last executing test programs: 2m52.896212152s ago: executing program 2 (id=1359): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05a00b000000000000010300000009210000000122070009058103b3b7c6d33b0675ec41bf6c7e6683598c0c5fa05eaf7f510e15dbb699443c47ff54847bac723fac67c72758976a0369775eaa96e5743e4709d7833c39eda866a0407cfbc1032d"], 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = open(&(0x7f0000000140)='./file0\x00', 0x30001, 0x2c) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES64=r0, @ANYRESHEX=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffe90, 0x10001}}, 0x28) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m49.817569187s ago: executing program 2 (id=1370): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f00000008c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2m45.907822123s ago: executing program 2 (id=1383): fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x8000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) 2m45.010459823s ago: executing program 2 (id=1385): syz_usb_connect(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xd4, 0x8e, 0x88, 0x40, 0x15c2, 0x36, 0xbb7a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x10, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x4b, 0x2, 0x8d, 0x4a, 0xdd, 0xc, [], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x9, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x0, 0x4, 0xe}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1130, 0x3101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x29, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0xf4, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0xb12}}, {{{0x9, 0x5, 0x81, 0x3, 0x100, 0x4, 0xe0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xdd, 0x5, 0x7}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x2, 0x9, 0x5, 0x0, 0x6}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xf9, "3f7adf208d5770bc9e5e052eb3cbcfa7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0xd1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0xba, 0x134}]}, 0x2, [{0x45, &(0x7f00000000c0)=@string={0x45, 0x3, "15937f01b2eee53b62d22a5c5afd35cec2522da68cf866dff058ce63000c5e9435a8b82e84c6b93cde980daad58b6847596915eb25937340ff26505fa447846c2e5a7e"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1007}}]}) 2m43.509968248s ago: executing program 2 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0020080ac020180300002800900020073797a31000000000900020073797a32000000000900020073797a310000000008000180fffffffdab000100", @ANYRES16], 0x1874}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) (async) r2 = fcntl$dupfd(r1, 0x0, r1) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xffff}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100000, 0x5, 0x4, 0xd, 0x3, 0x9, 0x1f, 0xc795, 0x8, 0x7fff, 0x10001, 0x4, 0x4, 0x1, 0x18, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x3, 0x0, 0x0, 0x1, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x2, 0x6, 0x0, 0x8, 0x7, 0x75, 0x1, 0x80000e8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0x0, 0xdf, 0x287f], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x3, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xfffffffb, 0x1, 0x7ff, 0x4, 0x4d, 0x1, 0x0, 0xd, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x2a, 0x8, 0x5, 0x3, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x8, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6, 0x313], [0x3, 0xfffffff8, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xfffffff8, 0x9, 0x1, 0x700, 0xffffffff, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x9, 0x6, 0x1, 0x3, 0xffffffff, 0x709, 0x9, 0x9, 0x0, 0x7, 0xff, 0x7fffffff, 0x5, 0x6, 0x43cd, 0x5, 0xd, 0x8000, 0x4, 0x40, 0x7, 0x7, 0x4, 0x10001, 0x4, 0xffff89a1, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0xa, 0xfffffff5, 0xd, 0x2, 0x10000, 0x1d, 0x3, 0x4, 0x3fffc, 0x1], [0x7, 0x8, 0x213, 0x789c, 0x40, 0x6, 0x1000, 0x8000, 0x2, 0x9, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0x9, 0x7fffffff, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x2, 0x1, 0x1, 0x1000, 0x81, 0xff, 0xb6, 0x3, 0xffff, 0x10, 0xa114, 0x20000003, 0x6, 0x800, 0x4, 0x40, 0xfffffffb, 0x0, 0x0, 0xfffffff7, 0x7, 0x800, 0x0, 0x5, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c) (async) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xffff}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100000, 0x5, 0x4, 0xd, 0x3, 0x9, 0x1f, 0xc795, 0x8, 0x7fff, 0x10001, 0x4, 0x4, 0x1, 0x18, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x3, 0x0, 0x0, 0x1, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x2, 0x6, 0x0, 0x8, 0x7, 0x75, 0x1, 0x80000e8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0x0, 0xdf, 0x287f], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x3, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xfffffffb, 0x1, 0x7ff, 0x4, 0x4d, 0x1, 0x0, 0xd, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x2a, 0x8, 0x5, 0x3, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x8, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6, 0x313], [0x3, 0xfffffff8, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xfffffff8, 0x9, 0x1, 0x700, 0xffffffff, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x9, 0x6, 0x1, 0x3, 0xffffffff, 0x709, 0x9, 0x9, 0x0, 0x7, 0xff, 0x7fffffff, 0x5, 0x6, 0x43cd, 0x5, 0xd, 0x8000, 0x4, 0x40, 0x7, 0x7, 0x4, 0x10001, 0x4, 0xffff89a1, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0xa, 0xfffffff5, 0xd, 0x2, 0x10000, 0x1d, 0x3, 0x4, 0x3fffc, 0x1], [0x7, 0x8, 0x213, 0x789c, 0x40, 0x6, 0x1000, 0x8000, 0x2, 0x9, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0x9, 0x7fffffff, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x2, 0x1, 0x1, 0x1000, 0x81, 0xff, 0xb6, 0x3, 0xffff, 0x10, 0xa114, 0x20000003, 0x6, 0x800, 0x4, 0x40, 0xfffffffb, 0x0, 0x0, 0xfffffff7, 0x7, 0x800, 0x0, 0x5, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) r3 = getpgrp(0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYRES64=r6, @ANYBLOB="00040000"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000007c0)={0x0, 0x47, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x20, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x802}, 0x8080) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) migrate_pages(r3, 0x6, &(0x7f0000000040)=0x3ff, &(0x7f0000000100)=0x6) 2m42.355742105s ago: executing program 2 (id=1394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="ba2000b0bcee2e26266565dbc30f356464660f3a0ea10e0068f30f09baf80c66b8ba0d798066efbafc0cecf236f36685476e66b9800000c00f326635002000000f30b8ff048ee80fea24", 0x4a}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="ba2000b0bcee2e26266565dbc30f356464660f3a0ea10e0068f30f09baf80c66b8ba0d798066efbafc0cecf236f36685476e66b9800000c00f326635002000000f30b8ff048ee80fea24", 0x4a}], 0x1, 0x43, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x9, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m27.069653911s ago: executing program 32 (id=1394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="ba2000b0bcee2e26266565dbc30f356464660f3a0ea10e0068f30f09baf80c66b8ba0d798066efbafc0cecf236f36685476e66b9800000c00f326635002000000f30b8ff048ee80fea24", 0x4a}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="ba2000b0bcee2e26266565dbc30f356464660f3a0ea10e0068f30f09baf80c66b8ba0d798066efbafc0cecf236f36685476e66b9800000c00f326635002000000f30b8ff048ee80fea24", 0x4a}], 0x1, 0x43, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x9, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.935229654s ago: executing program 1 (id=1936): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) close(0x3) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x31, 0x5, 0x8, 0x8001, 0x0, 0xe3d, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) (async) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (async) r6 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0x3) (async) ioctl$TCFLSH(r6, 0x540b, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0x40000000000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) 11.442979427s ago: executing program 1 (id=1943): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r4}) clock_getres(0xfffffffffffffff6, 0x0) fcntl$setlease(r2, 0x400, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x60b, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r9, @ANYBLOB="0200ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) write$char_usb(r7, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r7, 0xc0104811, 0x0) syz_usb_control_io(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 9.413599822s ago: executing program 3 (id=1953): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000200"/28], 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket(0x9, 0x4, 0x9b97) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0xc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x24, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000700)=[@in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e21, 0xfffff800, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, @in={0x2, 0x4e22, @local}], 0x64) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x4f7, 0x40}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0xc00000000000018, 0x0, 0x48) (async, rerun: 64) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r9, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) socket$netlink(0x10, 0x3, 0xa) 9.344441686s ago: executing program 1 (id=1954): ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb4b, 0x9, 0x18, 0x0, 0x400003}, 0x0) syz_open_procfs(0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r2, 0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xffe0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f000000c540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 8.184082153s ago: executing program 4 (id=1957): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2000000, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}], [{@audit}, {@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, 'connmark\x00'}}]}}, 0x1, 0x0, &(0x7f00000003c0)="f889a995c078ce8bdd08284324f6f91f51d94e4086a703b76dbbdc84d076e9f21c582af8a1caf1cccd8301512f4df4900f408eee2a61a0b210d0647cbbeb95037272c3f0f7d273fe9b2e") r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x1, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.12421215s ago: executing program 3 (id=1958): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x204402, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/134, 0x86) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x9a974000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendfile(r5, r5, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendfile(r3, r5, 0x0, 0x401) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/177, 0xb1}], 0x1, 0x800ee, 0x3, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00004b3000/0x4000)=nil) (async) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)}], 0x1}, 0x0) (async) socket(0xb, 0x80000, 0xa4d3) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x200001, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0) 7.015765177s ago: executing program 0 (id=1960): ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000080)) r0 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x401, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0xd}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000000000040"]) sched_getattr(r5, &(0x7f00000000c0)={0x38}, 0x38, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) readv(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) syz_usb_connect(0x2, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003834a6b2099040d10a2840102030109025200010c2440070904b800018c8c02010a24010400000201020924030203030201a60d2408010700bc5affd3dc187508240806050005f9072408020600030924030605030303070905032b3b"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 6.03859185s ago: executing program 4 (id=1961): openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) (async) socket(0xa, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 32) get_mempolicy(0x0, &(0x7f0000003340), 0x8e09, &(0x7f0000ffe000/0x2000)=nil, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) r6 = syz_clone(0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200)="89fd305f090a52eeee6ccd925de88fc24257b5d79d60e041bcb917ea12910cfc5f80c5925602ef7544fca0d06fbcf05e795d92bd4e6a1ef789d73f171038449bee8b54b127dd3a5893fbe768279de8f9b1868cc217dbb177cdedd27e02b5be657358f864e4a99c6ca8a485fa6b47468b55") sched_getattr(r6, &(0x7f0000000180)={0x38}, 0x38, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd777ec1f, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}], 0x1c) (async) setsockopt$inet6_int(r5, 0x84, 0x24, 0x0, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x3}}, 0x2e) getsockopt(r8, 0x111, 0x4, 0x0, &(0x7f0000000080)) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) add_key(0x0, &(0x7f0000001380)={'syz', 0x1}, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r9, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 5.73998401s ago: executing program 3 (id=1962): r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r0, &(0x7f00000019c0)=@abs, 0x6e) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x111840, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r6}) (async) preadv(r6, &(0x7f0000003300)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, 0x0, 0x7fff) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}, 0x0) (async) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, &(0x7f0000000000)) 5.351949515s ago: executing program 3 (id=1965): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x800}, 0x24040040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000006c80)=[{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001880)="cc964a6c6f60cc05f95d5dbb7c8276ecb8823f6f90abbd6131b1f7eb191e79779a3d72577c9018c5c79324a73a3c43a5c2ebea7c24db369101f1f7f1cda4eb147ee14b3b035e4bd8bc34721f15c742e6a6bdfc584597f002aab73afac8e4ce95ae4ed6f6c3ce6306cb730101bf13b0c9b4155ea32691c29ef5f5b521b46e0955df9993c98f8362594a442833352131908d", 0x91}, {&(0x7f0000001940)="f34ebe455e5d4e604159b4e8c69e26ed0b9a6b7cedf74457fb07fa97120afac0bdcbcc986fc7aa70555a66e3939246b1b7f183b8a815269442863c495c94053037a76813776dd4f46333ccac318e5982b8796ecef28e92f289b7521e40e2c4c846b0457b00a304b9be15a4662755f552ef0cf996744b42c2a6765989299c223fade058b54572aa8eac20c63f2a8ab7542a6059c6c139ac3db16bdb38b325bd4b45aafbf39ceab4d2c03fb6eb25c887d8041d8b6afaf8a6c294f2ade5f667048f85d7b4d5d0740aff63e86ad34b1d9dfe72d7c2ef28cba6d5dc7bd9bc72388b5555f08c88be7d5860f0997cd00cd72aa7e997249eff230dbf25a290870f0b809dc53c18b089ae876598835382386f58c368720e5a40a1f207229054a7f9af1843c8ba26a5dcef44db66adda460e61f1c31af4e537845c43d69a85748a194a98d035218272caf66e484835b8f85fc8993b7848355d3509e8b6939bfbc0396461747711e1e74b24a8b0f6489c542dcc8e43e86c002ad137420979d9187aaaed908a28d3ce27cfb92263a7d39a44af19682f135ef32d068ae3c1d3952676d4c4d19f69b67ff5bff3f87de6efc444a3be42919a28b1f893dd2b422cffb044cbf78da4f50a2b21a7f4b087eed383797b41d373ef52ddae332e308682dad523558b8d2daa3038f4a120b6bff355f273fae59007e56eb6531be225939d343e3ebbf7544e831f282590f714db6311b60e685b4683fb1015d4e5fccd9c2dda6af93f34c79e5a5875b9117a9bbbebf12502f5cfa6db112bc0f218ddf104ef17768e5b6d051854dc93da2c397ef745a3db5324ad142754977accb7f229a3697ac545e72e0a8d89368d93bb8469290f4884c15f5f516d0fe28ecfdf907ca4b8f1e0ae5f278d4c0fb40470f17ba89763dfbdab0df19f487cab8c763df54d65e9e41df6d8b549a0d67c716a9adb7f47f59f4158042d468918d885718451e58135390d052668868941dfa3b19b9797ea58d065d799c1497cb1efa1a06ce9b757fe485dac169d80815448082321ddbcdca6491900ad0ddfb88d04f6f92d4e5d672bcf8ea698b730d5b2e161523ed0b5e5d25320630743cf586b0f89231e37b9a8cd11f7ad766cebcc5bb0e6e649f0fb318598aeb517dc333a751d479d84b84f7836c4ae973b8125fccc9db47f6f713ee19d6be783668615eeaf797b92fd3af9a49ad52bea5ea44ad9636c48047b3e58c127bcfdfdb43ff272ff9890ce34ae8b8cb964f07d7177a3192735886abf236ce2519237ef1050eaa740f4eb89cc3452421dd769d7f6a5c1d46afe1d566cac3d969aa1dd7cbf72f1c1e80bdaa773829113e2f0607bbc66a2be9bfabfd0962d02dccad18d3bd1b4ac6ff5420a74e9dea010c4704b0fc52a4b71507f1670598f4d5f2a988c0cc57ecd94df47750eae049e8f71cdbfedc47fad496e0df9b5ed26cc4456f0133264db48cbfd64d9f5306a13e1e48298eb5a95e8c56397303118cebea87c518a73ee49e0da1e385e191479767d0b5bbb0440a40ade6aae12e9be3b7843cd2838a87ccb890a6a82f1d0629404db16dbaaa37abad4980dd89f0c8912155db551e49346a52846ea79412e0049db869c91b63d327cdd4dca7452a248cf69777ddf66e54d1753b445e828a048b0275bf9c821935c15683f83d3cf18c24a2c97e6f82b8d850acc156ce4cbd4499550a7115fe7c4abcaff7bf8769f952bddaca05b66b2c0da0ed4b1a02ac99e6112d2bacdab80ed625e01bb24fab2fbf0917504f0821c58006473c71cdcf65465a7f43743488f64c20f1fa31050b20fe92d4b942fb326c31b0b08c621f37f7d07d2a7017d64f5399aeb6489aba116748cc7546bb2495a32ada41199b404379d1bcf25bdf0d9fea1116fca3423275c80f7d1551dc6245b6911205c97e260a840371ba3a4125ccfd160ada13cebccd52fa1177ad62e363fb1e64a123fa797fcbd4343bae36eadfe5a00317183f6d05f8a1efc7a611e4b47cd1a65b6526b1212d75b9847a03c2c77a26773132052fa6798128692c4c7e14c8719710318b8ff66cd52bcefc76d11e38a32cfe43082b5e94713a15777640e5d9c039d3cfe138945d343b76966044be424387d28fbe7289588c2cdf4244d059a903d4d0641b010847f3042d392dc595a12fdc139ddc63a326200a23d8ed820c54fd7b3d108aeeaf826927a402e84902ee32abdc9a4c0e0c415aa09ae72d30b9fc6ee465a5accb516ff522dd719dcfd581f5df8166119cb74902c682e50567ce6c31fde03aa7c98350a849661c7eb86121fe8be69cba4db1695660360f994268e33aca8799ea0c4c10599b4f95e59c7229a47ce0f75d7d8c8148b02eb3634f920eda3e10c90bc55ea7403957a85bcda4f8772244320017dfbd012d3db15c974d4f46df07d7ea344cbc92d1661a9a07184c742ed0a11f1570befdf6819a41951a5292f5a15cea9c3e3e990ef28f4091a4c8f19e1ea0673662c8da3ad2fe7466b31323b8b326ee40fc9dd39e929eeec6e98f7a5a68d89157f2847ca5ddaba8a07e7df1dc9d7a6c2920f7bf850494feec0e47019d62fca7e4d8024033f1b9c95375009f1fe6f6ace8a7f26277dc47c1d53f80225ef027e557eb10790c831c79cf8555883d1c0323e0f1fd937219f7198e6e1a8d33e8114fb2fa81f37d02a917a114a2d2af0858abf23591d670e05dd5e8960281f10322440b6394eccee1faba7b3facf3f5868c4790e75e4e3b1bfdc0f329a315d6e162fb718d5e14559b240aa174360a8cfbc2581a9bd33ecb577ee72984535a20e2c694a79736ce1a7ed90dfe0236b11552db2a9ed144e339a4b875217aba65aa0de0c9f094d02e50a50463f50e866f5d0345619853d8725eb4d6b13bd0d98a54fac85684ba8dc64ccaef0cf39f6b268a9bf46897b4d7b03b92547cc6d9119af01f9595babd9221d50c8ae5d4b5ce80d56d54353c321c3db6da620e7795b888719fa5693631341f31ca11181b8e336502b31b28ed9fee249645b0d21f60b521abdaf876d7072207c75af78925d35b95ca44630fff3553b9a78feaf21a9f474ebf495456b843904271680d8e8fd4f4f6f796affd957b58c7ba408fca800d257c855ba8190ee9fa24c11011559f6f6b90f601992c7ed225978a6209dc7bc372b1f119a6101983e23374caf0b1500ccf2dd1badcc2e0c7e0d20da054658027b6a3921ca048a7202a0511fd0808072054f8766319a618a7d51975f900c218ed85a8a39f135d31456505a010117dfe8b27a8923ce50c93315d5f2c6754f625400389f73bab09e946b2ce31c5e3e997197c174c5d0a21d3f956a124544d1c8aadb75caf85d48a97f51c4710a55ed8b19ac9714ba87de665d414c2b1c0b8e8019af88dcddb54732b720c840241ee61509d6281bf263721a7cec6b71c6c49e3876cd4f8f8b6fc57e7f17587bb51493e672b2e6725a5e64cfeaaa6081ec929e2be0ff753f71f8c07d8b5e4555ac6ba4f4fe5956288988f991afc7d6c3ec8399fb3b9ecaf8917514c1700c5a29a2379baf11ea621ca49c5a855bb6a6313c2a0d947529eb02103fee83685a4bfc3f86adfa52d2bac3a2e644130056e55110fbe0b31aa362be9d95e9b3366cc3aa4aa03a2464ef8029465f72df91484205d2f073af251d5489b58c19c93d9ff67ce057553085bf128dcd25649eb3e39ec62fa3b0564517f16152d170ac6a427b74628c8421b010d046fe4f76cee70777b0bf7669ab98b252e6c13ff02a0e39a618da0ddbc776cb18319c233ec37f322381656cea53a723852a154cbf1df49f0abb397422e9955fdba665cec2899f42f2c621d5fc0d41fb3a006db1f1c8e32c9e7d22fd13560e164fa0702487997b6ea8a9b0ba8d9b00507413d811f56904d0434c736415f731f4fa6f3fc1740717aba7d328515944a485d556b1ea07debe5fddbcb214120ae4c498656d0f194538f4d5ef053b2faecdaa9b0f7e237632b2a2a3f7522654d6a9d4b3c3d7305dd6d690e469cae867f75c900f92c4a7600a1db47f8fb4de05737b18fb6f3782bb25484bc0d18226b057abf0f93358d2afd6a05334bd97af24225c949f5893ed32fa29bbd9db046fad12fa0b9b0a3734228b25376179b1d656515d133b75b511092440e32b6d8d296f2fc7ae6b8bec4dc2d32eac163fdfa4055ceb68974afbb869feb35eb250000b3cccc50b29d403ae7842db64b4fd1b0e6015b9d810f4874c184e093057ba88b07d2d0697f32d55b8563eb944aeccc897cf9672296c66764a2b72566f410a11119d8cc5818486de0440f31e70265ce8bb37ccf78af830b416baf2891fe1c94f5040f30a59030a5e2d8da5a47e4a825baa302d0723d3249877b526fa89668f7aec228f7574cc4538ebf1cee331ba86a1659778e1beacb42e1f2cbcc0c4e6bbbac2727b9c661a0caf2505237f934700573021022a66b39b199de6b02c86a445b977633ec6be533cee7ca16966ec66237b3f9312027a35e169a913b3d3683c346924857c6fb29df102cedb46c336600bc4e259f5efda3c39b051eb75b6cd7246e38ffa4a74dccaea1c6c64d3402ed314dc842ceddc96512823797c5f495214737484b9f9c70bbfd13378772687b04831c86378f4f81ec99051947bd671ddc51438b3ea76b9f75481b235682012612b7a7e33fb32eca128e955a18ee03611364832e4c878c7318a65e1a6de9d1e279c04c762a74f0a5afa742fe5c709134c27fb3ce845317e7b37ab368de1b9f63ed5daf490e4548370e30b07adf209798a04e2d8fbaa3cfeb7155e9f36feeb1b9e8099d0cdcd573f35cc881bc96b3e1855824d3c86deeeadc57632bf90d09852d07df76b0d4e0d1279822a6c4c5377f94a56300be337f0a2120dfa89c9b4316852f7f1126f9701946b21d473bdf323928407e232753a05e5e80e940c60278cc8eb8b09f608b256df13355dd74f668e8f1a09d8838a9727f977a0885c4605a196abcbc54acad6170d038174e33c9cb70ab31ed65b379340a264a9b5dd1367aa82881da4b83e0fd6de51424f391b341b7ec4b12c86bbffc03d15752b97cde46944ea0f525793fa8251d72512b2f9f5e8cd76e225b5458fade6fe87502c8624804dc118ef920c7fb85aeae2aef561ff38293748e6eb911ca9d607f6c21047a01179a0e7ed9d0fc7a1c6f6e7ca745929870afd68d0e911c0d7b1433f2ab6a96e0fbc62d7def76db4e61180ea0eaa74b6ca21b95ff7e48d9dc381dfbfbb165e1a36a9b3d1f896a35c18ae4fc63c19b68575f54f0db1b385ea3468ae77d1fa79e073b6da845f125377656b99832831f21154126d30448159467815325024d978b8cd7bf53e8517179d9aa12e5909316ffad809d3df35ead04646c9aaf48442bf8360ed6bbfe2b9b52c821adf9e5a06c9881e77f5ce0034b28984b3a83b5fbc9def754a51d88eb0b3a9dc568e3d99a5142c2dbc595e83d6118cc28e10a9598a29207d9816a8aa892d3988ccaf8fd9e4a75c955d12d551a27d8338b0ae6b95e45d82129954b2c71ae7c3084afef14b639e27d722afe919d266888ed3515cc87053f747afa6012f329160cb32abb76e107db2815ce45d14c63c9e3262492c209b8b2e", 