] imon:imon_probe: failed to initialize context! [ 329.218987][ T5909] imon 3-1:0.0: unable to register, err -19 [ 329.238072][ T5909] usb 3-1: USB disconnect, device number 63 [ 329.334714][ T9778] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 329.366248][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 329.366269][ T30] audit: type=1326 audit(1775041316.940:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.416586][ T30] audit: type=1326 audit(1775041316.980:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.440438][ T30] audit: type=1326 audit(1775041316.980:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.465234][ T30] audit: type=1326 audit(1775041316.980:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.492578][ T30] audit: type=1326 audit(1775041316.980:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.560018][ T30] audit: type=1326 audit(1775041316.980:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.598470][ T5194] Dev loop3: unable to read RDB block 7 [ 329.619439][ T5194] loop3: AHDI p3 p4 [ 329.633958][ T5194] loop3: partition table partially beyond EOD, truncated [ 329.697511][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 329.739012][ T9799] loop2: detected capacity change from 0 to 7 [ 329.747464][ T30] audit: type=1326 audit(1775041316.980:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.770777][ T30] audit: type=1326 audit(1775041316.990:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.838289][ T30] audit: type=1326 audit(1775041316.990:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.880238][ T9799] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 329.890955][ T9799] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 329.898504][ T9799] Dev loop2: unable to read RDB block 7 [ 329.904426][ T9799] loop2: unable to read partition table [ 329.910505][ T30] audit: type=1326 audit(1775041316.990:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.4.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 329.934877][ T9799] loop2: partition table beyond EOD, truncated [ 329.941683][ T9799] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 330.098360][ T5919] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 330.164367][ T5919] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 330.190995][ T5919] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 330.200652][ T5919] usb 6-1: clock source 0 is not valid, cannot use [ 330.211409][ T5919] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 330.219418][ T5919] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 330.233246][ T5194] Dev loop3: unable to read RDB block 7 [ 330.244004][ T5194] loop3: AHDI p3 p4 [ 330.424753][ T5194] loop3: partition table partially beyond EOD, truncated [ 330.447369][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 330.669078][ T5826] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 330.888879][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 330.910630][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.923650][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.087005][ T5919] usb 6-1: USB disconnect, device number 2 [ 331.193245][ T9813] input: syz0 as /devices/virtual/input/input28 [ 331.512164][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.772470][ T5194] Dev loop3: unable to read RDB block 7 [ 331.784787][ T5194] loop3: AHDI p3 p4 [ 331.807323][ T5194] loop3: partition table partially beyond EOD, truncated [ 331.827396][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 331.907257][ T5919] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 332.127256][ T8677] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 332.147794][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 332.167001][ T5919] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 332.183017][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.198013][ T5919] usb 6-1: Product: syz [ 332.214419][ T5919] usb 6-1: Manufacturer: syz [ 332.227209][ T5919] usb 6-1: SerialNumber: syz [ 332.307285][ T8677] usb 3-1: Using ep0 maxpacket: 8 [ 332.333950][ T8677] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.360967][ T8677] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.393738][ T8677] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.436436][ T5919] usb 6-1: config 0 descriptor?? [ 332.442022][ T8677] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.527658][ T5919] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 332.562618][ T8677] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.592496][ T8677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.905819][ T8677] usb 3-1: GET_CAPABILITIES returned 0 [ 332.923891][ T8677] usbtmc 3-1:16.0: can't read capabilities [ 332.932406][ T5919] gspca_ov534_9: reg_w failed -71 [ 333.113688][ T9840] fuse: Bad value for 'fd' [ 333.119733][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.149837][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.159070][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.168162][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.177405][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.243457][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.266947][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.333814][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.343101][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.352243][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.363191][ T5887] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 333.387591][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.396966][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.406545][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.415990][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.425211][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.434474][ T5919] gspca_ov534_9: Unknown sensor 0000 [ 333.434578][ T5919] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 333.449026][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.450472][ T5919] usb 6-1: USB disconnect, device number 3 [ 333.458342][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.458394][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.525640][ T9850] loop2: detected capacity change from 0 to 7 [ 333.532129][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 333.560678][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.579002][ T9850] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 333.605098][ T9850] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 333.631379][ T9850] Dev loop2: unable to read RDB block 7 [ 333.641730][ T5909] usb 3-1: USB disconnect, device number 64 [ 333.656210][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.694376][ T9850] loop2: unable to read partition table [ 333.708078][ T9850] loop2: partition table beyond EOD, truncated [ 333.709333][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 333.714628][ T9850] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 333.726688][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 333.746956][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.783706][ T5194] Dev loop3: unable to read RDB block 7 [ 333.807952][ T5194] loop3: AHDI p3 p4 [ 333.815161][ T5887] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 333.838731][ T5194] loop3: partition table partially beyond EOD, truncated [ 333.861007][ T5887] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 333.874114][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 333.891309][ T5887] usb 5-1: Manufacturer: syz [ 333.922564][ T5887] usb 5-1: config 0 descriptor?? [ 334.085345][ T5194] Dev loop3: unable to read RDB block 7 [ 334.143873][ T5194] loop3: AHDI p3 p4 [ 334.152716][ T9855] syzkaller0: entered promiscuous mode [ 334.183979][ T5194] loop3: partition table partially beyond EOD, truncated [ 334.209931][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.220577][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 334.245164][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.329340][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.406269][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.535141][ T9863] bond0: (slave bond_slave_1): Releasing backup interface [ 334.614398][ T9863] bond_slave_1: left promiscuous mode [ 334.751972][ T9873] fuse: Bad value for 'fd' [ 334.823903][ T9877] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1065'. [ 335.167684][ T9865] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.175345][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.192969][ T9880] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1066'. [ 335.767424][ T9865] bond_slave_0: left promiscuous mode [ 336.427711][ T5887] rc_core: IR keymap rc-hauppauge not found [ 336.433844][ T5887] Registered IR keymap rc-empty [ 336.441612][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 336.676867][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 336.713429][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 336.734009][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 336.938653][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 336.977436][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.017300][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.039087][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.100626][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.132974][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.171643][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.218030][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.240634][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.277866][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 337.304254][ T5887] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 337.314004][ T5887] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 337.353819][ T5887] usb 5-1: USB disconnect, device number 57 [ 337.383953][ T9898] kernel profiling enabled (shift: 25) [ 337.521221][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1070'. [ 337.547190][ T9049] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.567229][ T9049] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.585343][ T5826] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 337.608917][ T5194] Dev loop3: unable to read RDB block 7 [ 337.654694][ T5194] loop3: AHDI p3 p4 [ 337.672624][ T5194] loop3: partition table partially beyond EOD, truncated [ 337.691637][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 337.757189][ T9049] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.766206][ T9049] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.832992][ T9049] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.897244][ T9049] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.909138][ T9041] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.937373][ T9041] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.985320][ T5194] Dev loop3: unable to read RDB block 7 [ 337.993747][ T5194] loop3: AHDI p3 p4 [ 337.997848][ T5194] loop3: partition table partially beyond EOD, truncated [ 338.005159][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 338.130485][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 338.130507][ T30] audit: type=1326 audit(1775041325.690:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 338.217235][ T30] audit: type=1326 audit(1775041325.690:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 338.261439][ T30] audit: type=1326 audit(1775041325.690:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 338.525037][ T30] audit: type=1326 audit(1775041325.690:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 338.791090][ T30] audit: type=1326 audit(1775041325.690:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 338.907236][ T30] audit: type=1326 audit(1775041325.690:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 338.980834][ T9939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.988174][ T30] audit: type=1326 audit(1775041325.690:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 339.169921][ T30] audit: type=1326 audit(1775041325.690:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 339.207226][ T30] audit: type=1326 audit(1775041325.690:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 339.547959][ T30] audit: type=1326 audit(1775041325.700:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 339.817217][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 340.002410][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 340.012067][ T10] usb 6-1: config index 0 descriptor too short (expected 32814, got 46) [ 340.057409][ T10] usb 6-1: config 19 has too many interfaces: 178, using maximum allowed: 32 [ 340.066246][ T10] usb 6-1: config 19 has an invalid descriptor of length 68, skipping remainder of the config [ 340.117214][ T10] usb 6-1: config 19 has 0 interfaces, different from the descriptor's value: 178 [ 340.133887][ T10] usb 6-1: string descriptor 0 read error: -22 [ 340.157283][ T10] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 340.197402][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.439353][ T5194] Dev loop3: unable to read RDB block 7 [ 340.445717][ T5194] loop3: AHDI p3 p4 [ 340.453444][ T5910] usb 6-1: USB disconnect, device number 4 [ 340.471275][ T9954] fuse: Invalid rootmode [ 340.471501][ T5194] loop3: partition table partially beyond EOD, truncated [ 340.600259][ T9960] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1083'. [ 340.612243][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 341.586694][ T9963] netlink: 'syz.3.1084': attribute type 1 has an invalid length. [ 341.623850][ T5826] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 341.633829][ T5826] Bluetooth: hci2: Injecting HCI hardware error event [ 341.642410][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1086'. [ 341.643087][ T5826] Bluetooth: hci2: hardware error 0x00 [ 341.750230][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1084'. [ 342.287788][ T5910] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 342.447453][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 342.456495][ T5910] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.468012][ T5910] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.480984][ T5910] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 342.491121][ T5910] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 342.504040][ T5910] usb 6-1: Product: syz [ 342.508862][ T8677] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 342.516927][ T5910] usb 6-1: Manufacturer: syz [ 342.536767][ T5910] hub 6-1:4.0: USB hub found [ 342.671802][ T8677] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 342.679557][ T8677] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 342.690801][ T8677] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.703421][ T8677] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 342.715568][ T8677] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 342.736279][ T8677] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 342.830147][ T8677] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 342.843956][ T8677] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.857750][ T8677] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 342.857857][ T5910] hub 6-1:4.0: 2 ports detected [ 342.880524][ T8677] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 342.911310][ T8677] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 342.921295][ T8677] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 342.938116][ T8677] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.950595][ T8677] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 342.970676][ T8677] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 342.999730][ T8677] usb 3-1: string descriptor 0 read error: -22 [ 343.040372][ T8677] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.096853][ T8677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.123368][ T5910] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 343.130315][ T5910] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 343.171778][ T8677] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 343.188894][ T5910] usb 6-1: USB disconnect, device number 5 [ 343.381521][ T8677] usb 3-1: USB disconnect, device number 65 [ 343.698461][ T5826] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 343.933362][ T9997] netlink: 600 bytes leftover after parsing attributes in process `syz.4.1092'. [ 344.289280][T10006] openvswitch: netlink: IP tunnel dst address not specified [ 344.315007][T10006] netlink: 'syz.4.1095': attribute type 8 has an invalid length. [ 344.538194][ T5194] Dev loop3: unable to read RDB block 7 [ 344.543856][ T5194] loop3: AHDI p3 p4 [ 344.607892][ T5194] loop3: partition table partially beyond EOD, truncated [ 344.626731][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 344.679492][T10019] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1098'. [ 344.851020][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 345.119174][T10027] fuse: Invalid rootmode [ 345.384610][T10029] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1102'. [ 346.218004][ T8677] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 346.379628][ T8677] usb 5-1: config index 0 descriptor too short (expected 64942, got 109) [ 346.388426][ T8677] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.400691][ T8677] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 346.410319][ T8677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.418624][ T8677] usb 5-1: Product: syz [ 346.423009][ T8677] usb 5-1: Manufacturer: syz [ 346.427935][ T8677] usb 5-1: SerialNumber: syz [ 346.438447][ T8677] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 346.464145][ T5887] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 346.518151][ T5910] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 346.670348][ T5910] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 346.684278][ T5910] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 346.694304][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.703097][ T5910] usb 3-1: Product: syz [ 346.707592][ T5910] usb 3-1: Manufacturer: syz [ 346.712235][ T5910] usb 3-1: SerialNumber: syz [ 346.928354][ T5910] usb 3-1: selecting invalid altsetting 1 [ 346.967066][T10041] binder: 10040:10041 ioctl 8010661b 200000000140 returned -22 [ 346.983585][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.992530][ T5194] Dev loop3: unable to read RDB block 7 [ 346.999196][ T5194] loop3: AHDI p3 p4 [ 347.003194][ T5194] loop3: partition table partially beyond EOD, truncated [ 347.012121][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.020388][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 347.094232][T10052] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1109'. [ 347.098308][ T5919] usb 5-1: USB disconnect, device number 58 [ 347.122833][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 347.122853][ T30] audit: type=1326 audit(1775041334.700:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.1109" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f237259c819 code=0x0 [ 347.138396][ T5910] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 347.152584][ T5910] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 347.340782][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.349684][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.687963][ T5887] usb 5-1: Service connection timeout for: 256 [ 347.694285][ T5887] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 347.707018][ T5887] ath9k_htc: Failed to initialize the device [ 347.714101][ T5919] usb 5-1: ath9k_htc: USB layer deinitialized [ 348.375324][ T5194] Dev loop3: unable to read RDB block 7 [ 348.381452][ T5194] loop3: AHDI p3 p4 [ 348.385704][ T5194] loop3: partition table partially beyond EOD, truncated [ 348.406889][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 348.433116][T10065] loop2: detected capacity change from 0 to 7 [ 348.454808][T10065] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 348.472695][T10065] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 348.479843][T10065] Dev loop2: unable to read RDB block 7 [ 348.485560][T10065] loop2: unable to read partition table [ 348.492292][T10065] loop2: partition table beyond EOD, truncated [ 348.508971][T10065] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 348.598598][ T5194] Dev loop3: unable to read RDB block 7 [ 348.640444][ T5194] loop3: AHDI p3 p4 [ 348.653660][ T5194] loop3: partition table partially beyond EOD, truncated [ 348.664724][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 348.936995][T10075] ======================================================= [ 348.936995][T10075] WARNING: The mand mount option has been deprecated and [ 348.936995][T10075] and is ignored by this kernel. Remove the mand [ 348.936995][T10075] option from the mount to silence this warning. [ 348.936995][T10075] ======================================================= [ 349.029841][ T5194] Dev loop3: unable to read RDB block 7 [ 349.082351][ T5194] loop3: AHDI p3 p4 [ 349.095913][ T5194] loop3: partition table partially beyond EOD, truncated [ 349.121588][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 349.254566][ T5194] Dev loop3: unable to read RDB block 7 [ 349.267058][ T5194] loop3: AHDI p3 p4 [ 349.279521][ T5194] loop3: partition table partially beyond EOD, truncated [ 349.308818][ T8677] usb 3-1: USB disconnect, device number 66 [ 349.330715][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 349.386871][T10083] fuse: Invalid rootmode [ 349.427238][ T5887] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 349.465947][T10087] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1119'. [ 349.587621][ T5887] usb 6-1: device descriptor read/64, error -71 [ 349.873192][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 350.147282][ T5887] usb 6-1: device descriptor read/64, error -71 [ 350.258121][ T5887] usb usb6-port1: attempt power cycle [ 350.602257][ T5194] Dev loop3: unable to read RDB block 7 [ 350.607216][ T5919] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 350.616295][ T5194] loop3: AHDI p3 p4 [ 350.620838][ T5194] loop3: partition table partially beyond EOD, truncated [ 350.629747][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 350.639484][ T5887] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 350.667983][ T5887] usb 6-1: device descriptor read/8, error -71 [ 350.747262][ T5919] usb 5-1: device descriptor read/64, error -71 [ 350.772104][T10106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.784471][T10106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.907274][ T5887] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 350.947999][ T5887] usb 6-1: device descriptor read/8, error -71 [ 351.037433][ T5919] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 351.068543][ T5887] usb usb6-port1: unable to enumerate USB device [ 351.177230][ T5919] usb 5-1: device descriptor read/64, error -71 [ 351.200066][T10112] syzkaller0: entered promiscuous mode [ 351.206383][T10112] syzkaller0: entered allmulticast mode [ 351.316476][ T5919] usb usb5-port1: attempt power cycle [ 351.371074][ T5194] Dev loop3: unable to read RDB block 7 [ 351.390963][ T5194] loop3: AHDI p3 p4 [ 351.394965][ T5194] loop3: partition table partially beyond EOD, truncated [ 351.443811][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 351.543262][ T5194] Dev loop3: unable to read RDB block 7 [ 351.571110][ T5194] loop3: AHDI p3 p4 [ 351.591794][ T5194] loop3: partition table partially beyond EOD, truncated [ 351.620319][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 351.683935][ T5919] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 351.708264][ T5919] usb 5-1: device