0xf80}], 0x2, &(0x7f0000002980)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30, 0x8001}, {0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f00000029c0)="e02a31b6ed03e21c6ddced76656cec4b51df1e7bb78e90b2536189f2fea5", 0x1e}, {&(0x7f0000002a00)}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)="1d44f721829bc457e452de7fe4a472b8292927fb0d091ae034a89b33b9bae2a651b78d23bf9b9fac9e7b46d2ef3f588e6da95fed3d0975755ba0181e2d9ad753a514f076b66eccac1d8487492aef92e739b153731b8b639a65e9c9bcedc567b68f73eb429a595b95b238b378778eb6398929bc79e223a999ef69556046d05926acee50a59dcc8368bf3b487f1e4f5f1e9be90de08b66f0a675ced94174b6e27cd0ae004809d983c096b9bd097893f4f143ba94c74c1987ce95f199a7b90e9f87bb8bd06c36756ac9d4ec7bec411937060ac452ba43a18ec352afd931ec2bf6fe8f5c5acf9e4675c4c51fb5d852388f76ea1051ef38e2e3d3", 0xf8}, {&(0x7f0000002b80)="55e3ae4b0bf65993df8c51c95c1319c6776da47ea4a688d9db7f04ad5dac9719f866a8adbcb61a758a9a34e03d901ec16d994149b5f8ad80fe76b7e34f53a0ab78644f0b8a3925186f6bf08bd159b9b4de5bcbcd399cd2358c02e51bd6a4b0d70f120c10c54c2477bb7c831f2448fa92bdfdcd1f377a3ed95d5a3cfa6f0b9b1632f954b8206ec0bd57df9a1c71d317293b5188f58409783008a72830a7f725d79a4f84a951b6f8a67e0d7b1808789c1842907cf68e2bf992d32faa3cadc25bab618b496ea5dcc222d6fd2f2f6bc4e3e3f19b742109b02f368c9a8cc774cdd2b184d34a82d0ef11d700dd6f201e177c0bf279c6cd4bf5a6f63a7a54094e4ce4c802867ad255866f9ee716180d158ac9691e71508a39815cc6802bdd30e7d7cba7562ac0050897a52e8af4f90584a82dd09b120ea9cb7de0a38ed1a3a1a16f925f6d3a811bb0ae5dbc4264b17ca1e01f56203ba396d54435090da369f0ce462da9d52450c4ea7d94f4b728c63cff28822fbcb484c539ef732084c4966454cce32e4b77e07470ef086298f9fae999eb526d057252e225c9cdaefa60550f7811eb3557d629dc9b99f9eee77774d54e2b7f6f028ae16ce203096bc20970157df142580608f7338602163c2d2c8a40efe675d322f04283f7cf993c04f9a6c81fd5194429c1f59bcdf701d5d3591df487af1552cfd432691db9fcf16266cd1696ecf1be80a85c429efaf6ee0013fd159f0809ee40967a6c16101a37ea019de6a2062471222d11d845c452c9fcf696a704d453b7e87061c610cde95f712c82bc5733815ebcc7090d3928d7b041d4476766c1246bb1a6caf806c0ff4cf424488558071d753ace87ae8d2ed715965e6dc603e70da41679a3f56a73576f73bcd623e897417a966561417b5464febbb9a5d4f4728e51c78dc1956d1e6f06d850dd493c3996cbd1557ddc1c4be13d1aeaec266831c6c99023a362796dce85f0cc924b79fe038f810e9aa7b9077ac5e84529955e7884ff56d3282faec5db74966a27fa4c8afca8cd77a862f2b88df11b9f16189b36fe5596b2b779a445280a7dfc8ac5ecac87b0a2547e842016607afede7fd58e3205344efd9feb6d988dc91eab50abd7fab36b798a042049d832f134193009ab86e9160c974e1a8975fbdf6489bd0b74d785d88b33f232b521a4ea3de04da1d4d43f73d882955502df1f112a96de96b44b8a27f12b78207e755ee7630c315d1022703be78b58c02feaf45741748f559dce8f64ced77fab8d0fa1e2646dc15acc1567dd8da40e2dbf5cf7f3d05e5a474386d2fc8c49a87143cadbb16b8acc7e2a5c90b70674ec53215155efe084dbba6d96db9beee0e78ee00d6186adb6089273fc2ebf4306d3d4962d28ff8a7fa97d6142a6cf773648981eb627736e9153c1e59ef7021a1f59ce2cbf67885170ae8e29866b562bbf8e52129d340f81f1d1d9f16c1b893a83c060872a8222836ef4fcc7d18b0b3c463025ed83d5baf6a9eb3f914dced65bbc0efcf0e21537ebdbe24fdec4ca13d802321c128a4acf38827e45bb8a2a55adbd9c10ecb21307510af6e38ec692bf1c35c5344ff9ce1f2528ab7d9ebd39cbbd6b988f3099ad49e801f3d46434939368f8649e8581b3f14dd71b9429f18677d4309e9078776f130ee629198d4e7424a496b14756970c39c817c6c10968f183a25641af324316cfd6b40f258547d1ca858d227a81f867eb4e4e4adea27b3bf11591d55201377dd54283daf129b577c424a5484f28fb2be3b92f539ef0f0936e5d38ccb5b78ebdffc44bda90fb7c69c95898fb76190efd82723e9717bfef50fc7acf2107bfe02324dc143d4bd7f4fb9d98d52a7a6801ef6a67ad0353754bd1e1df6476deeac8f76b241ea338c98df69b4d031e00b47dd330d701f37d85dd1a60c68f7bd6613a94c7cbc3476bf1423acca92b42bc274c2c11e6d0e0851693fbe0bcbb2032ccdcc2ecca76d383785128b355c28ce168638ae163180a9f5a4e4aa02ab712ed138060177a0be2906bafc912aac76353b21d61acf45b88feedccc14da739ecb42775a837d0a6ad7a0d938fe3af1b76c024902a7adc07121f48f683b855de4d52647650a85fdda3e8ad31df0ac9953d6262a31ae14203dea7079192046933d308ac20effb4214769624c2ec1fb806aa0f80923f288a90c905ec8b33703e44eb1dc86efddd064ef805ae9a8b3fdc625d02152166d1dbe5a6b04706b33ea46ca9c1a790017ae9112a65951b1b481828fd9594123c65fd78df89d6c19010bba7d24ac01c0525a1858f1d04f134462054e18e74954a16b99d9c38d70dcc744f6a8cc9e7a96eb080dbcda757a19f3727ece10db6a196b995b6b664d14728846f64be7cc47d9a75bd4567e964256122a35dd325775e509999f9509e1a960576d047d74f06c525b2b7eb3f16c4808bde826c6d3badf594ce5f7c244c38475e4c4e47aba65ad1da127bd0dc7654dc8aecb0b97dd2d317679e7f7b72ccda34a9b33b6725b6dad2b629c76c1c6bf57cb6379b1a7b299fb85ab71308d57fff16468f76fab5dc52976216dd9ab64f4cbe56b9fe60be6c152f5a4b2c512d9b80e98ca1d1b2b55f3a92f6a955b6d6d066bfcbd8e4ecbbd1bcd374baa93daf1b56298a7881e4deb523511200b1d708da05408be8a9b71deb58bd9e7863399d4e0d55edaf15425ca16e97ba262af6e8742cd2aa65497ae4f4cbd614d65d842e42f328837f9c9dcbccd6ae0dbbd738ee80f2c7e375878e6472f998ae7177b0c3edc77e8628b21e3335600c251b5de16442e05462aea11204ff9b32d70c83977055aac0614899a29f3a1870e15f4532009d9d60fbb40fdb281309e5b33d2b866f37c49f7cb4a3c3a79153342fe2a9620bde7ca347537b9ebbd7d43b7eaa85506a0a38b7c95d7087cfa29e48f02a5ec182e3138ef9f5abecbada6d7d113e1eefbafe45d076ac984cb323e366d7b929cf3adbcd5ff455360e151702547338ac335ede61f8c3350cb7f567f2abcfb6ce20d3d4de4248427e2cf45e48637a9c917adcf46639b0c92d94d4e55a569ba4c65c3f4ce99894ca11734471c2d569960bd0a6307be0114fd1f33c8c85cc50fee888eac45e0e719ba89a3260de13140a33b7c1c54282d79e1c59d8248efebd50f706cec8dffcc4a67c93aca7cbaa22deb9f9193b50adc9b2192edbeba90ae257e7503fc8f74af888357bb055dcaf297716fb97d1e4c6e56a18cd57ed90a45b7083926fd35c26c1201177e81fefa3cec9dbfa012674811a179b53edc19df9ee3696c4662f8ac4954bcadec37c97331650a6820dba2a71db483c569315ac478f8c0ffa660edad0bc2766161e863b4b0457349b9c140f76132fbc5bc4efeab97d3ba4c99f535a172f5f5087e094204c63e3bea4a0d3ea24d2bf3c330847f5aa79583647ca29b2bdf3af2aec01ea14b4a1c7f6f3f7c036753a657dc6d27e03b87fbe4de2a00def47b9f53c8dc4f960f987fa3b97a440ede986f380865055b2f013c5e23b91c705cd6b81563a4531e22c7721899554db1dccabdae8d9341b3f85d14cd4a26e460efa12132dfe22a7c2bde140db169332f07aca942500478703e96a01b0057c8998c83b6cf97c3f50853e16d22146803752e24e733e45ac482b15bf2baa3f3de27bd630bc299f5289f3740571ce071a11efeb0c2fee6918dbec79935c83a620ab1b2525ea2365699dfa5f84ba127e312aad578460ea0da772bb6a2daeba407918b856ca8ecd7833992b6964028b0fd3d70b2375a0e71f297fdc1176c1a44188b361e41a7dabf70d75c406e89747f0460ffa29698bfbdd10e450ec6ecb9630cec5202acb707493ded4d377f12bf2abc10205b37cc5ac31f4b6a52faf561b0f6c8283362b041f75e498b82d8ca43fbf30f800b69699152a1fa0877dd13d7ec9e13e74b197bd4d2d4af7f1a91cdd1d7bd2ea271f4ae306698ba77413bbc9c8c6daf2416216722f5760259a17f49eb872cabe0c706658c6d2a1ce4f438e0dd8ef0f5f331689cb07ebed77f34ef37825c47b8d8f448849ea058bfb93d6cbedc20dcf115ce77341aa9ebff48a16f0a9571a78047100903eb77a52f94155d0084d82528e516f7796d8d32c9715893309a9bb66ed9ad26e65e1bb39d092199ffac7f23f5e9ca06e3f7eaa9cc1b2f3611d44b2fcb3253d2d56d43e0cb9bc5492f892adfe20dfb750d0a11a644b2f5543a3663344de3b335988cc3983c88e51b296f591ff1b1a3512cc4d8dc5150308126dfbbce256a755f5683827bcd9423285c3ec09e9e3b6f465c086161434552945c731768918b3ae1714831fac4eb070676ac0be88c231e1158670ca62eba0fc0df6616c06c7dbc75597f880ad1316adddd7da4a39d08b77f1bc920c0384fbc66518a32dcb2c2cdff172a43c072dfdc59bc81b930b8988a257b6480dac4db87417a7045640bf8c267c9942f225c3def517a0aed3a310ccad6d89baf7cbd8385727f24fceb9a571a0e3b6dc841c58acd5b4de49e69de1c4cb8f970534442d45988b6d01e1042f4aa8d05da99785883a454fe4c4645d17d84b2750bc3ddb0619410fa577c4d8ac7864173bdd498c1fb65d03fee3e04cfc3505c22700ffd2ae31f2543da6c9690a3f8fd5f9eb770ca22779cab6af8470433bc1d3a060459d81e02bc9ccb33219e30d1f7f609d96fb6520c3f4dcf7003ba9427f1e8ba862f47fc5a19c5a1581c08e76ada7c2b76581081a50522906cdef89fd07cc740cdd186640a2521c970a423a86211106e7b2ad8b01cc04e3e1856b3fdec49c3e9fef33f9d61aa2b844ed7d33a9d2865d1fd3b42160743ee06dde488121a398acf1a318c0dbd393cf137991af803305345b5cc51a1bc765ffe25e2eedbcfa6beaa2cafc0fa79f4edaa2c4732d254d15799c902fd70411864d7bd0f36017beea7bfc698c109f2befa7fe3c69cf186989dfcb0f371d5cea495d27ca52291beffbef0e0ae0a2a9e966acb949cee6cfa36ba4e239d065c8d0ec1b30e52705abaecf54a48738be9588970e69ab3795816818a7df6dfe59d573235b7ab253f99a5eef217a01e12bba64665b0f3bde76dd9c07eac42b2a82d0773891eb159ddac38879f44f7c7b85102dbe4ee5e82496dff370049cc8b75a98c5663e2680eef82eece2971dfce602b4479435596b9d1feef5d9205e4b3de46a3e846277ccb0af14bf58f72882be551d6e6b9f4c74a62349773a912c9eb62e6db8aa6d194c491d2772f097415fe0c1e180df092dad8a5bcdad6d1027aaf7fad44268696ead4efccf7d035d8649dde84c1bb98aa3bb90808694572d6d222c6b05b6cc9e7ba24d367c86f344d697e7707583dc982be16fc4c9fea6d8742b638c775dc8af93572a93b15e3b70d8266615fe533eedfd341572ae7c0b79ec29107204e56d5c73c6c30fe0a8b9d4e5bb74189be5189a1f525ecb5eb299cd6b07219789bd63493b5b38147c9fc407ea96da5c7424b5de5b5520dc6a9982656c5c1fa2ffdbe46dd2562c5f58b293d049394a9786619119714064fb18ae4d7f2d196107c6a8238b369514e09e0c81818252cb038506989ae4375b265cbc810f5caa8ad9a57097716d3cfea42b15eb476f4404f6d1c0d541785c87cf3f3879d84aeeeae28ee663c18e98ed681f69eb0dff5ba3ce1577fbac57ebe0f8ce55db22", 0xfb0}, {&(0x7f0000003b80)="b09ef48d6c99dd95db79698885e31dd9d002e5423f65727c7abb5aa2a8", 0x1d}, {&(0x7f0000003bc0)="eda41bb52b96ea4d1909ebadc87059733d48921f0baabd0cccc43aff5908d0c8810f441b6c2d", 0x26}, {&(0x7f0000003c00)="150cf17ca6f745acadd59b7bbe9884b081121fafd6b1d18cd82f9b0663be7d5a91d3dd979b198710269f9dbb37fffcc26655b6bc21d097d431f09e2a221bbd2c2bb8db5ef88949583d3f0d0d9ada7279079bf5b7274c03a5ef9187acc729489b0f1086295eb16de687b44fc0e906a02b602a78405a19fbae815e938217e4b16c81b59cd92c4510f29a6c0f4c942ea618c20354cee3245f21ddf04a86e00f44754d711bc087c665290ee340676a92080ee61311616c", 0xb5}], 0x8, 0x0, 0x0, 0x20008804}, {0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000003d80)="6c4d3e1ad9f5094795b2da50fd171f9a98f35d13dc19cc5682453f2fb1602e042345dd5f2a9099b1f3d63bcfa2a7ced9cf773f8d0029889140ade2dc870a4ac0309df3d9d05d7cb9323c1d2dac7a2e76ead191d486f12b8f2b6b62c05abe26fe4d51703d26626e6409a1fdb03539b7474dad5253400c56e8df7a0b9c2441c514a635beaad42ef7b13937a9ae30c937f74339978499b43b9b14a520b2eb7d8610952b7efdb3306ab1ba3263ea9964ec79e6d8724959ead505c439456b9668828748408592f9bad1aaa906559a8b1b4cd482077831b2ff94", 0xd7}, {&(0x7f0000003e80)="63aad5890e4504e660b41405f90f7dba3dcb5825cc12f77e96250b2fae0625a23f9c94538badb51428048c3ba9b89236de07295c088162134663aa4fdba54bf3549bae87796d28bd44ec0a49cf07e170d5e7ee9dd82937ab01166176349ce7b6a75929c14961a5c56038ea9abf34ba9be99fa9ab5379cad0bc591d", 0x7b}, {&(0x7f0000003f00)="bc7735d1220df550a5e44a8075675f3288fce02527b972c0bc83ad2ae53fbcf3ddce620bc381", 0x26}, {&(0x7f0000003f40)="9ab6c1932858764bd7b49cb547528839be0f91eee55369ec8b81510794db388f0e95a4059e013549ce8f0e9282aaa4751c61bab98d2dee72f9f7adab442c13c714fecaa288413928f3ec6eb61ea05bd60bdf8e750a40d9f5d9ac186bd0596250dc0d890af67e8cd921c1739c6ff61d92991506cdd6084ddd61de9dec35151699d88ddb9b58a0c9c6ac69a4c6a336cb141fa63113724ebb1affe43d23f4ea56d64191b4847f86221ead266c6fe95f9a95725d4261c8e7c36dd5c8f2b596", 0xbd}, {&(0x7f0000004040)="be4bc6b48c8a3ce128ce5a0b817eed169ab848c511d8af4d71a1c5b4c32a755b8a0d7591e8c3c9aac202aec3bc80ed20a104b59d38ac0f0a7f396ffc0c42ba6b4795191a83067643175c0f067887871080ce1548c2cef62c7f013ccd927fdcbce7f745aa581d28489babb6c46fb81c511f648ebb25a0ac30a05bdc0d630a0b4d954f3b3c7dd53d980c20a29c266b6b375e8c283aab8ab00c1002043545dc36b57fd364e153929e5b06df33d878a5dad99b98c691daf886673337775161eb1bdf060c4e583504c77c018fd1b959a4026850477327cd4e36bc3338f2c1af80aedf067d757f7b9d8257fcf57d2f6481f52671475ad7647daba0201782a86551b5c9046ede4290e0231afdd535d58d7d244244f9f57e47c369430a85d6dc6e94c551c0ea94ee11042c4bfbf81a32dc816e6265d3dd7d735899b1985fdad7fb6782038217385184ee5469344182d1a1d1a3f256e2554ed41fef15ecc3b089d04944e02db5463b043903c84f8cf78d7376ca5c314f56773355fd4e6f541e7680f36646365f218299f303b7f32238a7ddfec0cce0bea7b2885489d94e54722bd5e57bfd2544df9227360c0113a5dd3cc45372daba1ed5992a2121aded898ad74e9406959328c5b504d3ef331377648a1875eae5818f4e878128f036331f2f2d90658491de5a884c1da6fb4f27049255118c8d38e9fcfb01599d5ff5f46beb9bc1fd97fcf34850a8b5c55b488c562d99413ddf90645d0fa8083d49c7e0a00c00eaac235555b748b09847a8a667fe6f2db3b0267ad63f70b60dbe2b98bae558b5c74fdeb0c32ebba0eb48208b672fccadf69f60c134be8376350257d6125b19ebcddf89623e1c96e2d8100017e447ce3208be5fde99767a5713b48675691540bbb7e9d1546aa7e03e3bfd00bf501e17daf76d14074becfc5a2ea9fe82f0631e45ea986a0862fad82bb8ff97a1365e5aeab25cf5fbcc3a8ca1601d638b034f7370bca10f5ad200c82eb7536abc59a44dfa906ae626fa21e4ea55b0038f8eef85c79523c38035bdcbcb5cbec1fc56d5bc5698fb9ce31d069433d7cdb20c522c3ad73148410d0b4ede4f93f7f866d5274463409cd73294bada2aa03b2d8e8004a78e845c1de59db2b645acd0b94a56b15a65a5ec15739dc9df15ffcf03dcdf5abf1fad618f2cf74bbfec548f15278e3814bc37bd7650f81d061f1e96e841a3e9d732ffab68653013001456581c55ab4830a768f222ce5b339bdea542540a9dbb243dc6ce0f20c92e648b5c40ff826e84471d3c264b362848255397d4ae981e2bf512427971961f833e8148831232c47335c0168d8ac0eab848ad4ba7148364e6e82b34f73d23b1137591da64e5b218fadce7e686fd41a92878fc83b4a1da10771aceeef6b11c851ba47ede5868f7b1c79763c556f0a33fdd70531fe6980f51c800913c14f9c128fc98bb69e4cfc5b22f68fe2ba323fb2be0e80871b5a5e6ef60ff92f846316a5b596fdefe8f6f4006e48ec0046f429e74eb3a376e9c07ec6a86deeaca2a7ef3ce2516fdbbfb1e2ae071afd1ab3b9a7929f34d1889b3850a937ad4d6baceb9699848c6bbe579df7598d1821970de3bcdc240bb0951a020fcf5b7481a548c477785a4e434254ee8bc080ce9d7eded48e65f39e5714a88d9ba67c63a0f6c1bd60e65e3e9109bb86016c8ebd8ecb2a33ba555a3fa7383a059258ddd5f029fa0f0c9dd819b21be4bbff9cb3319f0e993d6d7992b6b894561d94fc759b694d0b7da68e98967b3f98374f1f82852123b02fefc098275d227dcdb595bd00c82fb2f5e539e18082852b788ce6dabb3b3ee320fc6fcb59ef9d9cd6fd214259f249f3bfef5fbf40e9f5bdb71ff8a3d5b8ffcde6c2b8c4044c58f021ffe308cac24e4c8ef775c40b696f52f995dc226dd77e6670d9bfa6358edcb6e0871561a49e11aed48a5c80742e11082195a32d7de157291004e24727366f7130860793f6007768dc4d980788568da0bea77ae501dee076900e44165bae404282ac816c82c96397d1940321e25390060af67f37c8371cde26ccf2c6b0307a784f904009f1ed7971a086bb855b850cc9ff5056dbe85c7f4c16e4cfc785f416312565db4ef71dfbef9b49f05feb7c7c945e347d30f77f2ba1bee02b00eddfe88a81c931cee3b958cac991e804704be563a0e9fcc9190231085ef480ce7c553d0673aecb556d7e8ab2c55c0d97246795dbe7f88cdf10c86aa9d7da71e74f09254fcb68276a50b4986adfbf24730be221ef7fad1c6c7ef717ad56c2f55cd94d67d8d3fea26c3b8198bdf283698931ec2d19a33baa0bf1975853ee87386b00fb397b56809bb3169d65ca4fb5ca8935172f666530f4508006577b92c39c4bab0f304e1f855fe8c3ae818865dce0a576276df22530a39c69ad8d2d3f742337f37afed856a43e2c7523d3f874c0417f226e88187f991d582b98eb6d3e8cbab745f09f0ed9bebbdb6d9d9543c39f4f0e1ac848f4cce5f6a9dc75fcd07df13d8ea700250a3004b0e0d1fe30e912953e5991f79b6e8bfe47ff5daed38c752eec17abb875faf5f9b7d2b9330c3004ecdcaa708849f90610620ce46c07c8103efec44fb8bda370e47e18385dc3d850566318527ea16c8eeaeabc9b7474b84aa0474bc03e6fef95056a1d349eaa1d8280a475df5e78d055cad96da77a64b9ba525eb368cf88f416c48df40e4b9b18333e468954f6b8f08b4f24716c066b5c8cf889cec59e0741564849bf12ce42d663189797a51a5239d3fbb7cdb04214f2521573163452ee4e793aa2583a7b5c51a79bf497661473107e09c1ac0dcc5ce40d571778b581dfb8ae773d1358a301c7aac684431dc3a15db644a3bdaa4e14254217b5aabc5b0adb914e528963400dde6471132fe247162ff0bf3c7917eecc67a6055bee8a1c6fdb0edbf849dcc710841330a4479ca882754b4cd5902f388f1324c4b4529e86c96f5ed15f591ae05b9302009eda40cc5d1be7ee257587640f72b87b6750e84af92335c0a9de75e44f3e4a22a4b797a59200d991de731f65a70912034f10cb1c64ec8f211036dc222d3a15c7f9731afeab70fca3a39ecc78f562e2a52585827a368458b2b97525f4614b1bb17b95b0f77d86ee72b4c8b63a6b9999586560e51cf336288657e34f59001785bb9eb502517c817a234693ff82df3ad8e006f5929f8fd9a109cce83973869ca9c7d04c9fd4f844f992c7bd29a01e948b37023f424e01b0d3062d676c2bc67a0222cd2bc21a5d301c44eabc26e06d4d4287b916aae11f7cc43edbb1acebe73137f7847e5d1224df742c2423e2c8345f00dde7ea383bb75c340718333db47c52b263c2cf2ae77b9655457b3bdf17b0d9944f9f45ea65c68d1098cf0763c84d2217f6d5094873b985117dbff77d5960b46d264a40700d9097fa917497b62ba5abf5eebdbfa905057afce13e04a2d3ea3d69049c392bd8921c557acbdbfc804145c955cd780423e6c56f437f44f9aaacabeb530d3bc410e7029c588fe9676047ee2a4dde44cf5ded4900f1f3ff6db412ca79d47f07748b559356082754ef8a9b02792f695bfc5b901b28c57b28eea4c01395239695daa7164e9d3351da7b6c8681ad22deb759a477e5ac8ac3edb9711e288f8548f18eb058d67abead2527833204e9472f1f3b1e019d7695dad98e09dfe4884f703a002cdad356a14f8cc6e48fdf159520f5bdd9896d90d7c4c28141e9be6a780e8f2a35c31cd4a7ceee7bece6154aa77f719cf085c73c4d11e6f6203fe32773d56f15b85eb85109c78cce9ddd83f5016dd6e8f282ebe4d03193c0354eca60ba414c367274644c5c4a58e50e76ec4e07eedcf588e48a0a7ae053300c0309b130a6a5c30d571c860911e52948e8e6de801a94e16611b0a46acbaf5f0e7969f1695e9951244a6c7a2128c0218aee2882634789f6100c5236f9a6e3ddd4fd8db79eb4ebd622dfe8ddd24aa11d5fefebd500b9579d482e04c1420c1814d7061fea1283b3d44ceaa07c047e1336c99893e42e3a4b52fb31d2f9c1529ca7f6be1ae4e03cc1bebaf7a297437e145d149679bc689c001ef871d4761e5e693cd5891b1627d47343cf9a6c73ce4f20fe47bbfbe13793d0997775df51cf63f5ced92a28ad03ce1a52ac6d59f607fecec2dd6177dabbe222714a87d2e4852dba54f2ecee51dcfba612904eb6f2fd036f584c97f13e33896c33b208d9a9c7881960a5d80b3bdd4dc942cc05f512c972441b8d2e2af09639ef297c82788a36009f4e9a0d461d18c08aa281fe1c4218f271caf4aa7f58af2907ae669f375da825dba40bc8573d1eac7352983c51ccf2d593741f1ac6d37516c91fbce83f3c5d27444bca0bcb3ed23c8d68745aca5d513b63786cc5305db8574301b195eb926ff3dbc7598402785325bed6a88e97db112632174309274a4e3c291d4ed61078126c6cb92d283bad52fe76b725470f17c7f8d9d5b367364de4ef2e27cba546f747ac08a21c703b713a291280f24df08dfee49b7900ee036fdc12f9386439e3ffc0e18cc892b1e9b75af5f25f5c1dde742401f49ee4d2027372d2b98fac0def9eb7cf84a1420b02794cb2a3a1f6cedd8178b5f3f646cb22b2ab4eeac9d883424234b068645b60559ed5f54f978834e37251c2cf3d1c1df2578affb97d257dd2fc73bcc2b719cf0b2999fb6f7a22caeb9397f11ada1af8165f2bfb91fc471236dcad4605af8728dbf77a2ad9c676c97e384e32509d24b0da4b59772df38a250f2529008a61f1c6c699bc51b8774c2e101ccb201566b5721665bfed2bcee2fab58171f4f40714d0c0c60f3a025bfd27b3f2c2c379bc99090d3c66aa9bced53a084113e00db0ebd34148c1a8b37b026c214b755ae2c24aa06469ab857c1dc2c537b1d08b9c92372bd2f3acadc1b42006d1277de53e916f1c7e42535b04eac12083fcd29d4eda280fe83a57e626792a0871adede8bddc5d3dec3a0d1d4c1b17c610ace57e84dd207f682670b5a1973722895a31037345c5c34b018108669a2f5b1968a00c17c22a0a6fdf43310259cbec60dfffd3150f4f0afd3eb3062f1172fc74b31bb161b0a22623e3acf53e6df23c35005ee16182dda219622169545648ef53a448ed80ea9a6acdf31be429aff1a67728279adb8f0c611f75c2c3f01f16837bc832a6d4213f0cbf3502234fc3fb34b7b85715691321dba435dcc859cf442c54012a171f43b85447ef78e40300299f97597c77687a861c3109a014aa6510fe0e813f51223c464d28b79f6a6c249c5aa048e802a2ef9b6e66212fd5bb009a407ef383da9e5bb99ab9c140ca023a31d0485bf5bc62f2315e4dcd19760de22e610fb959e68aca5c98bf26532fae4e5908541f8170f785cb33df443979ee15d11b225a3bbdcc15f7bf8a96077367c2b80ddf4d6aa4ab0c942c8de2a20cb0ae57bb8b18af8474670a417439f156a815e0507dfd691fa7a88bc4d8cf3287bf06f1347e79b0b755ccf32340ef577100dc9b2c61b577181a9cf88cb248e2c5615f2dc492eae4fa41e54e079ab961323e12ea021703b95d70ef29456bdb20a42f86e6321154fe6cc4f03bfdc32e60a68ec088b264a2337aa433f482af9156a6e79d3528c4c059f6d95a314cb5fd5b588bf683210ad9b154c7d7be5cb2d8a4bb394f2f51ec224ddc19b7b05c24656b3231a8384e4331b70d873764c6d7106bd", 0xfc0}], 0x5, &(0x7f00000050c0)=[@assoc={0x18, 0x117, 0x4, 0x401}, @op={0x18}, @iv={0x60, 0x117, 0x2, 0x47, "ab6d96968f16d50d1a4f67b81574d71bfec00fd536bfdfcd817f3fb5984e41ee6397a8ebf7d23fd1b904e34c1f7ce1b2027b49511b19eda44a7686c0589e51f2d3b8ea492ce0a0"}, @iv={0x28, 0x117, 0x2, 0xe, "31b3260466fff9292556ff487b50"}, @assoc={0x18, 0x117, 0x4, 0x9}], 0xd0, 0x4800}, {0x0, 0x0, &(0x7f0000005440)=[{&(0x7f00000051c0)="7928a0ee94d708585f6e46d91b50be47f3473d70a3347b6ff3b935491f12db50175d49c4f6d48c6414f9baca640047eeca2870ba39dc3a47df36b068c37241032021e6cc0ebd63668ff12a37881c507f3c9cbb3e9a2475dfdae8d27bf5751ad1bc86e9ba5d66acdd608c5ec3752a80336a0093b97f06e4dabb0115a59704bd6ba944bb682b34f8c37b", 