descriptor read/8, error -71 [ 351.961674][ T5919] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 351.989059][ T5919] usb 5-1: device descriptor read/8, error -71 [ 352.100459][ T5919] usb usb5-port1: unable to enumerate USB device [ 352.191704][T10118] sctp: [Deprecated]: syz.5.1129 (pid 10118) Use of int in max_burst socket option. [ 352.191704][T10118] Use struct sctp_assoc_value instead [ 352.286484][ T5194] Dev loop3: unable to read RDB block 7 [ 352.329137][ T5194] loop3: AHDI p3 p4 [ 352.342594][ T5194] loop3: partition table partially beyond EOD, truncated [ 352.350441][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 352.813169][ T5194] Dev loop3: unable to read RDB block 7 [ 352.831340][ T5194] loop3: AHDI p3 p4 [ 352.835333][ T5194] loop3: partition table partially beyond EOD, truncated [ 352.879220][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 353.407251][ T5919] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 353.539970][ T5919] usb 6-1: device descriptor read/64, error -71 [ 353.787260][ T5919] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 353.897270][ T29] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 353.918818][ T5919] usb 6-1: device descriptor read/64, error -71 [ 354.039547][ T5919] usb usb6-port1: attempt power cycle [ 354.054699][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.077258][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.104272][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.135845][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.152389][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.170426][ T29] usb 5-1: config 0 descriptor?? [ 354.423202][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 354.445286][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 354.454656][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 354.466628][ T5919] usb 6-1: device descriptor read/8, error -71 [ 354.475748][ T29] usb 5-1: USB disconnect, device number 63 [ 354.733654][ T5919] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 354.792370][ T5919] usb 6-1: device descriptor read/8, error -71 [ 354.917501][ T5919] usb usb6-port1: unable to enumerate USB device [ 354.962687][ T29] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 355.120175][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 355.139677][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 355.166614][ T29] usb 5-1: config 1 has an invalid interface number: 151 but max is 0 [ 355.183879][ T29] usb 5-1: config 1 has no interface number 0 [ 355.190669][ T29] usb 5-1: config 1 interface 151 has no altsetting 0 [ 355.233988][ T29] usb 5-1: string descriptor 0 read error: -22 [ 355.240671][ T29] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 355.258946][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.283991][ T29] gspca_main: pac7311-2.14.0 probing 093a:260e [ 355.695460][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.717702][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.735609][ T29] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 355.752583][ T29] pac7311 5-1:1.151: probe with driver pac7311 failed with error -71 [ 355.779988][ T29] usb 5-1: USB disconnect, device number 64 [ 356.002435][T10129] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 356.031269][ T5194] Dev loop3: unable to read RDB block 7 [ 356.060915][ T5194] loop3: AHDI p3 p4 [ 356.064900][ T5194] loop3: partition table partially beyond EOD, truncated [ 356.097432][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 356.308537][T10158] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 356.375190][T10163] netlink: 560 bytes leftover after parsing attributes in process `syz.5.1141'. [ 356.570919][ T30] audit: type=1326 audit(1775041344.140:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 356.596318][T10169] netlink: 'syz.0.1138': attribute type 20 has an invalid length. [ 356.604419][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 356.645724][ T30] audit: type=1326 audit(1775041344.140:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 356.808263][ T30] audit: type=1326 audit(1775041344.140:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 356.853712][ T5194] Dev loop3: unable to read RDB block 7 [ 356.870486][ T5194] loop3: AHDI p3 p4 [ 356.909649][T10169] netlink: 'syz.0.1138': attribute type 20 has an invalid length. [ 356.917708][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 356.927575][ T5194] loop3: partition table partially beyond EOD, truncated [ 356.928003][ T9049] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.937531][ T30] audit: type=1326 audit(1775041344.140:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 356.977772][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 357.010505][ T9049] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.091408][T10173] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1143'. [ 357.265945][ T30] audit: type=1326 audit(1775041344.250:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 357.325302][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.385337][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.462772][ T9049] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.570383][ T9049] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.595692][ T30] audit: type=1326 audit(1775041344.250:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 357.794740][T10182] kvm: pic: non byte read [ 357.804291][T10182] kvm: pic: non byte read [ 357.808943][ T30] audit: type=1326 audit(1775041344.250:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 357.818762][T10182] kvm: pic: non byte read [ 357.832052][ T30] audit: type=1326 audit(1775041344.250:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 357.877690][T10182] kvm: pic: non byte read [ 357.907542][ T30] audit: type=1326 audit(1775041344.250:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 357.984249][ T30] audit: type=1326 audit(1775041344.250:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 357.984494][T10182] kvm: pic: non byte read [ 358.103193][T10182] kvm: pic: non byte read [ 358.127022][ T5194] Dev loop3: unable to read RDB block 7 [ 358.133381][ T5194] loop3: AHDI p3 p4 [ 358.137577][T10182] kvm: pic: non byte read [ 358.137666][T10182] kvm: pic: non byte read [ 358.171451][ T5194] loop3: partition table partially beyond EOD, truncated [ 358.194391][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 358.202675][T10188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.231984][T10182] kvm: pic: non byte read [ 358.287740][T10182] kvm: pic: non byte read [ 358.396961][ T5194] Dev loop3: unable to read RDB block 7 [ 358.421378][ T5194] loop3: AHDI p3 p4 [ 358.434459][ T5194] loop3: partition table partially beyond EOD, truncated [ 358.471350][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 358.699068][T10200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.738205][T10200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.787530][ T5919] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 358.801429][T10200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1150'. [ 358.810640][T10200] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1150'. [ 358.821294][T10200] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1150'. [ 358.839019][T10200] kernel read not supported for file / œ7³ÇüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀÕ²DvcŽ“ØÖ Å6Òxãc: (pid: 10200 comm: syz.3.1150) [ 358.933701][T10205] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.1154'. [ 358.963877][T10205] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 358.977376][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 359.013901][ T5919] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 359.024472][ T5919] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.036780][ T5919] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.050788][ T5919] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 359.064105][ T5919] usb 3-1: config 7 interface 0 has no altsetting 0 [ 359.070864][ T5919] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 359.080322][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.444135][ T5194] Dev loop3: unable to read RDB block 7 [ 359.460681][ T5194] loop3: AHDI p3 p4 [ 359.471636][ T5194] loop3: partition table partially beyond EOD, truncated [ 359.490163][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 359.500386][T10195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.538175][T10195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.577986][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 359.598526][ T5919] usbhid 3-1:7.0: can't add hid device: -71 [ 359.620779][ T5919] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 359.676503][ T5919] usb 3-1: USB disconnect, device number 67 [ 359.718978][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1158'. [ 359.816243][ T5194] Dev loop3: unable to read RDB block 7 [ 359.823375][ T5194] loop3: AHDI p3 p4 [ 359.828200][ T5194] loop3: partition table partially beyond EOD, truncated [ 359.842304][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 360.122658][T10241] netlink: 'syz.5.1164': attribute type 29 has an invalid length. [ 360.136598][T10238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.342609][T10246] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.358744][T10246] team0: Port device bond7 added [ 360.440819][T10251] vlan3: entered allmulticast mode [ 360.447051][T10251] bridge0: port 3(vlan3) entered blocking state [ 360.470742][T10251] bridge0: port 3(vlan3) entered disabled state [ 360.480778][T10251] vlan3: entered promiscuous mode [ 360.557239][ T5887] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 360.699362][ T5887] usb 5-1: device descriptor read/64, error -71 [ 360.752356][T10260] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 360.907597][T10254] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1168'. [ 361.035702][T10260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.107805][ T5887] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 361.537240][ T5887] usb 5-1: device descriptor read/64, error -71 [ 361.742706][ T5887] usb usb5-port1: attempt power cycle [ 362.082088][ T5194] Dev loop3: unable to read RDB block 7 [ 362.097264][ T5887] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 362.109092][ T5194] loop3: AHDI p3 p4 [ 362.128437][ T5887] usb 5-1: device descriptor read/8, error -71 [ 362.137267][ T5194] loop3: partition table partially beyond EOD, truncated [ 362.165045][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 362.296194][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1172'. [ 362.322154][T10272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.370645][T10272] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 362.389348][ T5887] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 362.399819][ T5194] Dev loop3: unable to read RDB block 7 [ 362.405426][ T5194] loop3: AHDI p3 p4 [ 362.410336][ T5194] loop3: partition table partially beyond EOD, truncated [ 362.427652][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 362.438015][ T5887] usb 5-1: device descriptor read/8, error -71 [ 362.622439][ T5887] usb usb5-port1: unable to enumerate USB device [ 363.721680][ T5194] Dev loop3: unable to read RDB block 7 [ 363.750438][ T5194] loop3: AHDI p3 p4 [ 363.754400][ T5194] loop3: partition table partially beyond EOD, truncated [ 363.875531][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 363.875555][ T30] audit: type=1326 audit(1775041351.390:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 363.971844][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 364.105529][T10292] fuse: Unknown parameter 'go¢Ï' [ 364.167015][T10296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1177'. [ 364.227235][ T5910] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 364.262698][ T30] audit: type=1326 audit(1775041351.390:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 364.355304][ T30] audit: type=1326 audit(1775041351.390:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 364.457203][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 364.464483][ T30] audit: type=1326 audit(1775041351.390:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 364.500912][ T30] audit: type=1326 audit(1775041351.390:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 364.527259][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.539200][ T5910] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.552949][ T30] audit: type=1326 audit(1775041351.400:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 364.696682][ T5910] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 364.732519][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.787199][ T30] audit: type=1326 audit(1775041351.400:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 364.824967][ T5910] usb 5-1: Product: syz [ 364.847344][ T5910] usb 5-1: Manufacturer: syz [ 364.859225][ T5910] usb 5-1: SerialNumber: syz [ 364.893133][ T5910] usb 5-1: config 0 descriptor?? [ 364.899075][ T5194] Dev loop3: unable to read RDB block 7 [ 364.909023][ T30] audit: type=1326 audit(1775041351.400:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 364.924806][ T5194] loop3: AHDI p3 p4 [ 364.956343][ T5194] loop3: partition table partially beyond EOD, truncated [ 364.971999][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 364.987794][ T30] audit: type=1326 audit(1775041351.400:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff023d9c819 code=0x7ffc0000 [ 365.042725][ T30] audit: type=1326 audit(1775041351.400:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff023d9c582 code=0x7ffc0000 [ 365.457639][T10317] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1182'. [ 366.217879][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1184'. [ 366.968235][ T5194] Dev loop3: unable to read RDB block 7 [ 366.980406][ T5194] loop3: AHDI p3 p4 [ 366.986952][ T5194] loop3: partition table partially beyond EOD, truncated [ 366.996009][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 367.147838][ T5887] usb 5-1: USB disconnect, device number 69 [ 367.195961][T10336] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1188'. [ 367.577286][ T5194] Dev loop3: unable to read RDB block 7 [ 367.606277][ T5194] loop3: AHDI p3 p4 [ 367.635718][ T5194] loop3: partition table partially beyond EOD, truncated [ 367.672619][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 367.934144][T10352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1192'. [ 367.970896][ T5194] Dev loop3: unable to read RDB block 7 [ 367.980416][ T5194] loop3: AHDI p3 p4 [ 367.989204][ T5194] loop3: partition table partially beyond EOD, truncated [ 368.010657][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 368.075533][T10354] QAT: failed to copy from user cfg_data. [ 368.198506][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 368.217989][T10358] openvswitch: netlink: Flow actions attr not present in new flow. [ 368.243179][T10360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'. [ 368.359143][T10364] syzkaller0: entered promiscuous mode [ 368.384102][T10364] syzkaller0: entered allmulticast mode [ 368.845939][T10369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1196'. [ 369.058671][ T5194] Dev loop3: unable to read RDB block 7 [ 369.070410][ T5194] loop3: AHDI p3 p4 [ 369.074429][ T5194] loop3: partition table partially beyond EOD, truncated [ 369.106925][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 369.119837][T10375] random: crng reseeded on system resumption [ 369.482693][T10384] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1201'. [ 369.578860][T10382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.588544][T10382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.775902][T10384] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 370.784992][T10401] fuse: Unknown parameter 'use' [ 370.994278][T10409] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1208'. [ 371.005806][T10409] netlink: Conntrack attr has 3 unknown bytes [ 371.090256][T10409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1208'. [ 371.099565][T10409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1208'. [ 371.110963][T10409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1208'. [ 371.145830][T10409] xt_ecn: cannot match TCP bits for non-tcp packets [ 371.179821][ T29] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 371.337341][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 371.344436][ T29] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 371.353546][ T29] usb 5-1: config 252 has no interface number 0 [ 371.360519][ T29] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.405028][ T29] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 371.423544][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.433680][ T29] usb 5-1: Product: syz [ 371.443844][ T29] usb 5-1: Manufacturer: syz [ 371.458119][ T29] usb 5-1: SerialNumber: syz [ 371.590134][ T29] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 371.660010][T10418] netlink: 'syz.5.1210': attribute type 29 has an invalid length. [ 371.706324][ T29] usb 5-1: USB disconnect, device number 70 [ 371.711429][ T9049] usb 5-1: Failed to submit usb control message: -71 [ 371.734995][ T9049] usb 5-1: unable to send the bmi data to the device: -71 [ 371.772449][ T9049] usb 5-1: unable to get target info from device [ 371.796581][ T9049] usb 5-1: could not get target info (-71) [ 371.804418][T10420] syzkaller0: entered promiscuous mode [ 371.813447][T10420] syzkaller0: entered allmulticast mode [ 371.813661][ T9049] usb 5-1: could not probe fw (-71) [ 372.351617][T10438] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1213'. [ 373.013039][T10447] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1217'. [ 373.778734][ T5194] Dev loop3: unable to read RDB block 7 [ 373.784381][ T5194] loop3: AHDI p3 p4 [ 373.793635][ T5194] loop3: partition table partially beyond EOD, truncated [ 373.809814][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 374.475647][T10476] wg1: entered promiscuous mode [ 374.672006][ T5194] Dev loop3: unable to read RDB block 7 [ 374.704781][ T5194] loop3: AHDI p3 p4 [ 374.711429][ T5194] loop3: partition table partially beyond EOD, truncated [ 374.734602][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 374.913742][T10491] kAFS: unable to lookup cell 'ÿ' [ 374.919683][T10491] kAFS: unable to lookup cell '(,c¾Ì' [ 375.460356][T10505] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1230'. [ 376.254407][T10509] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 376.321347][T10509] bond8 (unregistering): Released all slaves [ 376.510400][T10515] tipc: Enabled bearer , priority 0 [ 376.521871][T10516] syzkaller0: entered promiscuous mode [ 376.532895][T10516] syzkaller0: entered allmulticast mode [ 376.592781][T10508] tipc: Resetting bearer [ 376.668774][T10508] tipc: Disabling bearer [ 376.724559][ T5194] Dev loop3: unable to read RDB block 7 [ 376.730659][ T5194] loop3: AHDI p3 p4 [ 376.734716][ T5194] loop3: partition table partially beyond EOD, truncated [ 376.745138][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 376.893392][T10520] netdevsim netdevsim3: Direct firmware load for / [ 376.893392][T10520] failed with error -2 [ 376.899670][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 376.916252][T10523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.935485][T10521] vlan4: entered promiscuous mode [ 376.951649][T10520] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 376.951649][T10520] [ 376.967183][T10521] team0: entered promiscuous mode [ 376.971190][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.972762][T10521] macvlan0: entered promiscuous mode [ 376.993109][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.155801][T10528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1236'. [ 377.177305][T10528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1236'. [ 377.191966][T10528] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1236'. [ 377.488869][ T5910] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 377.697641][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 377.708142][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 377.720174][ T5910] usb 5-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config [ 377.730981][ T5910] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.764447][ T5910] usb 5-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 377.774827][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.787295][ T5910] usb 5-1: Product: syz [ 377.792083][ T5910] usb 5-1: Manufacturer: syz [ 377.801046][ T5910] usb 5-1: SerialNumber: syz [ 378.038941][ T5910] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.059069][ T5910] usb 5-1: MIDIStreaming interface descriptor not found [ 378.160022][ T5910] usb 5-1: USB disconnect, device number 71 [ 378.266853][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.765420][T10557] tipc: Enabled bearer , priority 0 [ 378.795218][T10557] syzkaller0: entered promiscuous mode [ 378.813195][T10557] syzkaller0: entered allmulticast mode [ 378.821957][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.822064][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.024457][T10557] tipc: Resetting bearer [ 379.080461][T10555] tipc: Resetting bearer [ 379.101556][T10555] tipc: Disabling bearer [ 379.222997][T10552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.517195][T10568] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1245'. [ 379.596934][T10576] loop2: detected capacity change from 0 to 7 [ 379.605786][T10576] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 379.616287][T10576] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 379.633624][T10576] Dev loop2: unable to read RDB block 7 [ 379.783778][T10576] loop2: unable to read partition table [ 379.909709][ T5194] Dev loop3: unable to read RDB block 7 [ 379.926746][T10576] loop2: partition table beyond EOD, truncated [ 379.928303][ T5194] loop3: AHDI p3 p4 [ 379.979243][T10576] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 380.090295][ T5194] loop3: partition table partially beyond EOD, truncated [ 380.147325][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 380.187280][T10583] loop5: detected capacity change from 0 to 7 [ 380.215283][T10583] Dev loop5: unable to read RDB block 7 [ 380.250720][ T5194] Dev loop3: unable to read RDB block 7 [ 380.275276][ T5194] loop3: AHDI p3 p4 [ 380.287377][ T5194] loop3: partition table partially beyond EOD, truncated [ 380.295088][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 380.352981][T10583] loop5: AHDI p1 p2 p3 [ 380.373772][T10583] loop5: partition table partially beyond EOD, truncated [ 380.412674][T10583] loop5: p1 start 1818582900 is beyond EOD, truncated [ 380.451950][T10583] loop5: p3 start 335544320 is beyond EOD, truncated [ 380.636608][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.674278][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.377235][ T5910] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 381.567811][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 381.576110][ T5910] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.597269][ T29] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 381.597375][ T5910] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.632284][ T5910] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 381.646100][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.654947][ T5910] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 381.664612][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.679887][ T5910] usb 6-1: config 0 descriptor?? [ 381.747293][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 