0x89}, {&(0x7f0000005280)="e71254b0e024a9376e8c6975417326113d2648537a457a634018d4c2e526cc399e7ee1c6ba08f7603563194e3279c2cf2b5d344c775988197f40191ddb5aa514dcb610b6880e6df64add68735e6ad1ac3ed560a13baff6e4194a102a29ae174af4c5048b2692b6b5566853c08a00ca72b396682f2a7bc759a38394e82d7fd0a35c23b4e0cf6ec0c11db5bcbfd84acfeaf3010f3d78fa016c523294682409e0e274bc57c1d4cfe47131bb7e6278e5115bdfaa18d1a99835", 0xb7}, {&(0x7f0000005340)="1dd5cd3f1f53adfacfc933f30faaaea1a87e3f3db9c7132b869cf4d3cf718d3f83b96ffe851b26e6ccec89dee769f6b8274cb9ce782354633832a3ff191069243fbf444cc747c6aed08d548b388840f38b8dcb9352fa7fad80b13e688254a40422f88b17804060a4df5d", 0x6a}, {0x0}], 0x4, &(0x7f0000005480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000010}, {0x0, 0x0, &(0x7f0000005880)=[{&(0x7f00000054c0)="2f74290c41c66b707d694f284ed8a87f1bc22cafa25fb2dde7d9ca9029ca2badf9b0929e0460f2623253180d775fd01021be371b68da85b8861cef777beff8ddf8f4f0585a4d401c", 0x48}, {&(0x7f0000005540)="524bc199a860f5d058ad4c75bb9ffa2381a56c21ad54a58a23fa0e88f5381bfa729171a54e540f2444856faa11c6100d2f57f14e", 0x34}, {0x0}, {&(0x7f0000005680)="f94fe58b755a4e755356ee1d32a4d9c378b1cf2b6d627f", 0x17}, {&(0x7f00000056c0)="593e1b9f0693c69f567669b93db28efba9568a05c5257211aac9dd54d7455d047fca54041cb0736f43abfcd846fd0fa7fbe04aa532f691b420", 0x39}, {&(0x7f0000005700)}, {&(0x7f0000005740)="51c00f53b673ef11358089ba70e6e6570e06e28ec67b10ba4a485796cb0dfafca20d92e46fc9851178331c642c34fc1f1f6616be289114a5bf93c77a1211e90890e17ce67a5b59f9a922f1248ed93a3d3ba43351ee931159e7cbabd067256bbf6b16f008b922245b8873ac9cf296f6a9046fefb7a9be049fd00144ee6635bb2e91021b25dfbeb15a9be477b2110f1a21", 0x90}, {&(0x7f0000005800)="087187ea5834efb34ce1500b459e5f7a4d29ef9e5675b20a9d85b1d53a4ffbf71469006a095c8238a483d2ad456478ac544e0cb4493037ec1ae4de6e8d9e314d2f74fa53d4e275e3ecaf16ad9bcb04c5dbb03a177033ab5229d22530f3aa7a3a6a4e289d56df", 0x66}], 0x8, 0xffffffffffffffff, 0x0, 0x40080c1}, {0x0, 0x0, &(0x7f0000006bc0), 0x0, &(0x7f0000006c40), 0x0, 0x40400d0}], 0x6, 0x20000000) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000013000000000000000000000800010001000000"], 0x20}}, 0x4000000) 5.211087849s ago: executing program 5 (id=1966): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x8}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x0, 0x81, 0x28}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0xa996, 0x12d58}}, 0x44) 5.028746394s ago: executing program 1 (id=1967): syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x20000000000001b2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0x39f}, {0x6, 0xa5, 0x0, 0x6}, {0x3, 0x5, 0x4, 0x3}, {0x2, 0xd0, 0x3, 0x772}, {0x7, 0x8, 0x9, 0x5}, {0xc602, 0x30, 0xf7, 0x1}, {0x35ea, 0xa, 0xc, 0xa90b}, {0x1, 0x6, 0x8, 0x9}]}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f00000007c0)={@multicast, @local, @void, {@mpls_mc={0x8848, {[], @llc={@llc={0x6, 0x4b, "fb"}}}}}}, 0x0) 4.960160428s ago: executing program 4 (id=1968): r0 = socket(0x8, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, r0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x20000}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) (async) keyctl$revoke(0x3, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x4003, 0x40}) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) (async) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) 4.866203079s ago: executing program 5 (id=1969): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2000000, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}], [{@audit}, {@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, 'connmark\x00'}}]}}, 0x1, 0x0, &(0x7f00000003c0)="f889a995c078ce8bdd08284324f6f91f51d94e4086a703b76dbbdc84d076e9f21c582af8a1caf1cccd8301512f4df4900f408eee2a61a0b210d0647cbbeb95037272c3f0f7d273fe9b2e") r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x1, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.611099706s ago: executing program 0 (id=1970): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, 0xffffffffffffffff, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e24, 0x7f, @local, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 3.484154041s ago: executing program 3 (id=1971): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) migrate_pages(0x0, 0x6, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x1, @multicast2}, 0xfffffffffffffe5f, 0x0, 0x4d, 0x0, 0x0, 0x40001}, 0x8000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r5, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) munlockall() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 3.399875535s ago: executing program 0 (id=1972): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0xe, 0x1, {{0xfffffff7, 0x9, 0x6, 0x6, 0xb87}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000080d}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001780), 0x101080, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000002000)) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 3.146241886s ago: executing program 1 (id=1973): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0205648, &(0x7f0000000080)={0xf010000, 0x0, 0x4, 0x110821, 0x0, {0x77359400}, {0x5, 0x8, 0x0, 0x0, 0x0, 0xd, "3acfa8ee"}}) ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.849101374s ago: executing program 5 (id=1974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7ffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 2.631997148s ago: executing program 0 (id=1975): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) eventfd2(0x0, 0x80000) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) openat$kvm(0xffffffffffffff9c, 0x0, 0x600040, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@wr_crn={0x46, 0x20, {0x3, 0x8}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x46, {"0f01c1c4827d79247bc401f9d5d6d0f366baf80cb8700bf48da5e4e4bafc0cb80e000000ef0f0866b819010f00d0c4e1815944b209"}}], 0x7e}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{0xc, 0x85, 0x7, 0x7ff40001}, {0xdcfe, 0xef, 0x6, 0x101}]}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000000)={@private1, @dev={0xac, 0x14, 0x14, 0x2e}, 0x13, 0x16}}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x9d092000) symlink(0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) madvise(&(0x7f00005c4000/0x4000)=nil, 0x4000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 2.514088681s ago: executing program 5 (id=1976): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1, 0x200000000000000, 0x0, 0xfffffffffffffffe}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd"], 0xfdef) (async) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) (async) socket$inet(0x2, 0x6, 0x4) r5 = socket(0x2, 0x3, 0x7f) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) (async) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x564) (async) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) lseek(0xffffffffffffffff, 0x2000, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x0, @isdn={0x22, 0x8, 0x15, 0x7, 0x4}, @tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x7}}, @generic={0x9, "8479a99e781a89bb2a3cdc9a81de"}, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x9, 0x7f}) sync() (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x5}}, 0x20) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="20008000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25630000000c0099000a0000004c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2c0008c0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$midi(0x0, 0x500, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, r2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.122831972s ago: executing program 0 (id=1977): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000380)={0xfffffffffffffffd, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9b5"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) recvmmsg$unix(r8, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x228, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1f4, 0x4, 0x0, 0x1, [{0x1f0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1e0, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xf0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcb, 0x1, "8c6cd657dc9dd1a95fd508e1290be4901fed0d8e5118c26a01712d05f566ad3a7837aa49437e700abf5969d0b2b0918e686d11df601cc9ff41bc565fb4d121275243b73801a0e41878da8191b3abd2a127cfc39a41c40f00b18bac91db335351e33388ed0ce4ffb45496417a841697aa32e335e02b2c90256954c737e470cba4e3d28a21fdfdafef1cc46245448f6229027f8bd9cd19820db25b529cda5e5f2eee45c2edda354f9c866c5f5a80801d96f37f25d384f3dc0a008e68eeb9a0c52b1995f9354b2228"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_RANGE_TO_DATA={0xec, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x14, 0x1, "dde5413ca67171123678658127f8274a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "76d19bca9fbca992c0e8dd8e95345246a2c383ac3a89c500401ffe00d3ba3e86b0bf4927ed5a7d65039901ff5fba058baee1886ee96f757f9fc2043b92c2da5bedb4f84901f3604d9d9890bdc46e6d25ddc40e43888d545f0a3bbfeb1c2a40760d0dafbd48c79a6abe86"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000210001800400028008000300fdffffff0e0001"], 0x68}}, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {0x4, 0x7fffffffffffffff}, {0x0, 0x1}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x60, "217d66d38547aa140db8a200000000c538c7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x6178, 0x40, 0x8001002, 0x3d7}) 2.008010777s ago: executing program 4 (id=1978): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f0000000000)=0x2dad2af945988a02) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000300)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000006c0)={0xa, {{0xa, 0x4e24, 0x11b530da, @local, 0x5}}, {{0xa, 0x4e21, 0x950e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}}}, 0x108) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x12) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1001}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 925.687694ms ago: executing program 4 (id=1979): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x8c, @multicast1, 0x4e23, 0x0, 'lblcr\x00', 0x4, 0xe5, 0x50}, 0x2c) 510.561856ms ago: executing program 4 (id=1980): pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='\b', 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcc, &(0x7f0000000200)=""/204, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x4ee5aef8a31b4abe, 0x0) 288.102744ms ago: executing program 1 (id=1981): r0 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb0, 0x54, 0xba, 0x10, 0x413c, 0x8196, 0x7bb1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x78, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, [], [{{0x9, 0x5, 0x8, 0x2, 0x10, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 200.231265ms ago: executing program 5 (id=1982): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, 0xffffffffffffffff, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e24, 0x7f, @local, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 103.515699ms ago: executing program 3 (id=1983): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x9, 0x1, 0x0, 0x2}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000200)={[0xe3d1]}, 0x0, &(0x7f0000000240), 0x8) io_setup(0x4, &(0x7f0000000280)=0x0) io_getevents(r4, 0x2, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f0000000380)={0x0, 0x3938700}) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = socket(0x1d, 0x2, 0x6) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) flock(r7, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x8, 0xc, 0x4, 0x0, 0x0, {r1, r2/1000+10000}, {0x2, 0x0, 0x8, 0x2, 0xf, 0x9, "9f97726d"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x2, 0x7ff, {0x8}, 0xb}, {0x2, 0x3, {0x50}, 0x8}]}, 0x1, 0x0, r3}) 56.297184ms ago: executing program 5 (id=1984): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000000)=0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001003010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080013"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872e"], 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$TIOCGPTLCK(r5, 0x9201, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)="0d1482cceee3ebf5ada1e1e3e9e1d78440291a429548b587d8304c0f984624ae1c466b9f49d3243b0afc310d6de6d8c18d91355b0515fb53b39b04ffd0c987a3e29e67bf57b12209450237458351b42823c0264c017c35fa9bacfb531353ae14bcd8bc", 0x63, 0x8000000000000000, 0x0, 0x3, r5}]) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x9, 0x1, &(0x7f0000000100)={0xe, "2d058b7c838c18605aa16b466bf68b701826d47e2305a3d66cbb90ec59555c1995"}}) 0s ago: executing program 0 (id=1985): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x4, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8004) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x410402, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r5, 0x9}}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) close_range(r6, r7, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e24, 0x7f, @local, 0x3}, r5, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, 0x0, 0x0) r8 = dup3(r2, r3, 0x0) mmap(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x10, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000400)={0x1f5fdea3, 0x6, 0x5, 0x7da8, 0x4, 0x0, [{0x0, 0x2, 0x9, '\x00', 0x1105}, {0x5b, 0xb, 0x7, '\x00', 0x1000}, {0xff, 0xffffffffffffffff, 0x5, '\x00', 0x200}, {0x9, 0xf2, 0x7000000000, '\x00', 0x2000}]}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21008}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40800}, 0x2000044) dup2(0xffffffffffffffff, r4) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x40010, r8, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r9, 0x40045108, 0x0) kernel console output (not intermixed with test programs): udit(1761681275.109:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 507.044593][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 507.081086][ T30] audit: type=1326 audit(1761681275.139:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 507.103886][ T5907] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 507.112252][ T30] audit: type=1326 audit(1761681275.139:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 507.139933][ T30] audit: type=1326 audit(1761681275.139:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 507.163174][ T30] audit: type=1326 audit(1761681275.149:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 507.234356][ T30] audit: type=1326 audit(1761681275.349:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 507.269625][ T30] audit: type=1326 audit(1761681275.349:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 507.312612][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 507.351126][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.439265][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.480494][ T5907] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.489993][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.512052][ T5907] usb 6-1: Product: syz [ 507.524258][ T5907] usb 6-1: Manufacturer: syz [ 507.540040][ T5907] usb 6-1: SerialNumber: syz [ 507.791959][T12072] delete_channel: no stack [ 507.908083][ T5907] usb 6-1: 0:2 : does not exist [ 507.946738][ T5907] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 508.096833][ T5907] usb 6-1: USB disconnect, device number 7 [ 508.160262][ T30] audit: type=1326 audit(1761681276.249:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 508.280913][ T30] audit: type=1326 audit(1761681276.259:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 508.311596][ T30] audit: type=1326 audit(1761681276.259:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.4.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 508.541981][T12094] macvlan1: entered promiscuous mode [ 508.547770][T12094] macvlan1: entered allmulticast mode [ 508.553426][T12094] gretap0: entered allmulticast mode [ 508.560871][T11559] udevd[11559]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.772820][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 508.927093][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 508.940613][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.972095][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 509.006404][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 509.029857][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.039136][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.050050][ T9] usb 5-1: SerialNumber: syz [ 509.065402][T12095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 509.075217][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 509.467271][ T5930] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 509.632666][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 509.680991][ T5930] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 509.720019][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.739069][ T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 509.750698][ T5930] usb 6-1: Product: syz [ 509.769383][ T5930] usb 6-1: Manufacturer: syz [ 509.793123][ T5930] usb 6-1: SerialNumber: syz [ 509.828010][ T5930] r8152-cfgselector 6-1: Unknown version 0x0000 [ 509.840599][ T5930] r8152-cfgselector 6-1: config 0 descriptor?? [ 509.953071][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 509.962492][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.984185][ T24] usb 2-1: Product: syz [ 509.991751][ T24] usb 2-1: Manufacturer: syz [ 510.001064][ T24] usb 2-1: SerialNumber: syz [ 510.439789][ T5907] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 511.512676][ T5930] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 511.569961][ T9] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 511.594827][ T9] usb 5-1: USB disconnect, device number 107 [ 511.673377][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 511.680769][ T5930] usb 6-1: config 4 has an invalid interface number: 57 but max is 0 [ 511.689582][ T5930] usb 6-1: config 4 has an invalid descriptor of length 239, skipping remainder of the config [ 511.826350][ T5930] usb 6-1: config 4 has no interface number 0 [ 511.860208][ T5930] usb 6-1: config 4 interface 57 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 511.989358][ T5930] usb 6-1: config 4 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 512.018359][ T5930] usb 6-1: config 4 interface 57 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 512.058151][ T5930] usb 6-1: config 4 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 512.094153][ T5930] usb 6-1: New USB device found, idVendor=19d2, idProduct=0055, bcdDevice=88.54 [ 512.111144][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.144431][ T5930] usb 6-1: Product: syz [ 512.155341][ T5930] usb 6-1: Manufacturer: syz [ 512.174047][ T5930] usb 6-1: SerialNumber: syz [ 512.187507][T12125] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 512.372634][ T5907] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 512.408644][ T5930] option 6-1:4.57: GSM modem (1-port) converter detected [ 512.448989][ T5930] usb 6-1: USB disconnect, device number 9 [ 512.480744][ T5930] option 6-1:4.57: device disconnected [ 512.505609][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 512.523651][ T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 512.535521][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.547876][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 512.559137][ T5907] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 512.568201][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 512.583062][ T5907] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 512.598998][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.623734][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 512.628496][T12139] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 512.643459][ T5907] usb 4-1: config 0 descriptor?? [ 512.660722][ T24] usb 2-1: USB disconnect, device number 107 [ 512.698046][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 512.711040][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.741541][ T9] usb 5-1: Product: syz [ 512.745832][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 512.745847][ T30] audit: type=1326 audit(1761681280.859:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 512.775242][ T9] usb 5-1: Manufacturer: syz [ 512.778642][ T30] audit: type=1326 audit(1761681280.859:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 512.779849][ T9] usb 5-1: SerialNumber: syz [ 512.805761][ T30] audit: type=1326 audit(1761681280.859:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 512.812049][ T9] usb 5-1: config 0 descriptor?? [ 512.831461][ T30] audit: type=1326 audit(1761681280.859:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 512.857577][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.864417][ T30] audit: type=1326 audit(1761681280.859:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 512.914955][ T30] audit: type=1326 audit(1761681281.029:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 513.003939][ T30] audit: type=1326 audit(1761681281.029:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 513.026419][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.075985][ T30] audit: type=1326 audit(1761681281.049:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 513.127536][ T30] audit: type=1326 audit(1761681281.049:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 513.180829][ T30] audit: type=1326 audit(1761681281.049:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12140 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b6f8efc9 code=0x7ffc0000 [ 513.288836][ T5907] Bluetooth: Can't get state to change to load configuration err [ 513.296911][ T5907] Bluetooth: Loading sysconfig file failed [ 513.308022][ T5907] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 513.337628][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 513.350915][ T9] usb 5-1: Please update to version 0.2 or newer [ 513.444904][ T5907] usb 4-1: USB disconnect, device number 89 [ 513.476430][ T9] usb 5-1: USB disconnect, device number 108 [ 514.121988][T12171] tipc: Can't bind to reserved service type 1 [ 514.128654][T12168] sctp: [Deprecated]: syz.0.1605 (pid 12168) Use of int in maxseg socket option. [ 514.128654][T12168] Use struct sctp_assoc_value instead [ 514.216964][T12175] fuse: Bad value for 'fd' [ 515.082676][ T984] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 515.453028][ T984] usb 5-1: device descriptor read/64, error -71 [ 515.709732][ T984] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 515.907341][ T984] usb 5-1: device descriptor read/64, error -71 [ 516.043213][ T984] usb usb5-port1: attempt power cycle [ 516.281461][ T5907] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 516.392676][ T984] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 516.461353][ T24] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 516.762080][ T984] usb 5-1: device descriptor read/8, error -71 [ 516.825961][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 516.846257][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 516.866004][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.898845][ T24] usb 4-1: Product: syz [ 516.925764][ T24] usb 4-1: Manufacturer: syz [ 516.960095][ T5907] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 517.000495][ T24] usb 4-1: SerialNumber: syz [ 517.022692][ T984] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 517.031197][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.062469][ T984] usb 5-1: device descriptor read/8, error -71 [ 517.064429][ T24] usb 4-1: config 0 descriptor?? [ 517.086163][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 517.143846][ T5907] usb 2-1: Product: syz [ 517.148054][ T5907] usb 2-1: Manufacturer: syz [ 517.186676][ T984] usb usb5-port1: unable to enumerate USB device [ 517.240591][ T5907] usb 2-1: SerialNumber: syz [ 517.245119][ T9] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.257165][ T9] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.273342][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 517.284711][ T9] usb 6-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 517.313034][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.352721][ T9] usb 6-1: config 0 descriptor?? [ 517.458005][ T24] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 518.162749][ T5930] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 518.313988][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 518.335281][ T5930] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 518.344353][ T5930] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 518.546043][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.558268][ T5930] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 518.568399][ T5930] usb 5-1: config 0 has no interface number 0 [ 518.576152][ T5930] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.635511][ T5930] usb 5-1: config 0 interface 150 has no altsetting 0 [ 518.651791][ T5930] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 518.676876][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.692203][ T5930] usb 5-1: config 0 descriptor?? [ 519.085043][ T5907] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 519.118850][ T5907] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 519.130324][ T5907] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 519.151205][ T5907] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 519.197631][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 519.208873][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 519.237781][ T9] usb 6-1: USB disconnect, device number 10 [ 519.257738][ T5907] usb 2-1: USB disconnect, device number 108 [ 519.276765][ T24] usb write operation failed. (-71) [ 519.291847][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 519.327344][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 519.344140][ T24] usb 4-1: media controller created [ 519.355311][ T24] usb read operation failed. (-71) [ 519.361408][ T24] usb write operation failed. (-71) [ 519.371497][ T24] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 519.391290][ T24] usb 4-1: USB disconnect, device number 90 [ 519.723568][ T5908] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 519.788707][T12219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1619'. [ 519.902946][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 519.919806][ T5908] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 519.936435][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.978958][ T5908] usb 6-1: Product: syz [ 520.022082][ T5908] usb 6-1: Manufacturer: syz [ 520.030583][ T5908] usb 6-1: SerialNumber: syz [ 520.040855][ T5908] usb 6-1: config 0 descriptor?? [ 520.057784][ T5908] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 520.103025][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 520.116520][ T5908] usb 6-1: Detected FT232H [ 520.183419][ T5930] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 520.260629][ T5908] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 520.289025][ T5908] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 520.305249][ T5908] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 520.326485][ T5908] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 520.355069][ T5930] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.367196][ T5908] usb 6-1: USB disconnect, device number 11 [ 520.372636][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.403656][ T5930] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.419915][ T5908] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 520.423467][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.458262][ T5908] ftdi_sio 6-1:0.0: device disconnected [ 520.460514][ T5930] usb 4-1: SerialNumber: syz [ 520.887932][T12232] fuse: Bad value for 'fd' [ 520.984959][T12234] netlink: 'syz.1.1622': attribute type 11 has an invalid length. [ 521.017526][ T5908] usb 5-1: USB disconnect, device number 113 [ 521.482620][ T5908] usb 5-1: new low-speed USB device number 114 using dummy_hcd [ 521.689849][ T5908] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 521.701468][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.713039][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 521.713947][ T5908] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 521.730389][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.741973][ T5908] usb 5-1: config 0 descriptor?? [ 521.953992][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 521.970980][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.975430][ T5908] usb 5-1: USB disconnect, device number 114 [ 522.005712][ T9] usb 2-1: Product: syz [ 522.011982][ T9] usb 2-1: Manufacturer: syz [ 522.018870][ T9] usb 2-1: SerialNumber: syz [ 522.841372][ T5930] usb 4-1: 0:2 : does not exist [ 522.897744][ T5930] usb 4-1: USB disconnect, device number 91 [ 522.952715][ T984] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 522.985433][ T6376] udevd[6376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.032682][ T44] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 523.145921][ T984] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 523.163479][ T984] usb 6-1: config 1 interface 0 has no altsetting 0 [ 523.184741][ T984] usb 6-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 523.204646][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 523.220467][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.229270][ T44] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 523.279816][ T44] usb 5-1: config 1 has no interface number 1 [ 523.286391][ T44] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 523.286720][ T984] usb 6-1: Product: syz [ 523.302470][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.355664][ T984] usb 6-1: Manufacturer: syz [ 523.360552][ T984] usb 6-1: SerialNumber: syz [ 523.360568][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.376577][T12267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 523.389010][ T44] usb 5-1: Product: syz [ 523.401728][ T44] usb 5-1: Manufacturer: syz [ 523.409943][ T44] usb 5-1: SerialNumber: syz [ 523.677355][ T44] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 523.698284][ T44] usb 5-1: USB disconnect, device number 115 [ 523.742394][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.321044][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 524.321072][ T30] audit: type=1326 audit(1761681292.429:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.350663][ T30] audit: type=1326 audit(1761681292.429:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.377439][ T30] audit: type=1326 audit(1761681292.469:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.401367][ T30] audit: type=1326 audit(1761681292.469:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.426439][ T30] audit: type=1326 audit(1761681292.469:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.448897][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.455553][ T30] audit: type=1326 audit(1761681292.469:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.563752][ T30] audit: type=1326 audit(1761681292.679:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.625680][ T30] audit: type=1326 audit(1761681292.679:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.648306][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.742095][ T30] audit: type=1326 audit(1761681292.709:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.764609][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.789260][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 524.803252][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 524.818925][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 524.844104][ T30] audit: type=1326 audit(1761681292.709:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 524.866591][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.901051][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 524.979940][ T9] usb 2-1: USB disconnect, device number 110 [ 525.642637][ T9] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 525.749968][ T984] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input52 [ 525.763022][ T5186] bcm5974 6-1:1.0: could not read from device [ 525.773741][ T5186] bcm5974 6-1:1.0: could not read from device [ 525.792836][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 525.801287][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 525.814804][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.828287][ T984] usb 6-1: USB disconnect, device number 12 [ 525.860654][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 525.890879][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 525.911699][ T5186] bcm5974 6-1:1.0: could not read from device [ 525.948703][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.974013][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 526.089449][ T6376] udevd[6376]: Error opening device "/dev/input/event4": No such file or directory [ 526.120165][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.154830][ T6376] udevd[6376]: Unable to EVIOCGABS device "/dev/input/event4" [ 526.339891][ T6376] udevd[6376]: Unable to EVIOCGABS device "/dev/input/event4" [ 526.414496][ T9] usb 2-1: usb_control_msg returned -32 [ 526.431329][ T9] usbtmc 2-1:16.0: can't read capabilities [ 526.442648][ T24] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 526.493423][ T6376] udevd[6376]: Unable to EVIOCGABS device "/dev/input/event4" [ 526.589003][ T24] usb 4-1: device descriptor read/64, error -71 [ 526.669225][ T6376] udevd[6376]: Unable to EVIOCGABS device "/dev/input/event4" [ 526.852951][T12295] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 526.901917][ T24] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 527.066936][ T24] usb 4-1: device descriptor read/64, error -71 [ 527.182903][ T24] usb usb4-port1: attempt power cycle [ 527.335342][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1643'. [ 527.442227][T12311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1643'. [ 527.598844][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 527.636651][T12314] netlink: 'syz.5.1644': attribute type 11 has an invalid length. [ 527.655082][ T24] usb 4-1: device descriptor read/8, error -71 [ 527.738472][T12318] netlink: 'syz.5.1644': attribute type 11 has an invalid length. [ 527.922676][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 527.953431][ T24] usb 4-1: device descriptor read/8, error -71 [ 528.019622][ T5908] usb 2-1: USB disconnect, device number 111 [ 528.054750][T12323] netlink: 'syz.1.1646': attribute type 2 has an invalid length. [ 528.063283][ T24] usb usb4-port1: unable to enumerate USB device [ 529.424675][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 529.424688][ T30] audit: type=1326 audit(1761681297.539:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 529.468357][ T30] audit: type=1326 audit(1761681297.569:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 529.532923][ T30] audit: type=1326 audit(1761681297.569:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 529.560911][ T30] audit: type=1326 audit(1761681297.569:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 529.583339][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.633180][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 529.633575][ T30] audit: type=1326 audit(1761681297.749:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 529.663344][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.722668][ T30] audit: type=1326 audit(1761681297.749:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 529.745132][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.876683][ T30] audit: type=1326 audit(1761681297.789:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 529.899162][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.996175][ T30] audit: type=1326 audit(1761681297.789:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 530.055087][ T30] audit: type=1326 audit(1761681297.789:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 530.116268][ T30] audit: type=1326 audit(1761681297.789:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 530.175181][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 530.202664][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.210713][ T9] usb 6-1: Product: syz [ 530.266444][ T5908] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 530.332658][ T9] usb 6-1: Manufacturer: syz [ 530.337660][ T9] usb 6-1: SerialNumber: syz [ 530.452633][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 530.459737][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.471116][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.562394][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 530.608288][ T5908] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 530.619183][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.641299][ T5908] usb 5-1: config 0 descriptor?? [ 531.064298][ T5908] logitech 0003:046D:C293.001E: unknown main item tag 0x0 [ 531.080876][ T5908] logitech 0003:046D:C293.001E: unknown main item tag 0x0 [ 531.108787][ T5908] logitech 0003:046D:C293.001E: unknown main item tag 0x0 [ 531.132324][ T5908] logitech 0003:046D:C293.001E: unknown main item tag 0x0 [ 531.183841][ T5908] logitech 0003:046D:C293.001E: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.4-1/input0 [ 531.264633][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1652'. [ 531.287912][ T5908] logitech 0003:046D:C293.001E: no inputs found [ 532.178314][T12371] syzkaller0: entered promiscuous mode [ 532.184651][T12371] syzkaller0: entered allmulticast mode [ 532.209652][ T5908] usb 5-1: USB disconnect, device number 116 [ 532.294930][T12372] netlink: 'syz.1.1658': attribute type 9 has an invalid length. [ 532.325196][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 532.347447][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 532.428587][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 532.472704][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 532.493633][T12381] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1659'. [ 532.512175][ T9] usb 6-1: USB disconnect, device number 13 [ 532.801938][T12386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.882154][T12389] random: crng reseeded on system resumption [ 533.837334][T12404] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 534.455037][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 534.455055][ T30] audit: type=1326 audit(1761681302.559:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 534.529975][ T30] audit: type=1326 audit(1761681302.559:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 534.555240][ T30] audit: type=1326 audit(1761681302.559:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 534.583228][ T30] audit: type=1326 audit(1761681302.559:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 534.605935][ T30] audit: type=1326 audit(1761681302.559:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 534.644989][ T30] audit: type=1326 audit(1761681302.569:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 534.773403][ T30] audit: type=1326 audit(1761681302.699:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 534.852676][ T30] audit: type=1326 audit(1761681302.699:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 534.942644][ T30] audit: type=1326 audit(1761681302.699:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 535.087841][ T30] audit: type=1326 audit(1761681302.699:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 536.312644][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 536.479956][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 536.489715][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.499211][ T9] usb 6-1: Product: syz [ 536.505389][ T9] usb 6-1: Manufacturer: syz [ 536.563116][ T9] usb 6-1: SerialNumber: syz [ 537.322845][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 537.462886][ T24] usb 4-1: device descriptor read/64, error -71 [ 537.702705][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 537.832652][ T24] usb 4-1: device descriptor read/64, error -71 [ 537.945168][ T24] usb usb4-port1: attempt power cycle [ 538.292809][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 538.314906][ T24] usb 4-1: device descriptor read/8, error -71 [ 538.552822][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 538.583373][ T24] usb 4-1: device descriptor read/8, error -71 [ 538.693974][ T24] usb usb4-port1: unable to enumerate USB device [ 539.675015][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 539.687345][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 539.700639][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 539.722323][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 539.755591][ T9] usb 6-1: USB disconnect, device number 14 [ 539.832688][ T44] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 539.992961][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 540.025428][ T44] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 540.043230][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.064082][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.080633][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.108869][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.127923][T12499] loop2: detected capacity change from 0 to 7 [ 540.141360][T12499] Dev loop2: unable to read RDB block 7 [ 540.147765][T12501] tap0: tun_chr_ioctl cmd 1074025677 [ 540.147995][T12499] loop2: unable to read partition table [ 540.154082][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 540.172722][T12501] tap0: linktype set to 804 [ 540.183789][T12499] loop2: partition table beyond EOD, truncated [ 540.188445][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.190307][T12499] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 540.508495][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 540.514905][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 540.527266][ T44] usbtmc 5-1:16.0: can't read capabilities [ 540.727797][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 540.755596][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 540.763874][ T9] usb 4-1: config 0 has no interface number 0 [ 540.778039][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 540.832154][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 540.841556][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.849958][ T9] usb 4-1: Product: syz [ 540.858802][ T9] usb 4-1: Manufacturer: syz [ 540.893499][ T9] usb 4-1: SerialNumber: syz [ 540.958920][ T9] usb 4-1: config 0 descriptor?? [ 541.003842][ T44] usb 5-1: USB disconnect, device number 117 [ 541.006553][T12515] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 541.181769][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'. [ 541.199192][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 541.254790][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 541.272037][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 541.301256][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 541.323775][ T9] usb 4-1: USB disconnect, device number 100 [ 541.513041][ T44] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 541.535560][T12520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.547802][T12520] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 541.674518][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.684926][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 541.693793][ T44] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 541.704127][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.712130][ T44] usb 5-1: Product: syz [ 541.718148][ T44] usb 5-1: Manufacturer: syz [ 541.722979][ T44] usb 5-1: SerialNumber: syz [ 541.730511][ T44] usb 5-1: config 0 descriptor?? [ 541.739505][ T44] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 541.750882][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 541.760990][ T44] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 541.769720][ T44] usb 5-1: media controller created [ 541.797364][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.854028][ T5930] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 541.868820][ T44] DVB: Unable to find symbol tda10046_attach() [ 541.875260][ T44] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 541.884662][ T44] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 542.014191][ T5930] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.024533][ T5930] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 542.034327][ T5930] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 542.053456][ T5930] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.063193][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.071239][ T5930] usb 6-1: Product: syz [ 542.075578][ T5930] usb 6-1: Manufacturer: syz [ 542.080452][ T5930] usb 6-1: SerialNumber: syz [ 542.291663][ T5930] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 542.315566][ T5930] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 542.330672][ T5930] usb 6-1: USB disconnect, device number 15 [ 542.345409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.371915][ T6376] udevd[6376]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.164938][T12533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.174181][T12533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.402647][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 543.623151][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 543.630516][ T9] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 543.658466][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 543.671822][T12537] loop2: detected capacity change from 0 to 7 [ 543.685362][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 543.688694][T12537] Dev loop2: unable to read RDB block 7 [ 543.710284][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.717861][T12537] loop2: unable to read partition table [ 543.732596][ T9] usb 6-1: Product: ÑŽ [ 543.734691][T12537] loop2: partition table beyond EOD, [ 543.736723][ T9] usb 6-1: Manufacturer: ä€ [ 543.736746][ T9] usb 6-1: SerialNumber: 䱕ޛⴅä䔡쿋즩綠ê·ã©çŒ®ëˆ—ì½°è¡ë©‚婺樆ჸ续暬è“ྜæ—ꑸ㵋挥቗ [ 543.760964][T12537] truncated [ 543.765636][T12537] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 544.016496][ T44] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 544.052053][ T44] usb 5-1: USB disconnect, device number 118 [ 544.141850][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 544.160550][T12545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1706'. [ 544.171606][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 544.256651][ T9] usb 6-1: USB disconnect, device number 16 [ 544.292009][ T5908] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 544.483084][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 544.494652][ T5908] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 544.531150][ T5908] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 544.565456][ T5908] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 544.565485][ T5908] usb 4-1: config 250 has no interface number 0 [ 544.565528][ T5908] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 544.665427][ T5908] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 544.665463][ T5908] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 544.665487][ T5908] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 544.665512][ T5908] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 544.665540][ T5908] usb 4-1: config 250 interface 228 has no altsetting 0 [ 544.681967][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 544.681999][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 544.682022][ T5908] usb 4-1: Product: syz [ 544.682054][ T5908] usb 4-1: SerialNumber: syz [ 544.698839][ T5908] hub 4-1:250.228: bad descriptor, ignoring hub [ 544.698868][ T5908] hub 4-1:250.228: probe with driver hub failed with error -5 [ 544.710339][T12567] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 544.828584][ T44] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 544.907644][ T5908] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 101 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 544.994449][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 545.019355][ T44] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 545.028226][ T44] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 545.039308][ T44] usb 6-1: config 8 has an invalid descriptor of length 102, skipping remainder of the config [ 545.060289][ T44] usb 6-1: config 8 has no interface number 0 [ 545.072034][ T44] usb 6-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 545.097735][ T44] usb 6-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 545.110154][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1705'. [ 545.144861][ T44] usb 6-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.221404][ T44] usb 6-1: config 8 interface 223 has no altsetting 0 [ 545.266499][ T44] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 545.280894][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.321390][ T44] usb 6-1: Product: syz [ 545.338966][ T44] usb 6-1: Manufacturer: syz [ 545.356091][ T44] usb 6-1: SerialNumber: syz [ 545.377630][T12559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 545.449659][T12580] netlink: 'syz.4.1713': attribute type 4 has an invalid length. [ 545.458140][ T813] usb 4-1: USB disconnect, device number 101 [ 545.490121][T12580] netlink: 'syz.4.1713': attribute type 4 has an invalid length. [ 545.523663][ T813] usblp0: removed [ 545.674909][ T44] usb 6-1: USB disconnect, device number 17 [ 546.062187][T12585] loop2: detected capacity change from 0 to 7 [ 546.078437][T12585] Dev loop2: unable to read RDB block 7 [ 546.084399][T12585] loop2: unable to read partition table [ 546.167731][T12585] loop2: partition table beyond EOD, truncated [ 546.174270][T12585] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 546.612749][ T44] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 546.772604][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 546.789821][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 546.806155][ T44] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 546.818983][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.823928][T12604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.827306][ T44] usb 4-1: Product: syz [ 546.839923][ T44] usb 4-1: Manufacturer: syz [ 546.844686][ T44] usb 4-1: SerialNumber: syz [ 546.851316][T12604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.853774][ T44] usb 4-1: config 0 descriptor?? [ 546.868550][ T44] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 546.878001][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 546.885997][ T44] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 547.022671][ T24] usb 6-1: device descriptor read/64, error -71 [ 547.042903][ T9] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 547.127755][T12609] Cannot find add_set index 2 as target [ 547.133477][ T44] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 547.202312][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 547.217631][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.229581][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.239558][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 547.252215][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.260384][ T44] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 547.283030][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 547.286149][ T9] usb 5-1: config 0 descriptor?? [ 547.290911][ T44] em28xx 4-1:0.0: board has no eeprom [ 547.362455][T12613] fuse: Bad value for 'user_id' [ 547.367836][T12613] fuse: Bad value for 'user_id' [ 547.384830][ T44] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 547.392931][ T44] em28xx 4-1:0.0: dvb set to bulk mode. [ 547.398635][ T5908] em28xx 4-1:0.0: Binding DVB extension [ 547.413184][ T44] usb 4-1: USB disconnect, device number 102 [ 547.432019][ T44] em28xx 4-1:0.0: Disconnecting em28xx [ 547.442872][ T24] usb 6-1: device descriptor read/64, error -71 [ 547.480604][ T5908] em28xx 4-1:0.0: Registering input extension [ 547.487057][ T44] em28xx 4-1:0.0: Closing input extension [ 547.517332][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 547.521216][ T44] em28xx 4-1:0.0: Freeing device [ 547.538012][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 547.554781][ T9] usb 5-1: USB disconnect, device number 119 [ 547.555277][ T24] usb usb6-port1: attempt power cycle [ 547.966244][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 548.077086][ T24] usb 6-1: device descriptor read/8, error -71 [ 548.222687][ T44] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 548.303009][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 548.336591][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 548.363747][ T24] usb 6-1: device descriptor read/8, error -71 [ 548.424414][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 548.433955][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 548.443271][ T44] usb 2-1: config 4 has an invalid interface number: 6 but max is 0 [ 548.451279][ T44] usb 2-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 548.462196][ T44] usb 2-1: config 4 has no interface number 0 [ 548.468519][ T44] usb 2-1: config 4 interface 6 has no altsetting 0 [ 548.475400][ T24] usb usb6-port1: unable to enumerate USB device [ 548.511787][ T44] usb 2-1: New USB device found, idVendor=055f, idProduct=c540, bcdDevice=4e.87 [ 548.514453][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 548.521569][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.538226][ T44] usb 2-1: Product: syz [ 548.552668][ T44] usb 2-1: Manufacturer: syz [ 548.557410][ T44] usb 2-1: SerialNumber: syz [ 548.696036][ T9] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 548.705308][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.713473][ T9] usb 4-1: Product: syz [ 548.721916][ T9] usb 4-1: Manufacturer: syz [ 548.734383][ T9] usb 4-1: SerialNumber: syz [ 548.755579][ T9] usb 4-1: config 0 descriptor?? [ 548.776291][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 548.781129][ T44] gspca_main: sunplus-2.14.0 probing 055f:c540 [ 548.789566][ T44] gspca_sunplus: reg_r err -71 [ 548.796394][ T44] sunplus 2-1:4.6: probe with driver sunplus failed with error -71 [ 548.843698][ T44] usb 2-1: USB disconnect, device number 112 [ 549.493147][ T9] gspca_ov534_9: reg_w failed -110 [ 549.558886][T12630] loop2: detected capacity change from 0 to 7 [ 549.640313][T12630] Dev loop2: unable to read RDB block 7 [ 549.667211][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 549.667230][ T30] audit: type=1326 audit(1761681317.779:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 549.670774][T12630] loop2: unable to read partition table [ 549.682700][ T30] audit: type=1326 audit(1761681317.779:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 549.750826][T12630] loop2: partition table beyond EOD, truncated [ 549.760946][T12630] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 549.804581][ T30] audit: type=1326 audit(1761681317.779:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 549.833092][ T30] audit: type=1326 audit(1761681317.779:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 549.983275][ T9] gspca_ov534_9: Unknown sensor 0000 [ 549.983377][ T9] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 550.099546][ T30] audit: type=1326 audit(1761681317.779:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 550.182178][ T44] IPVS: starting estimator thread 0... [ 550.197454][ T30] audit: type=1326 audit(1761681317.989:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 550.221606][ T30] audit: type=1326 audit(1761681317.989:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 550.272701][T12645] IPVS: using max 28 ests per chain, 67200 per kthread [ 550.323753][ T30] audit: type=1326 audit(1761681318.159:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 550.442607][T12653] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 550.449208][T12653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 550.497524][T12653] vhci_hcd vhci_hcd.0: Device attached [ 550.507053][T12654] vhci_hcd: connection closed [ 550.507548][T11812] vhci_hcd: stop threads [ 550.520892][T11812] vhci_hcd: release socket [ 550.526111][T11812] vhci_hcd: disconnect device [ 550.539585][ T30] audit: type=1326 audit(1761681318.159:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 550.563641][ T44] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 550.610334][ T30] audit: type=1326 audit(1761681318.159:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.4.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 550.702768][ T44] usb 6-1: device descriptor read/64, error -71 [ 550.821685][ T9] usb 4-1: USB disconnect, device number 103 [ 550.944106][ T44] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 551.092784][ T44] usb 6-1: device descriptor read/64, error -71 [ 551.213185][ T44] usb usb6-port1: attempt power cycle [ 551.289952][T12664] fuse: Bad value for 'fd' [ 551.682640][ T44] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 551.706840][ T44] usb 6-1: device descriptor read/8, error -71 [ 551.952617][ T44] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 551.983150][ T44] usb 6-1: device descriptor read/8, error -71 [ 552.116105][ T44] usb usb6-port1: unable to enumerate USB device [ 552.125701][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.155602][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.172628][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.220887][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.226163][T12687] ip6tnl1: entered promiscuous mode [ 552.282633][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.322309][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.351237][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 552.356628][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.409307][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.432723][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.444747][ T24] hid-generic 0008:0006:928E.001F: unknown main item tag 0x0 [ 552.537140][ T24] hid-generic 0008:0006:928E.001F: hidraw0: HID v0.01 Device [syz0] on syz1 [ 552.714736][T12695] fido_id[12695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 552.978177][T12703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1747'. [ 553.313582][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 553.333899][T12718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1751'. [ 553.368627][T12718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.394522][T12718] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 553.467177][T12721] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 553.503024][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 553.517430][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.556769][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 553.566159][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 553.577981][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 553.589868][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 553.636230][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.668389][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 553.674654][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 553.684143][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 553.689427][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 553.697128][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 553.704674][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 553.953937][T12730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.964359][T12730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.249183][T12730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.295311][T12740] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[12740] [ 554.663707][T12730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.011999][T12746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.026108][T12746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.383306][T12752] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 556.743613][ T9] usb 2-1: USB disconnect, device number 113 [ 557.137489][T12764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1766'. [ 557.229083][T12773] sctp: [Deprecated]: syz.3.1766 (pid 12773) Use of int in max_burst socket option. [ 557.229083][T12773] Use struct sctp_assoc_value instead [ 557.562743][ T24] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 557.722823][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 557.730678][ T24] usb 5-1: config 11 has an invalid interface number: 141 but max is 0 [ 557.744904][ T24] usb 5-1: config 11 has an invalid descriptor of length 36, skipping remainder of the config [ 557.770291][ T24] usb 5-1: config 11 has no interface number 0 [ 557.783946][ T24] usb 5-1: config 11 interface 141 has no altsetting 0 [ 557.794547][ T24] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=44.68 [ 557.809448][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.832241][ T24] usb 5-1: Product: ꮖ䎧ä¦í’á ¶ì´åªµé³ƒá¿˜ä‰ê¤ä¿§íƒ¼é³µîŒ‹çŽ“⣈枇ꅿ [ 557.853518][ T24] usb 5-1: Manufacturer: щ [ 557.864920][ T24] usb 5-1: SerialNumber: syz [ 557.879490][ T24] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 557.899296][ T24] usb 5-1: no configuration chosen from 1 choice [ 558.150230][T12783] loop2: detected capacity change from 0 to 7 [ 558.174794][T12783] Dev loop2: unable to read RDB block 7 [ 558.187072][T12783] loop2: unable to read partition table [ 558.200495][T12783] loop2: partition table beyond EOD, truncated [ 558.263018][T12783] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 558.573568][ T24] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 558.762803][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 558.985031][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 559.001744][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.019324][ T24] usb 2-1: config 0 descriptor?? [ 559.248320][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 559.258228][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 559.276197][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 559.284059][ T24] usb 2-1: media controller created [ 559.332467][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.260789][ T5908] usb 5-1: USB disconnect, device number 120 [ 560.834604][T12806] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 561.033753][T12813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.042806][T12814] netlink: 'syz.5.1776': attribute type 10 has an invalid length. [ 561.158671][T12814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.292241][T12814] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 561.347969][T12815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1776'. [ 561.460868][ T24] az6027: usb out operation failed. (-110) [ 561.493538][ T24] az6027: usb out operation failed. (-32) [ 561.539668][ T24] stb0899_attach: Driver disabled by Kconfig [ 561.602308][ T24] az6027: no front-end attached [ 561.602308][ T24] [ 561.665245][ T24] az6027: usb out operation failed. (-32) [ 561.717907][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 561.791418][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 561.909697][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 562.024188][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 562.142240][T12827] loop2: detected capacity change from 0 to 7 [ 562.159537][T12825] delete_channel: no stack [ 562.168787][T12827] Dev loop2: unable to read RDB block 7 [ 562.186284][T12827] loop2: unable to read partition table [ 562.206147][T12827] loop2: partition table beyond EOD, truncated [ 562.231179][ T24] usb 2-1: USB disconnect, device number 114 [ 562.284021][T12827] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 562.434333][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 562.769648][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 562.769666][ T30] audit: type=1326 audit(1761681330.879:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.5.