381.758852][ T29] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 381.773250][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.784094][ T29] usb 3-1: Product: syz [ 381.803843][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 381.822893][ T29] usb 3-1: Manufacturer: syz [ 381.829155][ T29] usb 3-1: SerialNumber: syz [ 381.837628][ T29] usb 3-1: config 0 descriptor?? [ 381.859500][ T29] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 381.869000][T10622] macvtap1: entered promiscuous mode [ 381.874955][T10622] macvtap1: entered allmulticast mode [ 381.881376][T10622] veth1_vlan: entered allmulticast mode [ 382.487055][ T5910] usbhid 6-1:0.0: can't add hid device: -71 [ 382.495357][ T5910] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 382.514139][ T5910] usb 6-1: USB disconnect, device number 14 [ 382.937442][ T5910] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 383.087224][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 383.094823][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 383.108240][ T5910] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 383.118422][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.126976][ T5910] usb 5-1: Product: syz [ 383.131396][ T5910] usb 5-1: Manufacturer: syz [ 383.136037][ T5910] usb 5-1: SerialNumber: syz [ 383.362770][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.375069][ T29] gspca_ov534_9: reg_w failed -110 [ 383.388126][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.436863][ T5910] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 383.447695][ T5910] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 383.571923][ T5910] usb 5-1: USB disconnect, device number 72 [ 383.596786][ T5194] Dev loop3: unable to read RDB block 7 [ 383.616390][ T5194] loop3: AHDI p3 p4 [ 383.629521][ T5194] loop3: partition table partially beyond EOD, truncated [ 383.645892][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 383.668021][ T29] gspca_ov534_9: Unknown sensor 0000 [ 383.668088][ T29] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 383.760526][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.771954][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.784078][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.795689][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.832656][ T5194] Dev loop3: unable to read RDB block 7 [ 383.844656][ T5194] loop3: AHDI p3 p4 [ 383.853588][ T5194] loop3: partition table partially beyond EOD, truncated [ 383.864740][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 383.943995][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.944627][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.972283][ T5194] Dev loop3: unable to read RDB block 7 [ 383.983651][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.984522][ T5194] loop3: AHDI p3 p4 [ 384.007483][ T5194] loop3: partition table partially beyond EOD, truncated [ 384.020892][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 384.238340][ T5910] usb 3-1: USB disconnect, device number 68 [ 384.532377][T10661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 384.601084][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 384.616524][ T5194] Dev loop3: unable to read RDB block 7 [ 384.623571][ T5194] loop3: AHDI p3 p4 [ 384.627678][ T5194] loop3: partition table partially beyond EOD, truncated [ 384.633621][T10663] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.635162][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 384.667032][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1277'. [ 384.717255][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1277'. [ 384.739603][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1278'. [ 384.812641][T10690] loop2: detected capacity change from 0 to 7 [ 384.922418][T10690] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 384.936937][T10690] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 384.937836][T10685] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 384.943985][T10690] Dev loop2: unable to read RDB block 7 [ 384.987030][T10690] loop2: unable to read partition table [ 384.993528][T10690] loop2: partition table beyond EOD, truncated [ 385.067623][T10690] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 385.219925][ T5194] Dev loop3: unable to read RDB block 7 [ 385.225879][ T5194] loop3: AHDI p3 p4 [ 385.230117][ T5194] loop3: partition table partially beyond EOD, truncated [ 385.283398][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 385.292461][T10695] geneve2: entered promiscuous mode [ 385.298116][T10695] geneve2: entered allmulticast mode [ 385.491554][T10697] binder: 10696:10697 ioctl c0306201 200000000380 returned -14 [ 385.587976][ T5194] Dev loop3: unable to read RDB block 7 [ 385.604062][ T5194] loop3: AHDI p3 p4 [ 385.612256][ T5194] loop3: partition table partially beyond EOD, truncated [ 385.722309][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 386.000487][T10706] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1284'. [ 386.430970][T10709] xt_policy: neither incoming nor outgoing policy selected [ 386.465212][T10701] coredump: 925(syz.4.1282): Core dump to core aborted: cannot preserve file permissions [ 386.482576][T10712] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1286'. [ 386.692288][T10718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.816112][T10716] syzkaller0: entered promiscuous mode [ 386.900111][T10716] syzkaller0: entered allmulticast mode [ 387.337394][ T5194] Dev loop3: unable to read RDB block 7 [ 387.344319][ T5194] loop3: AHDI p3 p4 [ 387.351093][ T5194] loop3: partition table partially beyond EOD, truncated [ 387.368782][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 388.360029][ T5194] Dev loop3: unable to read RDB block 7 [ 388.366274][ T5194] loop3: AHDI p3 p4 [ 388.384028][ T5194] loop3: partition table partially beyond EOD, truncated [ 388.393489][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 388.687925][ T29] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 388.886548][ T29] usb 6-1: no configurations [ 388.894979][ T29] usb 6-1: can't read configurations, error -22 [ 389.048653][ T29] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 389.213496][ T8677] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 389.221805][ T29] usb 6-1: no configurations [ 389.226826][ T29] usb 6-1: can't read configurations, error -22 [ 389.234844][ T29] usb usb6-port1: attempt power cycle [ 389.293361][ T5194] Dev loop3: unable to read RDB block 7 [ 389.310936][ T5194] loop3: AHDI p3 p4 [ 389.315064][ T5194] loop3: partition table partially beyond EOD, truncated [ 389.332627][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 389.377299][ T8677] usb 5-1: Using ep0 maxpacket: 16 [ 389.403404][ T8677] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 389.418802][ T8677] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 25403, setting to 1024 [ 389.467190][ T8677] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 389.482771][ T8677] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.514049][ T8677] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 389.536987][ T8677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.548552][ T8677] usb 5-1: config 0 descriptor?? [ 389.617865][ T29] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 389.640595][ T29] usb 6-1: no configurations [ 389.645292][ T29] usb 6-1: can't read configurations, error -22 [ 389.669639][ T5194] Dev loop3: unable to read RDB block 7 [ 389.675304][ T5194] loop3: AHDI p3 p4 [ 389.687498][ T5194] loop3: partition table partially beyond EOD, truncated [ 389.704606][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 389.720871][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 389.720893][ T30] audit: type=1326 audit(1775041377.290:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10760 comm="syz.3.1301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f237259c819 code=0x0 [ 389.793032][ T29] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 389.844986][ T29] usb 6-1: no configurations [ 389.858141][ T29] usb 6-1: can't read configurations, error -22 [ 389.872740][ T29] usb usb6-port1: unable to enumerate USB device [ 389.983047][ T8677] hid (null): unknown global tag 0xd [ 389.988822][ T8677] hid (null): global environment stack underflow [ 389.995162][ T8677] hid (null): unknown global tag 0xe [ 390.000983][ T8677] hid (null): unknown global tag 0xe [ 390.188278][ T5919] usb 5-1: USB disconnect, device number 73 [ 390.616910][ T5194] Dev loop3: unable to read RDB block 7 [ 390.617416][T10766] loop5: detected capacity change from 0 to 7 [ 390.630115][T10766] Dev loop5: unable to read RDB block 7 [ 390.636076][T10766] loop5: AHDI p1 p2 p3 [ 390.636479][ T5194] loop3: AHDI p3 p4 [ 390.658547][T10766] loop5: partition table partially beyond EOD, truncated [ 390.666096][ T5194] loop3: partition table partially beyond EOD, truncated [ 390.678139][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 390.686828][T10766] loop5: p1 start 1818582900 is beyond EOD, truncated [ 390.716061][T10766] loop5: p3 start 335544320 is beyond EOD, truncated [ 390.839423][ T5194] Dev loop3: unable to read RDB block 7 [ 390.850321][ T5194] loop3: AHDI p3 p4 [ 390.854584][ T5194] loop3: partition table partially beyond EOD, truncated [ 390.872206][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 390.942953][T10777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.965407][T10779] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1307'. [ 391.007870][T10777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.293047][ T12] bridge_slave_0: left allmulticast mode [ 391.309421][ T12] bridge_slave_0: left promiscuous mode [ 391.327908][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.443451][ T5919] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 391.612706][ T5194] Dev loop3: unable to read RDB block 7 [ 391.622365][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.648671][ T5194] loop3: AHDI p3 p4 [ 391.656737][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.676220][ T5194] loop3: partition table partially beyond EOD, truncated [ 391.694897][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 391.710683][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 391.724557][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 391.773320][ T12] geneve2 (unregistering): left allmulticast mode [ 391.791237][ T5919] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 391.829504][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.895383][ T5919] usb 5-1: config 0 descriptor?? [ 391.974319][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.000720][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.028221][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.070545][ T12] bond0 (unregistering): Released all slaves [ 392.131607][ T12] bond1 (unregistering): Released all slaves [ 392.186739][ T12] bond2 (unregistering): Released all slaves [ 392.253132][ T12] bond3 (unregistering): Released all slaves [ 392.310144][ T12] bond4 (unregistering): Released all slaves [ 392.504742][ T12] tipc: Left network mode [ 392.577549][ T5919] usbhid 5-1:0.0: can't add hid device: -71 [ 392.597476][ T5919] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 392.660606][ T5919] usb 5-1: USB disconnect, device number 74 [ 392.888089][ T5910] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 393.069989][ T5910] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 393.087655][ T5910] usb 3-1: config 0 has an invalid descriptor of length 80, skipping remainder of the config [ 393.109513][ T5910] usb 3-1: config 0 has no interface number 0 [ 393.121745][ T5194] Dev loop3: unable to read RDB block 7 [ 393.133161][ T5910] usb 3-1: too many endpoints for config 0 interface 166 altsetting 7: 205, using maximum allowed: 30 [ 393.141116][T10825] loop5: detected capacity change from 0 to 7 [ 393.153307][ T5194] loop3: AHDI p3 p4 [ 393.169355][ T5194] loop3: partition table partially beyond EOD, truncated [ 393.187591][ T5910] usb 3-1: config 0 interface 166 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 393.196311][ T5194] loop3: p3 start 1702000233 is beyond EOD, [ 393.205559][T10825] Dev loop5: unable to read RDB block 7 [ 393.224709][ T12] hsr_slave_0: left promiscuous mode [ 393.226558][ T5194] truncated [ 393.247871][ T5910] usb 3-1: config 0 interface 166 has no altsetting 0 [ 393.265300][T10825] loop5: AHDI p1 p2 p3 [ 393.275336][T10825] loop5: partition table partially beyond EOD, truncated [ 393.276546][ T5910] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 393.306294][ T12] hsr_slave_1: left promiscuous mode [ 393.317250][T10825] loop5: p1 start 1818582900 is beyond EOD, truncated [ 393.318496][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.332353][T10830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.357679][T10825] loop5: p3 start 335544320 is beyond EOD, truncated [ 393.357785][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 393.388199][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.426027][ T5910] usb 3-1: Product: syz [ 393.430980][ T5910] usb 3-1: Manufacturer: syz [ 393.435713][ T5910] usb 3-1: SerialNumber: syz [ 393.506890][ T5910] usb 3-1: config 0 descriptor?? [ 393.520407][ T5194] Dev loop3: unable to read RDB block 7 [ 393.526121][ T5194] loop3: AHDI p3 p4 [ 393.557626][ T5194] loop3: partition table partially beyond EOD, truncated [ 393.580949][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 393.741179][T10847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.775910][ T5910] gspca_main: conex-2.14.0 probing 0572:0041 [ 393.808630][T10847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.960499][ T5910] usb 3-1: USB disconnect, device number 69 [ 394.224157][ T12] team0 (unregistering): Port device team_slave_1 removed [ 394.303013][ T12] team0 (unregistering): Port device team_slave_0 removed [ 394.420394][ T5194] Dev loop3: unable to read RDB block 7 [ 394.437703][ T5194] loop3: AHDI p3 p4 [ 394.447533][ T5194] loop3: partition table partially beyond EOD, truncated [ 394.469735][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 394.591412][T10861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1323'. [ 394.598876][T10867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.632493][T10867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.288524][ T5910] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 395.327745][ T5194] Dev loop3: unable to read RDB block 7 [ 395.368444][ T5194] loop3: AHDI p3 p4 [ 395.383429][ T5194] loop3: partition table partially beyond EOD, truncated [ 395.409430][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 395.450152][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.461349][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.468355][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.475369][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.482405][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.489755][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.498204][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 395.507927][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.514967][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.521359][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.522046][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.540693][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.547906][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.555122][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.562435][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.569579][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.576724][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.582740][ T5910] usb 6-1: config 0 has no interfaces? [ 395.583930][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.598823][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.606003][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.613715][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.620922][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.628049][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.635477][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.642927][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.647539][ T5910] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 395.650224][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.670733][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.678011][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.685270][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.693541][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.700941][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.710664][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.718241][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.725311][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.732408][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 395.790634][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.069747][ T5910] usb 6-1: config 0 descriptor?? [ 396.302046][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1329'. [ 396.450798][T10879] bridge1: port 1(veth3) entered blocking state [ 396.459700][T10879] bridge1: port 1(veth3) entered disabled state [ 396.466215][T10879] veth3: entered allmulticast mode [ 396.482928][T10879] veth3: entered promiscuous mode [ 396.514809][T10917] bridge1: port 2(veth0_to_bond) entered blocking state [ 396.547841][T10917] bridge1: port 2(veth0_to_bond) entered disabled state [ 396.557878][T10917] veth0_to_bond: entered allmulticast mode [ 396.600716][T10917] veth0_to_bond: entered promiscuous mode [ 396.683709][T10920] bridge1: port 3(veth5) entered blocking state [ 396.691384][T10920] bridge1: port 3(veth5) entered disabled state [ 396.699310][T10920] veth5: entered allmulticast mode [ 396.706764][T10920] veth5: entered promiscuous mode [ 396.718484][ T10] usb 6-1: USB disconnect, device number 19 [ 397.184698][T10931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.209301][ T5194] Dev loop3: unable to read RDB block 7 [ 397.356149][ T5194] loop3: AHDI p3 p4 [ 397.371418][ T5194] loop3: partition table partially beyond EOD, truncated [ 397.391028][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 397.769733][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 397.824842][ T8677] hid_parser_main: 60 callbacks suppressed [ 397.824866][ T8677] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 397.955950][ T8677] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 397.967251][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 397.991790][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 398.011289][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.036144][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.159819][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.175130][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.247942][ T10] usb 6-1: Product: syz [ 398.275223][ T10] usb 6-1: Manufacturer: syz [ 398.281730][ T10] usb 6-1: SerialNumber: syz [ 398.335957][T10956] netlink: 'syz.4.1343': attribute type 8 has an invalid length. [ 398.424125][T10949] fido_id[10949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 398.690043][ T5910] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 398.763526][ T10] usb 6-1: 0:2 : does not exist [ 398.854155][ T5910] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 398.882074][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.927153][ T5910] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 398.956804][ T5910] usb 5-1: config 1 has no interface number 1 [ 399.005808][ T5910] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 399.062884][T10961] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 399.111936][ T5910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.131478][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.165138][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.187257][ T5910] usb 5-1: Product: syz [ 399.191736][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.216437][ T5910] usb 5-1: Manufacturer: syz [ 399.230495][ T5910] usb 5-1: SerialNumber: syz [ 399.267907][ T10] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 399.447642][ T5826] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 399.457606][ T5826] Bluetooth: hci3: Injecting HCI hardware error event [ 399.466785][ T5145] Bluetooth: hci3: hardware error 0x00 [ 399.586206][ T10] usb 6-1: USB disconnect, device number 20 [ 399.593154][ T5910] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 399.617834][ T5194] Dev loop3: unable to read RDB block 7 [ 399.623623][ T5194] loop3: AHDI p3 p4 [ 399.653888][ T5910] usb 5-1: MIDIStreaming interface descriptor not found [ 399.667197][ T5194] loop3: partition table partially beyond EOD, truncated [ 399.677143][ T30] audit: type=1800 audit(1775041387.250:988): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1344" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 399.710248][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 399.925592][ T5910] usb 5-1: USB disconnect, device number 75 [ 400.064051][ T5194] Dev loop3: unable to read RDB block 7 [ 400.079251][ T9824] udevd[9824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 400.108263][T10982] fuse: Unknown parameter 'ÅWõƒzÓ!ö?V1—|GŸ*‚, priority 0 [ 405.914827][ T5194] Dev loop3: unable to read RDB block 7 [ 405.927375][ T8677] usb 6-1: Using ep0 maxpacket: 32 [ 405.939395][ T5194] loop3: AHDI p3 p4 [ 405.956822][ T5194] loop3: partition table partially beyond EOD, truncated [ 405.975742][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 405.983379][ T5919] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 405.997110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 406.005927][ T8677] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 406.080354][ T8677] usb 6-1: config 0 has no interface number 0 [ 406.148832][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 406.181818][ T8677] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 406.193927][ T5919] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 406.210690][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.245295][ T8677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.293728][ T8677] usb 6-1: Product: syz [ 406.299299][ T5194] Dev loop3: unable to read RDB block 7 [ 406.304998][ T5194] loop3: AHDI p3 p4 [ 406.309171][ T8677] usb 6-1: Manufacturer: syz [ 406.313821][ T8677] usb 6-1: SerialNumber: syz [ 406.316540][ T5919] usb 5-1: config 0 descriptor?? [ 406.330042][ T5919] gspca_main: sq930x-2.14.0 probing 041e:403c [ 406.368531][ T5194] loop3: partition table partially beyond EOD, truncated [ 406.386735][ T8677] usb 6-1: config 0 descriptor?? [ 406.403500][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 406.504574][ T8677] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 406.625457][ T5194] Dev loop3: unable to read RDB block 7 [ 406.639792][ T5194] loop3: AHDI p3 p4 [ 406.644167][ T5194] loop3: partition table partially beyond EOD, truncated [ 406.698211][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 406.717843][ T8677] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 406.787577][ T8677] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 407.159635][ T5919] gspca_sq930x: ucbus_write failed -110 [ 407.198283][ T5919] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 407.251405][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.272907][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 14 [ 407.342809][ T10] tipc: Node number set to 2886997007 [ 407.357876][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.433808][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.499382][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.131737][ T8677] usb 5-1: USB disconnect, device number 79 [ 408.287102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 408.461269][ T5194] Dev loop3: unable to read RDB block 7 [ 408.505710][ T5194] loop3: AHDI p3 p4 [ 408.530632][ T5194] loop3: partition table partially beyond EOD, truncated [ 408.629954][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 408.901212][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 408.920402][ T8677] usb 6-1: USB disconnect, device number 25 [ 408.937877][ T8677] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 408.956992][ T8677] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 408.980160][ T8677] quatech2 6-1:0.51: device disconnected [ 409.207414][ T29] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 409.356812][T11162] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1395'. [ 409.432069][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 409.450388][ T29] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 409.459289][ T29] usb 3-1: config 0 has no interface number 0 [ 409.636317][ T29] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 409.676930][ T29] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 409.706783][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.716903][ T29] usb 3-1: Product: syz [ 409.752202][ T29] usb 3-1: Manufacturer: syz [ 409.765412][ T29] usb 3-1: SerialNumber: syz [ 409.785354][ T29] usb 3-1: config 0 descriptor?? [ 409.793534][T11150] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 410.047759][T11150] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 410.786312][ T5194] Dev loop3: unable to read RDB block 7 [ 410.793354][ T5194] loop3: AHDI p3 p4 [ 410.807612][ T5194] loop3: partition table partially beyond EOD, truncated [ 410.814970][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 410.889156][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.929633][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.984039][T11184] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 411.016887][T11184] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1401'. [ 411.177222][ T8677] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 411.333992][ T8677] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 411.355887][ T8677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.365823][ T8677] usb 6-1: Product: syz [ 411.371796][ T8677] usb 6-1: Manufacturer: syz [ 411.384320][ T8677] usb 6-1: SerialNumber: syz [ 411.400661][ T8677] usb 6-1: config 0 descriptor?? [ 411.500793][T11202] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1405'. [ 411.615361][ T8677] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 411.632777][ T5194] Dev loop3: unable to read RDB block 7 [ 411.644240][ T8677] usb 6-1: Firmware version (0.0) predates our first public release. [ 411.655100][ T5194] loop3: AHDI p3 p4 [ 411.661779][ T5194] loop3: partition table partially beyond EOD, truncated [ 411.670513][ T8677] usb 6-1: Please update to version 0.2 or newer [ 411.678853][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 411.824612][ T8677] usb 6-1: Firmware: build â [ 411.848245][ T5194] Dev loop3: unable to read RDB block 7 [ 411.868388][ T5194] loop3: AHDI p3 p4 [ 411.872471][ T5194] loop3: partition table partially beyond EOD, truncated [ 411.886374][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 411.946443][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.966141][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.525026][ T5194] Dev loop3: unable to read RDB block 7 [ 412.547374][ T5194] loop3: AHDI p3 p4 [ 412.561910][ T5194] loop3: partition table partially beyond EOD, truncated [ 412.595552][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 412.614248][T11206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.638373][T11244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.659976][T11206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.668993][T11244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.755365][ T29] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 412.780013][ T29] asix 3-1:0.188: probe with driver asix failed with error -71 [ 412.815166][ T29] usb 3-1: USB disconnect, device number 71 [ 413.037460][ T5194] Dev loop3: unable to read RDB block 7 [ 413.056369][ T5194] loop3: AHDI p3 p4 [ 413.072820][ T5194] loop3: partition table partially beyond EOD, truncated [ 413.088149][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 413.263831][ T5194] Dev loop3: unable to read RDB block 7 [ 413.294398][ T5194] loop3: AHDI p3 p4 [ 413.312070][ T5194] loop3: partition table partially beyond EOD, truncated [ 413.383687][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 413.412406][T11259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.453107][T11259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.501616][T11262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1412'. [ 413.935379][ T5887] usb 6-1: USB disconnect, device number 26 [ 414.145695][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 414.227637][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 414.498960][ T5194] Dev loop3: unable to read RDB block 7 [ 414.508256][ T5194] loop3: AHDI p3 p4 [ 414.518865][ T5194] loop3: partition table partially beyond EOD, truncated [ 414.530980][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 414.661920][T11296] gtp0: entered promiscuous mode [ 414.692957][T11296] gtp0: entered allmulticast mode [ 414.785969][ T5194] Dev loop3: unable to read RDB block 7 [ 414.816526][ T5194] loop3: AHDI p3 p4 [ 414.833088][ T5194] loop3: partition table partially beyond EOD, truncated [ 414.855943][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 414.910706][T11302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1422'. [ 415.235194][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1424'. [ 415.244397][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1424'. [ 415.300309][ T5194] Dev loop3: unable to read RDB block 7 [ 415.310422][ T5194] loop3: AHDI p3 p4 [ 415.314386][ T5194] loop3: partition table partially beyond EOD, truncated [ 415.397530][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 415.629766][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1429'. [ 415.797692][ T5910] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 415.957148][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 415.968004][ T5910] usb 5-1: too many configurations: 98, using maximum allowed: 8 [ 415.988238][ T5910] usb 5-1: config 6 has no interfaces? [ 415.996614][ T5910] usb 5-1: config 6 has no interfaces? [ 416.008649][ T5910] usb 5-1: config 6 has no interfaces? [ 416.016359][ T5910] usb 5-1: config 6 has no interfaces? [ 416.033318][ T5910] usb 5-1: config 6 has no interfaces? [ 416.040603][ T5910] usb 5-1: config 6 has no interfaces? [ 416.057560][ T5910] usb 5-1: config 6 has no interfaces? [ 416.074438][ T5910] usb 5-1: config 6 has no interfaces? [ 416.152987][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'. [ 416.167313][ T5194] Dev loop3: unable to read RDB block 7 [ 416.187147][ T5194] loop3: AHDI p3 p4 [ 416.191366][ T5194] loop3: partition table partially beyond EOD, truncated [ 416.229189][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 416.283489][T11324] could not allocate digest TFM handle rmd128 [ 416.352201][T11342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.381804][T11342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.420516][T11342] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 417.243104][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1435'. [ 418.487761][ T5887] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 418.641259][ T5910] usb 5-1: string descriptor 0 read error: -71 [ 418.666933][ T5910] usb 5-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 418.699613][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 418.731666][ T5910] usb 5-1: rejected 8 configurations due to insufficient available bus power [ 418.760489][ T5910] usb 5-1: no configuration chosen from 8 choices [ 418.785254][ T5910] usb 5-1: USB disconnect, device number 80 [ 418.827043][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.858034][ T5887] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 418.877172][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.895625][ T5887] usb 6-1: config 0 descriptor?? [ 418.915346][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 419.120013][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 419.319957][ T5887] pwc: recv_control_msg error -32 req 02 val 2700 [ 419.331794][ T5887] pwc: recv_control_msg error -32 req 02 val 2c00 [ 419.346536][ T5887] pwc: recv_control_msg error -32 req 04 val 1000 [ 419.358141][ T5887] pwc: recv_control_msg error -32 req 04 val 1300 [ 419.398301][ T5887] pwc: recv_control_msg error -71 req 04 val 1400 [ 419.405580][ T5887] pwc: recv_control_msg error -71 req 02 val 2000 [ 419.406009][ T5194] Dev loop3: unable to read RDB block 7 [ 419.429845][ T5887] pwc: recv_control_msg error -71 req 02 val 2100 [ 419.447486][ T5194] loop3: AHDI p3 p4 [ 419.451402][ T5887] pwc: recv_control_msg error -71 req 04 val 1500 [ 419.457983][ T5194] loop3: partition table partially beyond EOD, truncated [ 419.466369][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 419.472383][ T5887] pwc: recv_control_msg error -71 req 02 val 2500 [ 419.498713][ T5887] pwc: recv_control_msg error -71 req 02 val 2400 [ 419.518155][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 419.521525][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.534871][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 419.552272][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 419.569777][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 419.582859][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.586914][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 419.617502][ T5887] pwc: Registered as video103. [ 419.639241][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 419.673348][ T5887] usb 6-1: USB disconnect, device number 27 [ 419.843594][ T30] audit: type=1326 audit(1775041407.420:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.5.1447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb62d19c819 code=0x0 [ 420.088938][T11398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1449'. [ 420.143577][T11400] loop2: detected capacity change from 0 to 7 [ 420.151582][T11400] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 420.166825][T11400] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 420.173847][T11400] Dev loop2: unable to read RDB block 7 [ 420.180099][T11400] loop2: unable to read partition table [ 420.186137][T11400] loop2: partition table beyond EOD, truncated [ 420.210647][ T5194] Dev loop3: unable to read RDB block 7 [ 420.216286][ T5194] loop3: AHDI p3 p4 [ 420.220665][ T5194] loop3: partition table partially beyond EOD, truncated [ 420.228938][T11400] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 420.238764][ T5194] loop3: p3 start 1702000233 is beyond EOD, truncated [ 420.797920][ T30] audit: type=1326 audit(1775041408.360:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d19c819 code=0x7ffc0000 [ 420.850529][ T30] audit: type=1326 audit(1775041408.360:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb62d19c819 code=0x7ffc0000 [ 420.878377][ T30] audit: type=1326 audit(1775041408.360:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d19c819 code=0x7ffc0000 [ 420.912156][ T30] audit: type=1326 audit(1775041408.360:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb62d19c819 code=0x7ffc0000 [ 420.939900][ T30] audit: type=1326 audit(1775041408.360:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d19c819 code=0x7ffc0000 [ 420.962935][ T30] audit: type=1326 