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70018efc9 code=0x7ffc0000 [ 562.824413][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.839302][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.841235][ T30] audit: type=1326 audit(1761681330.879:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.5.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70018efc9 code=0x7ffc0000 [ 562.848478][ T813] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 562.988280][ T30] audit: type=1326 audit(1761681330.879:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.5.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc70018efc9 code=0x7ffc0000 [ 563.010845][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.126193][ T813] usb 4-1: device descriptor read/64, error -71 [ 563.182638][ T24] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 563.201615][ T30] audit: type=1326 audit(1761681330.879:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.5.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70018efc9 code=0x7ffc0000 [ 563.295635][ T30] audit: type=1326 audit(1761681330.879:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.5.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70018efc9 code=0x7ffc0000 [ 563.374611][ T813] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 563.382147][ T30] audit: type=1326 audit(1761681330.999:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.5.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fc70018efc9 code=0x7ffc0000 [ 563.426675][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 563.517649][ T24] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 563.526681][ T24] usb 2-1: config 0 has no interface number 0 [ 563.532966][ T813] usb 4-1: device descriptor read/64, error -71 [ 563.544803][ T30] audit: type=1326 audit(1761681331.079:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.5.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70018efc9 code=0x7ffc0000 [ 563.594830][ T24] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 563.613018][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.638923][ T24] usb 2-1: Product: syz [ 563.646124][ T24] usb 2-1: Manufacturer: syz [ 563.650819][ T30] audit: type=1326 audit(1761681331.079:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.5.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70018efc9 code=0x7ffc0000 [ 563.675724][ T24] usb 2-1: SerialNumber: syz [ 563.683340][ T813] usb usb4-port1: attempt power cycle [ 563.690075][ T24] usb 2-1: config 0 descriptor?? [ 563.712275][ T24] redrat3 2-1:0.31: Couldn't find all endpoints [ 563.719468][ T30] audit: type=1326 audit(1761681331.099:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.5.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc70018efc9 code=0x7ffc0000 [ 563.939401][T12836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.993071][T12836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.032743][ T813] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 564.051133][ T984] usb 2-1: USB disconnect, device number 115 [ 564.059519][ T813] usb 4-1: device descriptor read/8, error -71 [ 564.269051][ T30] audit: type=1326 audit(1761681332.379:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b5d8efc9 code=0x7ffc0000 [ 564.323012][ T813] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 564.374283][ T813] usb 4-1: device descriptor read/8, error -71 [ 564.483598][ T813] usb usb4-port1: unable to enumerate USB device [ 564.519253][T12857] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1791'. [ 564.545797][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1792'. [ 564.682412][T12867] loop2: detected capacity change from 0 to 7 [ 564.690508][T11559] Dev loop2: unable to read RDB block 7 [ 564.696527][T11559] loop2: unable to read partition table [ 564.702483][T11559] loop2: partition table beyond EOD, truncated [ 564.710400][T12867] Dev loop2: unable to read RDB block 7 [ 564.722963][T12867] loop2: unable to read partition table [ 564.728809][T12867] loop2: partition table beyond EOD, truncated [ 564.745586][T12867] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 564.774865][ T5201] Dev loop2: unable to read RDB block 7 [ 564.798287][ T5201] loop2: unable to read partition table [ 564.823088][ T5201] loop2: partition table beyond EOD, truncated [ 565.152825][ T5908] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 565.252640][ T984] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 565.305754][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.316281][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.328301][ T5908] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.338621][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.346943][ T5908] usb 5-1: Product: syz [ 565.351168][ T5908] usb 5-1: Manufacturer: syz [ 565.355892][ T5908] usb 5-1: SerialNumber: syz [ 565.404680][ T984] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 565.414072][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.425566][ T984] usb 6-1: config 0 descriptor?? [ 565.569037][ T5908] usb 5-1: 0:2 : does not exist [ 565.591274][ T5908] usb 5-1: USB disconnect, device number 121 [ 565.638522][T11559] udevd[11559]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.653596][ T984] kaweth 6-1:0.0: Firmware present in device. [ 565.661132][ T984] kaweth 6-1:0.0: Statistics collection: 0 [ 565.673654][ T984] kaweth 6-1:0.0: Multicast filter limit: 0 [ 565.696343][ T984] kaweth 6-1:0.0: MTU: 0 [ 565.700648][ T984] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 565.866714][ T984] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 565.900442][ T984] usb 6-1: USB disconnect, device number 26 [ 566.229539][T12891] vlan0: entered allmulticast mode [ 566.235289][T12891] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 566.795778][T12913] loop2: detected capacity change from 0 to 7 [ 566.868375][T12913] Dev loop2: unable to read RDB block 7 [ 566.903821][T12913] loop2: unable to read partition table [ 566.924717][T12913] loop2: partition table beyond EOD, truncated [ 566.945291][T12913] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.041826][ T5908] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 567.234858][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.252650][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.264737][ T5908] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 567.283181][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 567.293840][ T5908] usb 4-1: SerialNumber: syz [ 567.442585][ T984] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 567.527361][ T5908] usb 4-1: 0:2 : does not exist [ 567.564513][ T5908] usb 4-1: USB disconnect, device number 108 [ 568.057172][ T5900] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 568.152955][ T984] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 568.167579][ T984] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 568.178236][ T5900] dvb_usb_dibusb_mc 1-1:9.155: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 568.209827][ T984] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 568.254687][ T5900] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in cold state, will try to load a firmware [ 568.262417][ T984] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 568.282603][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.298210][ T5900] usb 1-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 568.303689][ T984] usb 6-1: Product: syz [ 568.319703][ T5900] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 568.320938][ T984] usb 6-1: Manufacturer: syz [ 568.363170][ T984] usb 6-1: SerialNumber: syz [ 568.496828][T12936] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 568.496828][T12936] The task syz.4.1813 (12936) triggered the difference, watch for misbehavior. [ 568.824662][ T9] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 568.883290][ T984] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 568.913097][ T813] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 569.004156][ T984] usb 6-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 569.049276][ T984] usb 6-1: found format II with max.bitrate = 128, frame size=0 [ 569.066650][ T984] usb 6-1: 2:1: All rates were zero [ 569.073581][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 569.082174][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 569.091540][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.110350][ T9] usb 5-1: config 0 descriptor?? [ 569.157885][ T813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 569.204627][ T813] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 569.237837][ T813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.258133][ T984] usb 6-1: USB disconnect, device number 27 [ 569.286243][ T813] usb 4-1: config 0 descriptor?? [ 569.349600][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 569.371654][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 569.644635][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 569.666268][ T9] usb 5-1: media controller created [ 569.786752][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.821272][ T813] usbhid 4-1:0.0: can't add hid device: -71 [ 569.840166][ T813] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 569.918642][ T813] usb 4-1: USB disconnect, device number 109 [ 570.212848][ T5930] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 570.376974][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.388770][ T5930] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 570.449532][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.527931][ T5930] usb 6-1: config 0 descriptor?? [ 570.907225][T12966] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 570.971827][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 570.971847][ T30] audit: type=1326 audit(1761681339.069:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.1.1823" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2b6f8efc9 code=0x0 [ 571.071960][T12950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.102305][T12950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.124225][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'. [ 571.176070][ T5930] lenovo 0003:17EF:60A3.0020: item fetching failed at offset 4/7 [ 571.231031][ T5930] lenovo 0003:17EF:60A3.0020: hid_parse failed [ 571.245124][ T5930] lenovo 0003:17EF:60A3.0020: probe with driver lenovo failed with error -22 [ 571.413641][T12980] input: syz1 as /devices/virtual/input/input55 [ 571.493324][T12980] binder: 12977:12980 ioctl c0306201 0 returned -14 [ 571.845949][T12980] syz.1.1825 (12980): drop_caches: 2 [ 571.890890][ T9] az6027: usb out operation failed. (-71) [ 572.035292][ T9] az6027: usb out operation failed. (-71) [ 572.041642][ T9] stb0899_attach: Driver disabled by Kconfig [ 572.047958][ T9] az6027: no front-end attached [ 572.047958][ T9] [ 572.057750][ T9] az6027: usb out operation failed. (-71) [ 572.063621][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 572.100398][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 572.125596][T12983] loop6: detected capacity change from 0 to 7 [ 572.140209][T12983] Dev loop6: unable to read RDB block 7 [ 572.151076][T12983] loop6: AHDI p3 p4 [ 572.156173][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 572.169158][T12983] loop6: partition table partially beyond EOD, truncated [ 572.178675][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 572.188043][T12983] loop6: p3 start 1869967360 is beyond EOD, truncated [ 572.201031][ T9] usb 5-1: USB disconnect, device number 122 [ 572.482352][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 572.905497][ T44] usb 6-1: USB disconnect, device number 28 [ 573.005379][T12995] qrtr: Invalid version 48 [ 573.012148][T12995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.715925][T13006] netlink: 8940 bytes leftover after parsing attributes in process `syz.0.1832'. [ 574.462621][ T44] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 574.594477][ T44] usb 5-1: device descriptor read/64, error -71 [ 574.665576][ T5908] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 574.853173][ T44] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 574.882601][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 574.889428][ T5908] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.912580][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 574.919501][ T5908] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 574.933231][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.939055][ T5908] usb 2-1: config 0 descriptor?? [ 575.003140][ T44] usb 5-1: device descriptor read/64, error -71 [ 575.127793][ T44] usb usb5-port1: attempt power cycle [ 575.359244][ T5908] hid_parser_main: 190 callbacks suppressed [ 575.359269][ T5908] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 575.375045][ T5908] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 575.382984][ T5908] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 575.390486][ T5908] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 575.398226][ T5908] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 575.407653][ T5908] corsair-cpro 0003:1B1C:0C10.0021: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 575.422733][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 575.432678][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 575.485792][ T5908] corsair-cpro 0003:1B1C:0C10.0021: probe with driver corsair-cpro failed with error -38 [ 575.496780][ T44] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 575.533763][ T44] usb 5-1: device descriptor read/8, error -71 [ 575.552667][ T9] usb 4-1: device descriptor read/64, error -71 [ 575.559649][ T5908] usb 2-1: USB disconnect, device number 116 [ 575.582648][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 575.589541][ T24] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 575.598695][ T24] usb 6-1: config 1 has no interface number 1 [ 575.607437][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 575.625862][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.635334][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.643574][ T24] usb 6-1: Product: syz [ 575.647776][ T24] usb 6-1: Manufacturer: syz [ 575.652390][ T24] usb 6-1: SerialNumber: syz [ 575.792689][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 575.792686][ T44] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 575.813259][ T44] usb 5-1: device descriptor read/8, error -71 [ 575.864726][T13040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.874072][T13040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.887021][ T24] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 575.895219][ T24] usb 6-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 575.902707][ T24] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 575.908902][ T24] usb 6-1: 2:1 : invalid channels 0 [ 575.928079][ T24] usb 6-1: USB disconnect, device number 29 [ 575.933093][ T9] usb 4-1: device descriptor read/64, error -71 [ 575.938036][ T44] usb usb5-port1: unable to enumerate USB device [ 575.958535][T11559] udevd[11559]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.043123][ T9] usb usb4-port1: attempt power cycle [ 576.200367][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 576.383026][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 576.404419][ T9] usb 4-1: device descriptor read/8, error -71 [ 576.612674][ T44] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 576.664800][ T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 576.694785][ T9] usb 4-1: device descriptor read/8, error -71 [ 576.722718][ T5930] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 576.774222][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 576.785615][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17144, setting to 1024 [ 576.797460][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.804561][ T9] usb usb4-port1: unable to enumerate USB device [ 576.810633][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.810662][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.813867][ T44] usb 2-1: config 0 descriptor?? [ 576.872698][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 576.879494][ T5930] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 576.889162][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.900133][ T5930] usb 6-1: config 0 descriptor?? [ 576.914039][ T5930] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 577.573940][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 577.587618][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 577.613207][ T44] usb 2-1: USB disconnect, device number 117 [ 577.644057][ T9] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 577.802742][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 577.810006][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 577.818898][ T9] usb 5-1: config index 0 descriptor too short (expected 51, got 18) [ 577.827323][ T9] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 577.835564][ T9] usb 5-1: config 4 has no interface number 0 [ 577.841698][ T9] usb 5-1: config 4 interface 30 has no altsetting 0 [ 577.851698][ T9] usb 5-1: string descriptor 0 read error: -22 [ 577.858399][ T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 577.867603][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.884817][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 577.892018][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 577.898232][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 577.906759][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 577.918334][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 577.926004][ T9] usb 5-1: media controller created [ 577.931279][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 577.937088][ T9] dw2102: i2c transfer failed. [ 577.941904][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 577.947987][ T9] dw2102: i2c transfer failed. [ 577.952778][ T44] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 577.960482][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 577.966304][ T9] dw2102: i2c transfer failed. [ 577.971114][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 577.977228][ T9] dw2102: i2c transfer failed. [ 577.982034][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 577.987994][ T9] dw2102: i2c transfer failed. [ 577.992899][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 577.998750][ T9] dw2102: i2c transfer failed. [ 578.004071][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 578.026918][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.048914][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 578.054836][ T9] dw2102: command 0x0e transfer failed. [ 578.060424][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 578.066535][ T9] dw2102: command 0x0e transfer failed. [ 578.104218][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 578.115972][ T44] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 578.124911][ T44] usb 2-1: config 95 has no interface number 0 [ 578.131738][ T44] usb 2-1: config 95 interface 1 has no altsetting 0 [ 578.140866][ T44] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 578.150283][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.158439][ T44] usb 2-1: Product: syz [ 578.162946][ T44] usb 2-1: Manufacturer: syz [ 578.167609][ T44] usb 2-1: SerialNumber: syz [ 578.372722][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 578.396315][ T9] dw2102: command 0x0e transfer failed. [ 578.401948][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 578.424477][ T9] dw2102: command 0x0e transfer failed. [ 578.430106][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 578.452010][ T9] dw2102: command 0x51 transfer failed. [ 578.472301][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 578.478523][ T9] dw2102: i2c probe for address 0x68 failed. [ 578.481928][ T44] usb 2-1: USB disconnect, device number 118 [ 578.513559][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 578.520019][ T9] dw2102: i2c probe for address 0x69 failed. [ 578.539742][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 578.549852][ T9] dw2102: i2c probe for address 0x6a failed. [ 578.565065][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 578.590390][ T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 578.602855][ T5908] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 578.641988][T11559] udevd[11559]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.775394][ T9] rc_core: IR keymap rc-tt-1500 not found [ 578.781172][ T9] Registered IR keymap rc-empty [ 578.793743][ T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 578.818567][ T5908] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 578.820295][ T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input57 [ 578.846484][ T5908] usb 4-1: config 0 has no interface number 0 [ 578.867804][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 578.871957][ T5908] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 578.877737][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 578.890458][ T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 578.901925][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.912976][ T9] usb 5-1: USB disconnect, device number 127 [ 578.960462][ T5908] usb 4-1: config 0 descriptor?? [ 578.979242][ T5908] cp210x 4-1:0.32: cp210x converter detected [ 579.002196][ T5930] gspca_sonixj: reg_r err -71 [ 579.012426][ T5930] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 579.060470][ T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 579.077623][ T5930] usb 6-1: USB disconnect, device number 30 [ 579.484334][ T5908] cp210x 4-1:0.32: failed to get vendor val 0x000e size 3: -71 [ 579.521759][ T5908] usb 4-1: cp210x converter now attached to ttyUSB0 [ 579.549412][ T5908] usb 4-1: USB disconnect, device number 114 [ 579.558134][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 579.567727][ T5908] cp210x 4-1:0.32: device disconnected [ 579.584009][T13062] FAULT_INJECTION: forcing a failure. [ 579.584009][T13062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.619256][T13062] CPU: 1 UID: 0 PID: 13062 Comm: syz.4.1850 Not tainted syzkaller #0 PREEMPT(full) [ 579.619283][T13062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 579.619300][T13062] Call Trace: [ 579.619308][T13062] [ 579.619317][T13062] dump_stack_lvl+0x189/0x250 [ 579.619349][T13062] ? __pfx____ratelimit+0x10/0x10 [ 579.619367][T13062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.619390][T13062] ? __pfx__printk+0x10/0x10 [ 579.619405][T13062] ? __might_fault+0xb0/0x130 [ 579.619433][T13062] should_fail_ex+0x414/0x560 [ 579.619458][T13062] core_sys_select+0x729/0xa20 [ 579.619487][T13062] ? __pfx_core_sys_select+0x10/0x10 [ 579.619523][T13062] ? __pfx_set_user_sigmask+0x10/0x10 [ 579.619547][T13062] __se_sys_pselect6+0x27a/0x300 [ 579.619572][T13062] ? __pfx___se_sys_pselect6+0x10/0x10 [ 579.619593][T13062] ? __pfx_ksys_write+0x10/0x10 [ 579.619616][T13062] ? __x64_sys_pselect6+0x21/0xf0 [ 579.619638][T13062] do_syscall_64+0xfa/0xfa0 [ 579.619662][T13062] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.619694][T13062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.619708][T13062] ? clear_bhb_loop+0x60/0xb0 [ 579.619725][T13062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.619742][T13062] RIP: 0033:0x7f23b5d8efc9 [ 579.619755][T13062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.619767][T13062] RSP: 002b:00007f23b6bf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 579.619783][T13062] RAX: ffffffffffffffda RBX: 00007f23b5fe5fa0 RCX: 00007f23b5d8efc9 [ 579.619793][T13062] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 579.619802][T13062] RBP: 00007f23b6bf8090 R08: 0000000000000000 R09: 0000000000000000 [ 579.619812][T13062] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 579.619821][T13062] R13: 00007f23b5fe6038 R14: 00007f23b5fe5fa0 R15: 00007f23b610fa28 [ 579.619843][T13062] [ 579.813809][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.892573][ T5930] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 579.968165][T13088] loop6: detected capacity change from 0 to 7 [ 579.977891][T11559] Dev loop6: unable to read RDB block 7 [ 579.984553][T11559] loop6: unable to read partition table [ 579.990551][T11559] loop6: partition table beyond EOD, truncated [ 579.997913][T13088] Dev loop6: unable to read RDB block 7 [ 580.003901][T13088] loop6: unable to read partition table [ 580.009841][T13088] loop6: partition table beyond EOD, truncated [ 580.028479][T13088] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.081548][T13090] input: syz1 as /devices/virtual/input/input58 [ 580.093533][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 580.115372][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.129254][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 580.171358][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 580.183911][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 580.194531][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 580.209645][ T5930] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 580.222930][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 580.231094][ T5930] usb 6-1: Product: syz [ 580.235842][ T5930] usb 6-1: Manufacturer: syz [ 580.240468][ T5930] usb 6-1: SerialNumber: syz [ 580.304509][ T5930] usb 6-1: config 0 descriptor?? [ 580.531103][ T5930] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 580.538217][ T5930] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 580.557853][T13099] loop2: detected capacity change from 0 to 7 [ 580.570911][ T6376] Dev loop2: unable to read RDB block 7 [ 580.577893][ T6376] loop2: unable to read partition table [ 580.584041][ T6376] loop2: partition table beyond EOD, truncated [ 580.592809][T13099] Dev loop2: unable to read RDB block 7 [ 580.603295][T13099] loop2: unable to read partition table [ 580.609293][T13099] loop2: partition table beyond EOD, truncated [ 580.645333][T13099] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.731973][ T5930] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 580.758604][ T5930] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 580.789049][ T5930] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 581.070365][T13105] syzkaller0: entered promiscuous mode [ 581.076428][T13105] syzkaller0: entered allmulticast mode [ 581.192640][ T5908] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 581.356421][ T5908] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 581.402793][ T5908] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 581.481952][ T5908] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 581.514552][ T5908] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.523790][ T24] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 581.532002][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.540328][ T5908] usb 4-1: Product: syz [ 581.572332][ T5908] usb 4-1: Manufacturer: syz [ 581.582998][ T5908] usb 4-1: SerialNumber: syz [ 581.692923][ T24] usb 2-1: device descriptor read/64, error -71 [ 581.748030][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1862'. [ 581.838278][ T5930] usb 6-1: USB disconnect, device number 31 [ 581.850934][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.883709][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.920530][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.964784][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.968952][T13113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.024703][ T24] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 582.078639][T13113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.185296][ T24] usb 2-1: device descriptor read/64, error -71 [ 582.199535][ T5908] usb 4-1: USB disconnect, device number 115 [ 582.238843][T11559] udevd[11559]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.322873][ T24] usb usb2-port1: attempt power cycle [ 582.678395][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 582.726912][ T24] usb 2-1: device descriptor read/8, error -71 [ 582.872822][ T30] audit: type=1326 audit(1761681350.969:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 582.944522][ T30] audit: type=1326 audit(1761681350.969:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 583.152592][ T24] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 583.204002][ T30] audit: type=1326 audit(1761681350.979:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 583.235576][ T24] usb 2-1: device descriptor read/8, error -71 [ 583.366063][ T24] usb usb2-port1: unable to enumerate USB device [ 583.383858][ T30] audit: type=1326 audit(1761681350.979:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 583.410758][ T30] audit: type=1326 audit(1761681350.979:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 583.612389][ T30] audit: type=1326 audit(1761681351.029:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 583.705834][ T30] audit: type=1326 audit(1761681351.369:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 583.750591][ T30] audit: type=1326 audit(1761681351.389:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe866f8efc9 code=0x7ffc0000 [ 583.902914][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 584.074851][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.089250][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.158948][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 584.230424][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 584.239870][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.320078][ T9] usb 5-1: config 0 descriptor?? [ 584.626064][T13147] sctp: [Deprecated]: syz.3.1873 (pid 13147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.626064][T13147] Use struct sctp_sack_info instead [ 584.703008][ T5930] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 584.775853][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.792674][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.799712][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.813179][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.820188][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.837850][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.845907][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.853261][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.860341][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.868648][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 584.874756][ T9] elecom 0003:056E:010C.0022: unknown main item tag 0x0 [ 584.885130][ T5930] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 584.901067][ T5930] usb 2-1: config 0 has no interface number 0 [ 584.911239][ T9] elecom 0003:056E:010C.0022: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.4-1/input0 [ 584.925216][ T5930] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 584.949908][ T5930] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 584.963461][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 584.971832][ T5930] usb 2-1: Product: syz [ 584.985431][ T5930] usb 2-1: SerialNumber: syz [ 584.994879][T13142] input: syz1 as /devices/virtual/input/input59 [ 585.006373][ T5930] usb 2-1: config 0 descriptor?? [ 585.025766][T13142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.035415][T13142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.069392][ T5930] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 585.085989][ T5908] usb 5-1: USB disconnect, device number 2 [ 585.138434][T13156] fido_id[13156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 585.271012][ T5930] usb 2-1: USB disconnect, device number 123 [ 585.710875][ T5845] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 585.710958][ T5845] Bluetooth: hci3: Malformed LE Event: 0x0d [ 585.878834][T13170] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 585.891577][T13170] block device autoloading is deprecated and will be removed. [ 585.942871][ T5908] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 585.992820][ T5930] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 586.022133][T13179] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1882'. [ 586.046660][ T30] audit: type=1326 audit(1761681354.159:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 586.070109][ T30] audit: type=1326 audit(1761681354.159:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d698efc9 code=0x7ffc0000 [ 586.103088][ T5908] usb 4-1: device descriptor read/64, error -71 [ 586.144878][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.155411][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 586.166342][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 586.176312][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.190090][ T5930] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 586.199200][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.210274][ T5930] usb 6-1: config 0 descriptor?? [ 586.220937][ T5930] gspca_main: spca561-2.14.0 probing abcd:cdee [ 586.242969][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 586.342818][ T5908] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 586.394262][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 586.401574][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 586.414009][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 586.428149][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 586.437521][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.445623][ T9] usb 5-1: Product: syz [ 586.449842][ T9] usb 5-1: Manufacturer: syz [ 586.454971][ T9] usb 5-1: SerialNumber: syz [ 586.462358][ T9] usb 5-1: config 0 descriptor?? [ 586.471532][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 586.480921][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 586.492731][ T5908] usb 4-1: device descriptor read/64, error -71 [ 586.603018][ T5908] usb usb4-port1: attempt power cycle [ 586.736736][ T5930] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 586.747096][ T5930] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 586.754748][ T5930] usb 6-1: MIDIStreaming interface descriptor not found [ 586.952726][ T5908] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 587.190944][ T5908] usb 4-1: device descriptor read/8, error -71 [ 587.226106][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 587.249556][ T5930] usb 6-1: USB disconnect, device number 32 [ 587.260418][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 587.432624][ T5908] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 587.467175][ T5908] usb 4-1: device descriptor read/8, error -71 [ 587.594420][ T5908] usb usb4-port1: unable to enumerate USB device [ 588.002912][ T9] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 588.026656][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 588.476164][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 588.514381][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 588.540090][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 588.571213][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 588.811539][T13177] syzkaller0: entered promiscuous mode [ 588.835143][T13177] syzkaller0: entered allmulticast mode [ 588.922163][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 588.954114][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 588.960507][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 588.967724][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 588.981670][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 589.002931][ T9] usb 5-1: USB disconnect, device number 3 [ 589.723079][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 589.943211][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 589.950351][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.995697][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.022787][ T813] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 590.077824][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 590.106338][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 590.126626][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.153482][ T9] usb 2-1: config 0 descriptor?? [ 590.186091][ T813] usb 5-1: device descriptor read/64, error -71 [ 590.463011][ T813] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 590.492999][T13202] Bluetooth: hci5: command 0x0406 tx timeout [ 590.576075][ T9] hid_parser_main: 28 callbacks suppressed [ 590.576100][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 590.602632][ T813] usb 5-1: device descriptor read/64, error -71 [ 590.630559][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 590.648477][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 590.713061][ T813] usb usb5-port1: attempt power cycle [ 590.883839][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0023/input/input60 [ 591.101888][ T9] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 591.148779][ T9] usb 2-1: USB disconnect, device number 124 [ 591.202606][ T813] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 591.234744][ T813] usb 5-1: device descriptor read/8, error -71 [ 591.325347][T11559] udevd[11559]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 591.354117][T13245] fido_id[13245]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 591.462744][T13248] delete_channel: no stack [ 591.472685][ T813] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 591.493501][ T813] usb 5-1: device descriptor read/8, error -71 [ 591.603343][ T813] usb usb5-port1: unable to enumerate USB device [ 591.862894][ T5930] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 591.970582][T13262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1901'. [ 592.022834][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 592.039598][ T5930] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 592.082873][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.118314][ T5930] usb 2-1: config 0 descriptor?? [ 592.140296][ T5930] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 592.163546][T13267] loop2: detected capacity change from 0 to 7 [ 592.171551][T11559] Dev loop2: unable to read RDB block 7 [ 592.178184][T11559] loop2: unable to read partition table [ 592.184238][T11559] loop2: partition table beyond EOD, truncated [ 592.191631][T13267] Dev loop2: unable to read RDB block 7 [ 592.232932][T13267] loop2: unable to read partition table [ 592.239036][T13267] loop2: partition table beyond EOD, truncated [ 592.266078][T13267] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 592.334533][T13250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.363399][T13250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.612730][ T5908] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 592.779099][ T5908] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.821833][ T5908] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 592.837541][ T5908] usb 6-1: config 1 has no interface number 0 [ 592.861152][ T5908] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 