audit(1775041408.360:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb62d19c819 code=0x7ffc0000 [ 421.007451][ T30] audit: type=1326 audit(1775041408.360:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d19c819 code=0x7ffc0000 [ 421.041055][ T30] audit: type=1326 audit(1775041408.360:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb62d19c819 code=0x7ffc0000 [ 421.048672][ T5887] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 421.091959][ T30] audit: type=1326 audit(1775041408.360:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62d19c819 code=0x7ffc0000 [ 421.227270][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 421.241677][ T5887] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 421.251303][ T5887] usb 6-1: config 0 has no interface number 0 [ 421.258022][ T5887] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 421.258698][ T5194] Dev loop3: unable to read RDB block 7 [ 421.276764][ T5194] loop3: AHDI p3 p4 [ 421.281933][ T5194] loop3: partition table partially beyond EOD, truncated [ 421.284171][ T5887] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 421.298756][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 421.299064][ T5194] loop3: p3 start 1702000233 is beyond EOD, [ 421.306963][ T5887] usb 6-1: Product: syz [ 421.306984][ T5887] usb 6-1: SerialNumber: syz [ 421.323227][ T5194] truncated [ 421.323974][ T5887] usb 6-1: config 0 descriptor?? [ 421.389979][ T5887] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 421.400636][ T5887] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input31 [ 421.646032][T11422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.655417][T11422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.879192][T11427] binder: BINDER_SET_CONTEXT_MGR already set [ 421.885345][T11427] binder: 11425:11427 ioctl 4018620d 200000004a80 returned -16 [ 421.906070][T11426] binder: 11425:11426 ioctl 4b34 6 returned -22 [ 422.167328][ T5919] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 422.323763][T11432] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 422.334971][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 422.344616][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 422.356723][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 422.374829][ T5919] usb 3-1: not running at top speed; connect to a high speed hub [ 422.397695][ T5919] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 422.423137][ T5919] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 422.441296][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.457393][ T5919] usb 3-1: Product: syz [ 422.466094][ T5919] usb 3-1: Manufacturer: syz [ 422.475349][ T5919] usb 3-1: SerialNumber: syz [ 422.712109][ T5919] qmi_wwan 3-1:251.0: probe with driver qmi_wwan failed with error -22 [ 422.909563][ T5919] usb 3-1: USB disconnect, device number 72 [ 423.092687][T11442] fuse: Unknown parameter 'user_i00000000000000000000' [ 423.421424][T11451] loop2: detected capacity change from 0 to 7 [ 423.429118][T11451] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 423.439476][T11451] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 423.446515][T11451] Dev loop2: unable to read RDB block 7 [ 423.452965][T11451] loop2: unable to read partition table [ 423.459252][T11451] loop2: partition table beyond EOD, truncated [ 423.465907][T11451] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 423.761312][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 423.768497][ C1] ------------[ cut here ]------------ [ 423.774331][ C1] URB ffff888029bff800 submitted while active [ 423.780437][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#1: swapper/1/0 [ 423.790264][ C1] Modules linked in: [ 423.794644][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.795804][ T5919] usb 6-1: USB disconnect, device number 28 [ 423.805256][ C1] Tainted: [L]=SOFTLOCKUP [ 423.805269][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 423.805283][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 423.805317][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 07 7e f8 fa 49 83 3e 00 74 40 e8 dc 30 8e fa 48 8d 3d 55 8d e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 c1 30 8e fa eb 05 e8 ba 30 [ 423.805337][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010087 [ 423.805360][ C1] RAX: ffffffff87377e14 RBX: ffff888029bff800 RCX: 0000000000040000 [ 423.805377][ C1] RDX: ffffc90002372000 RSI: ffff888029bff800 RDI: ffffffff901f0b70 [ 423.873111][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 423.881116][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 423.889127][ C1] R13: ffff88802a471830 R14: ffff888029bff808 R15: dffffc0000000000 [ 423.897300][ C1] FS: 0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 423.906260][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.912866][ C1] CR2: 0000200000106030 CR3: 000000007aac8000 CR4: 00000000003526f0 [ 423.921030][ C1] Call Trace: [ 423.924329][ C1] [ 423.927271][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 423.933477][ C1] ? ___ratelimit+0x58c/0x8d0 [ 423.938755][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 423.945309][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 423.950887][ C1] dummy_timer+0xbbd/0x45d0 [ 423.955423][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 423.960396][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 423.965963][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 423.971093][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 423.977001][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 423.982081][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 423.987035][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 423.992270][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 423.998031][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 424.004134][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 424.009315][ C1] handle_softirqs+0x22a/0x870 [ 424.014107][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 424.018902][ C1] __irq_exit_rcu+0x5f/0x150 [ 424.023600][ C1] irq_exit_rcu+0x9/0x30 [ 424.027945][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 424.033598][ C1] [ 424.036550][ C1] [ 424.039515][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.045535][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 424.051219][ C1] Code: 0e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 32 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 424.071017][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 424.077123][ C1] RAX: 00000000006450e3 RBX: ffffffff819a913a RCX: 0000000080000001 [ 424.085191][ C1] RDX: 0000000000000001 RSI: ffffffff8defa71d RDI: ffffffff8c27d100 [ 424.093779][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 424.101860][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 424.109892][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 424.117889][ C1] ? do_idle+0x36a/0x5f0 [ 424.122174][ C1] default_idle+0x9/0x20 [ 424.126429][ C1] default_idle_call+0x72/0xb0 [ 424.131296][ C1] do_idle+0x36a/0x5f0 [ 424.135386][ C1] ? __pfx_do_idle+0x10/0x10 [ 424.140010][ C1] ? do_idle+0xc/0x5f0 [ 424.144127][ C1] cpu_startup_entry+0x43/0x60 [ 424.149019][ C1] start_secondary+0x101/0x110 [ 424.153802][ C1] common_startup_64+0x13e/0x147 [ 424.158763][ C1] [ 424.161890][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 424.169286][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.179984][ C1] Tainted: [L]=SOFTLOCKUP [ 424.184405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 424.194644][ C1] Call Trace: [ 424.197932][ C1] [ 424.200785][ C1] vpanic+0x56c/0xa60 [ 424.204792][ C1] ? __pfx__printk+0x10/0x10 [ 424.209398][ C1] ? __pfx_vpanic+0x10/0x10 [ 424.214098][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 424.219592][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 424.224982][ C1] panic+0xc5/0xd0 [ 424.228825][ C1] ? __pfx_panic+0x10/0x10 [ 424.233283][ C1] ? common_startup_64+0x13e/0x147 [ 424.238515][ C1] __warn+0x315/0x4f0 [ 424.242522][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 424.247486][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 424.252377][ C1] __report_bug+0x29a/0x540 [ 424.256997][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 424.262405][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 424.267410][ C1] ? __pfx___report_bug+0x10/0x10 [ 424.272469][ C1] ? dev_printk_emit+0xee/0x140 [ 424.277344][ C1] report_bug_entry+0x19a/0x290 [ 424.282317][ C1] ? usb_submit_urb+0x7e/0x18b0 [ 424.287352][ C1] ? usb_submit_urb+0x83/0x18b0 [ 424.292312][ C1] handle_bug+0xce/0x200 [ 424.296609][ C1] exc_invalid_op+0x1a/0x50 [ 424.301150][ C1] asm_exc_invalid_op+0x1a/0x20 [ 424.306111][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 424.311781][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 07 7e f8 fa 49 83 3e 00 74 40 e8 dc 30 8e fa 48 8d 3d 55 8d e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 c1 30 8e fa eb 05 e8 ba 30 [ 424.331420][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010087 [ 424.337704][ C1] RAX: ffffffff87377e14 RBX: ffff888029bff800 RCX: 0000000000040000 [ 424.345723][ C1] RDX: ffffc90002372000 RSI: ffff888029bff800 RDI: ffffffff901f0b70 [ 424.353787][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 424.361850][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 424.369916][ C1] R13: ffff88802a471830 R14: ffff888029bff808 R15: dffffc0000000000 [ 424.377915][ C1] ? usb_submit_urb+0x74/0x18b0 [ 424.382786][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 424.388600][ C1] ? ___ratelimit+0x58c/0x8d0 [ 424.393292][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 424.398685][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 424.404089][ C1] dummy_timer+0xbbd/0x45d0 [ 424.408905][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 424.413919][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 424.419422][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 424.424491][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 424.430320][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 424.435272][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 424.440234][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 424.445465][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 424.451289][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 424.457464][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 424.462684][ C1] handle_softirqs+0x22a/0x870 [ 424.467474][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 424.472262][ C1] __irq_exit_rcu+0x5f/0x150 [ 424.477035][ C1] irq_exit_rcu+0x9/0x30 [ 424.481348][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 424.486990][ C1] [ 424.489928][ C1] [ 424.492949][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.498938][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 424.504693][ C1] Code: 0e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 32 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 424.524746][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 424.530838][ C1] RAX: 00000000006450e3 RBX: ffffffff819a913a RCX: 0000000080000001 [ 424.538917][ C1] RDX: 0000000000000001 RSI: ffffffff8defa71d RDI: ffffffff8c27d100 [ 424.547077][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 424.555056][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 424.563125][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 424.571195][ C1] ? do_idle+0x36a/0x5f0 [ 424.575464][ C1] default_idle+0x9/0x20 [ 424.579724][ C1] default_idle_call+0x72/0xb0 [ 424.584594][ C1] do_idle+0x36a/0x5f0 [ 424.588788][ C1] ? __pfx_do_idle+0x10/0x10 [ 424.593671][ C1] ? do_idle+0xc/0x5f0 [ 424.597754][ C1] cpu_startup_entry+0x43/0x60 [ 424.602536][ C1] start_secondary+0x101/0x110 [ 424.607411][ C1] common_startup_64+0x13e/0x147 [ 424.612842][ C1] [ 424.616405][ C1] Kernel Offset: disabled [ 424.620727][ C1] Rebooting in 86400 seconds..