592.875091][ T5908] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 592.891244][ T5908] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 592.901473][ T5908] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 592.914401][ T5908] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.931825][ T5908] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.941709][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.950277][ T5908] usb 6-1: Product: syz [ 592.954900][ T5908] usb 6-1: Manufacturer: syz [ 592.963036][ T5908] usb 6-1: SerialNumber: syz [ 592.985550][T13269] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 593.199836][T13269] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 593.515902][ T5930] gspca_sonixj: reg_w1 err -71 [ 593.540317][ T5930] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 593.571822][ T5930] usb 2-1: USB disconnect, device number 125 [ 593.656026][T13269] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 593.658198][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.677492][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.902097][T13269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.916206][T13269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.950009][T13269] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 593.989504][ T5908] cdc_ncm 6-1:1.1: bind() failure [ 594.188820][ T5930] usb 6-1: USB disconnect, device number 33 [ 595.206623][T13309] IPVS: set_ctl: invalid protocol: 108 172.20.20.61:20000 [ 595.222392][T13311] loop2: detected capacity change from 0 to 7 [ 595.243680][T13311] Dev loop2: unable to read RDB block 7 [ 595.249323][T13311] loop2: unable to read partition table [ 595.329462][T13311] loop2: partition table beyond EOD, truncated [ 595.363713][T13311] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 595.608197][ T24] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 595.733428][ T5930] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 595.772986][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 595.882871][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 595.912618][ T24] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 596.109126][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 596.129092][ T24] usb usb5-port1: attempt power cycle [ 596.203820][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short [ 596.213081][ T5930] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 596.223676][ T5930] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 596.249438][ T5930] usb 6-1: can't read configurations, error -71 [ 596.547714][ T24] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 596.876661][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 597.013036][ T24] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 597.043343][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 597.049838][ T24] usb usb5-port1: unable to enumerate USB device [ 597.348281][T13341] xt_CT: You must specify a L4 protocol and not use inversions on it [ 597.357000][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 597.512564][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 597.552716][ T9] usb 4-1: config 0 has no interfaces? [ 597.823373][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 597.834417][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 597.843096][ T9] usb 4-1: Manufacturer: syz [ 597.887180][ T9] usb 4-1: config 0 descriptor?? [ 597.994836][T13351] team_slave_0: entered promiscuous mode [ 598.001062][T13351] team_slave_1: entered promiscuous mode [ 598.011070][T13351] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 598.066642][T13351] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 598.084996][T13351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1923'. [ 598.405193][T13353] input: syz1 as /devices/virtual/input/input62 [ 598.652320][T13356] loop2: detected capacity change from 0 to 7 [ 598.671563][ T6376] Dev loop2: unable to read RDB block 7 [ 598.677459][ T6376] loop2: unable to read partition table [ 598.683542][ T6376] loop2: partition table beyond EOD, truncated [ 598.694988][T13356] Dev loop2: unable to read RDB block 7 [ 598.706369][T13356] loop2: unable to read partition table [ 598.717469][T13356] loop2: partition table beyond EOD, truncated [ 598.780181][T13356] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 600.005596][T13367] vcan0: tx address claim with dest, not broadcast [ 600.028979][ T9] usb 4-1: USB disconnect, device number 120 [ 600.114112][T13372] usb usb8: usbfs: process 13372 (syz.3.1930) did not claim interface 0 before use [ 600.451195][T13383] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1931'. [ 601.988278][T13388] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 603.465840][T13435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.515817][T13435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.564729][ T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 603.764252][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 603.765209][T13440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1945'. [ 603.771577][ T9] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 603.806193][ T9] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 603.914694][ T9] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 603.987231][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 604.028050][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 604.042356][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.052969][ T9] usb 2-1: Product: syz [ 604.060626][ T9] usb 2-1: Manufacturer: syz [ 604.084470][ T9] usb 2-1: SerialNumber: syz [ 604.258323][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1946'. [ 604.332994][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 126 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 604.399951][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 604.569598][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1943'. [ 604.688795][T13428] usblp0:failed reading printer status (-32) [ 604.730795][ T24] usb 2-1: USB disconnect, device number 126 [ 604.739267][ T24] usblp0: removed [ 606.046254][T13468] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 606.052995][T13468] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 606.067999][T13468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 606.075528][T13468] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 606.084384][T13468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 606.091565][T13468] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 606.108482][T13468] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 606.119987][T13468] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 606.135830][T13468] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 606.150377][T13468] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 606.171758][T13468] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 606.186510][T13468] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 606.452643][ T5930] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 606.602701][ T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 606.651667][ T5930] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 606.671843][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.762768][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 606.769736][ T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 606.810689][ T24] usb 6-1: config 0 has no interface number 0 [ 607.259180][ T24] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.262815][ T5930] usb 2-1: Product: syz [ 607.322043][ T24] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.378564][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 607.488140][ T5930] usb 2-1: Manufacturer: syz [ 607.498337][ T5930] usb 2-1: SerialNumber: syz [ 607.597459][ T24] usb 6-1: config 0 interface 8 has no altsetting 0 [ 607.683960][ T24] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 607.741133][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.794327][ T24] usb 6-1: config 0 descriptor?? [ 608.092995][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 608.099179][T13202] Bluetooth: hci1: command 0x0406 tx timeout [ 608.173813][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 608.179901][T13202] Bluetooth: hci4: command 0x0406 tx timeout [ 608.186105][T13202] Bluetooth: hci3: command 0x0406 tx timeout [ 608.263224][ T24] uclogic 0003:5543:0522.0024: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input8 [ 608.465817][ T24] usb 6-1: USB disconnect, device number 36 [ 608.500973][T13506] fido_id[13506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 609.427299][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1964'. [ 609.462883][T13504] Bluetooth: hci0: command 0x0406 tx timeout [ 609.605471][ T5930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 609.642370][ T24] IPVS: starting estimator thread 0... [ 609.648138][T13528] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 609.665739][ T5930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 609.752544][ T5930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 609.773179][T13529] IPVS: using max 27 ests per chain, 64800 per kthread [ 609.817598][ T5930] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 609.902278][ T5930] usb 2-1: USB disconnect, device number 127 [ 610.129569][T13543] fuse: Bad value for 'fd' [ 610.188354][T13504] Bluetooth: hci2: command 0x0406 tx timeout [ 610.195133][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 610.253065][T13504] Bluetooth: hci5: command 0x0406 tx timeout [ 610.259114][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 610.265973][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 610.347430][ T5930] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 610.512599][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 610.525086][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 610.561528][ T5930] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 610.586399][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.609390][ T5930] usb 2-1: Product: syz [ 610.636672][ T5930] usb 2-1: Manufacturer: syz [ 610.651578][ T5930] usb 2-1: SerialNumber: syz [ 610.707874][ T5930] usb 2-1: config 0 descriptor?? [ 610.745852][ T5930] gs_usb 2-1:0.0: Required endpoints not found [ 610.951448][ T5930] usb 2-1: USB disconnect, device number 2 [ 611.444839][T13552] geneve2: entered promiscuous mode [ 611.483166][T13552] geneve2: entered allmulticast mode [ 612.400378][T13562] netlink: 'syz.0.1975': attribute type 39 has an invalid length. [ 612.833019][T13575] binder: 13573:13575 ioctl 8982 200000000300 returned -22 [ 612.937702][T13575] binder: 13573:13575 ioctl 8933 200000000140 returned -22 [ 612.960893][T13575] binder: transaction release 80 bad handle 1, ret = -22 [ 613.049508][T13578] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1977'. [ 613.058805][T13578] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1977'. [ 613.551361][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 613.981240][T13582] IPVS: set_ctl: invalid protocol: 140 224.0.0.1:20003 [ 614.013082][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.383933][T13568] delete_channel: no stack [ 614.653044][ T31] INFO: task syz.2.1394:11286 blocked for more than 143 seconds. [ 614.668179][ T31] Not tainted syzkaller #0 [ 614.702760][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 614.711506][ T31] task:syz.2.1394 state:D stack:26248 pid:11286 tgid:11284 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 614.740229][ T31] Call Trace: [ 614.743918][ T31] [ 614.746944][ T31] __schedule+0x1798/0x4cc0 [ 614.751659][ T31] ? __pfx___schedule+0x10/0x10 [ 614.757527][ T31] ? schedule+0x91/0x360 [ 614.761914][ T31] schedule+0x165/0x360 [ 614.766572][ T31] schedule_preempt_disabled+0x13/0x30 [ 614.772192][ T31] __mutex_lock+0x7e6/0x1350 [ 614.784191][ T31] ? __mutex_lock+0x5bb/0x1350 [ 614.797610][ T31] ? usbdev_open+0x16e/0x760 [ 614.803200][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 614.808391][ T31] ? bus_find_device+0x273/0x2b0 [ 614.814345][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 614.819800][ T31] ? __lock_acquire+0xab9/0xd20 [ 614.825525][ T31] usbdev_open+0x16e/0x760 [ 614.830119][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 614.835995][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 614.841344][ T31] chrdev_open+0x4cc/0x5e0 [ 614.846319][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 614.965228][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 614.971729][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 614.993081][ T31] do_dentry_open+0x953/0x13f0 [ 614.999003][ T31] vfs_open+0x3b/0x340 [ 615.003669][ T31] ? path_openat+0x2ecd/0x3830 [ 615.008702][ T31] path_openat+0x2ee5/0x3830 [ 615.014677][ T31] ? __pfx_path_openat+0x10/0x10 [ 615.019827][ T31] do_filp_open+0x1fa/0x410 [ 615.024870][ T31] ? __lock_acquire+0xab9/0xd20 [ 615.045171][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 615.058293][ T31] ? _raw_spin_unlock+0x28/0x50 [ 615.072661][ T5908] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 615.083371][ T31] ? alloc_fd+0x64c/0x6c0 [ 615.097979][ T31] do_sys_openat2+0x121/0x1c0 [ 615.103255][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 615.108794][ T31] ? rcu_is_watching+0x15/0xb0 [ 615.114349][ T31] __x64_sys_openat+0x138/0x170 [ 615.119500][ T31] do_syscall_64+0xfa/0xfa0 [ 615.124698][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.130004][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.138962][ T31] ? clear_bhb_loop+0x60/0xb0 [ 615.144366][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.150463][ T31] RIP: 0033:0x7fb527d8d810 [ 615.161646][ T31] RSP: 002b:00007fb528b3eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 615.180345][ T31] RAX: ffffffffffffffda RBX: 000000000000a401 RCX: 00007fb527d8d810 [ 615.190814][ T31] RDX: 000000000000a401 RSI: 00007fb528b3ec10 RDI: 00000000ffffff9c [ 615.208016][ T31] RBP: 00007fb528b3ec10 R08: 0000000000000000 R09: 0000000000000000 [ 615.225721][ T5908] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 615.232554][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 615.249670][ T5908] usb 6-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 615.259706][ T31] R13: 00007fb527fe6128 R14: 00007fb527fe6090 R15: 00007fb52810fa28 [ 615.259747][ T31] [ 615.272131][ T31] [ 615.272131][ T31] Showing all locks held in the system: [ 615.282907][ T31] 1 lock held by khungtaskd/31: [ 615.287999][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 615.310182][ T31] 1 lock held by syslogd/5183: [ 615.310198][ T5908] usb 6-1: config 0 interface 0 has no altsetting 0 [ 615.316368][ T31] 2 locks held by getty/5591: [ 615.327246][ T31] #0: ffff88802fee30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 615.338045][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 615.349114][ T31] 6 locks held by kworker/1:5/5900: [ 615.354972][ T31] #0: ffff888144a93148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 615.367575][ T31] #1: ffffc9000453fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 615.380203][ T5908] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 615.380332][ T31] #2: ffff888144fc4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 615.399547][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.400972][ T31] #3: ffff888032bf3198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 615.408533][ T5908] usb 6-1: Product: syz [ 615.421800][ T31] #4: ffff888059ebb160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 615.431889][ T5908] usb 6-1: Manufacturer: syz [ 615.434369][ T31] #5: ffffffff8dde26f0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 615.436696][ T5908] usb 6-1: SerialNumber: syz [ 615.454431][ T31] 3 locks held by kworker/1:7/5908: [ 615.459835][ T31] 1 lock held by syz.2.1394/11286: [ 615.465691][ T31] #0: ffff888144fc4198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 615.466493][ T5908] usb 6-1: config 0 descriptor?? [ 615.475055][ T31] 1 lock held by syz.0.1985/13597: [ 615.485754][ T31] [ 615.488260][ T31] ============================================= [ 615.488260][ T31] [ 615.497232][ T31] NMI backtrace for cpu 0 [ 615.497248][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 615.497270][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 615.497283][ T31] Call Trace: [ 615.497292][ T31] [ 615.497300][ T31] dump_stack_lvl+0x189/0x250 [ 615.497336][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.497364][ T31] ? __pfx__printk+0x10/0x10 [ 615.497397][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 615.497421][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 615.497444][ T31] ? __pfx__printk+0x10/0x10 [ 615.497469][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 615.497503][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 615.497526][ T31] watchdog+0xf60/0xfa0 [ 615.497552][ T31] ? watchdog+0x1e2/0xfa0 [ 615.497577][ T31] kthread+0x711/0x8a0 [ 615.497606][ T31] ? __pfx_watchdog+0x10/0x10 [ 615.497625][ T31] ? __pfx_kthread+0x10/0x10 [ 615.497654][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.497678][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.497702][ T31] ? __pfx_kthread+0x10/0x10 [ 615.497729][ T31] ret_from_fork+0x4bc/0x870 [ 615.497752][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 615.497780][ T31] ? __switch_to_asm+0x39/0x70 [ 615.497796][ T31] ? __switch_to_asm+0x33/0x70 [ 615.497812][ T31] ? __pfx_kthread+0x10/0x10 [ 615.497840][ T31] ret_from_fork_asm+0x1a/0x30 [ 615.497874][ T31] [ 615.497882][ T31] Sending NMI from CPU 0 to CPUs 1: [ 615.559235][ T5908] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 615.565284][ C1] NMI backtrace for cpu 1 [ 615.565297][ C1] CPU: 1 UID: 0 PID: 5908 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 615.565316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 615.565333][ C1] Workqueue: usb_hub_wq hub_event [ 615.565352][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 615.565370][ C1] Code: 3d ab fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7c f2 10 fd 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 615.565403][ C1] RSP: 0018:ffffc900045be3f0 EFLAGS: 00000002 [ 615.565418][ C1] RAX: 0000000000000035 RBX: 0000000000000035 RCX: 0000000000000000 [ 615.565429][ C1] RDX: 00000000000003f8 RSI: 000000000009a3ee RDI: 000000000009a3ef [ 615.565441][ C1] RBP: 00000000000003f8 R08: ffff888142778237 R09: 1ffff110284ef046 [ 615.565454][ C1] R10: dffffc0000000000 R11: ffffffff8514c6a0 R12: dffffc0000000000 [ 615.565468][ C1] R13: ffffffff997d68e6 R14: ffffffff99ae9f20 R15: 0000000000000000 [ 615.565481][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 615.565496][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.565508][ C1] CR2: 0000200000227030 CR3: 000000004daa0000 CR4: 00000000003526f0 [ 615.565524][ C1] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 615.565535][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 615.565548][ C1] Call Trace: [ 615.565556][ C1] [ 615.565565][ C1] serial8250_console_write+0x1410/0x1ba0 [ 615.565599][ C1] ? __lock_acquire+0xab9/0xd20 [ 615.565617][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 615.565646][ C1] ? console_flush_all+0x13a/0xb10 [ 615.565670][ C1] ? console_flush_all+0x13a/0xb10 [ 615.565696][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 615.565720][ C1] ? console_flush_all+0x13a/0xb10 [ 615.565743][ C1] console_flush_all+0x6f3/0xb10 [ 615.565768][ C1] ? console_flush_all+0x13a/0xb10 [ 615.565794][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 615.565822][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 615.565850][ C1] console_unlock+0xbb/0x190 [ 615.565870][ C1] ? vprintk_emit+0x2ee/0x590 [ 615.565891][ C1] ? __pfx_console_unlock+0x10/0x10 [ 615.565917][ C1] ? vprintk_emit+0x2e0/0x590 [ 615.565938][ C1] ? vprintk_emit+0x495/0x590 [ 615.565958][ C1] ? vprintk_emit+0x2ee/0x590 [ 615.565977][ C1] ? vprintk_emit+0x2ee/0x590 [ 615.565999][ C1] vprintk_emit+0x4c5/0x590 [ 615.566021][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 615.566042][ C1] ? arch_stack_walk+0x11c/0x150 [ 615.566064][ C1] ? __pfx_snprintf+0x10/0x10 [ 615.566088][ C1] dev_vprintk_emit+0x337/0x3f0 [ 615.566113][ C1] ? stack_depot_save_flags+0x40/0x860 [ 615.566142][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 615.566171][ C1] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 615.566196][ C1] ? usb_serial_probe+0x3f1/0x2d20 [ 615.566221][ C1] ? usb_probe_interface+0x668/0xc30 [ 615.566239][ C1] ? really_probe+0x26d/0x9e0 [ 615.566264][ C1] dev_printk_emit+0xe0/0x130 [ 615.566289][ C1] ? driver_probe_device+0x4f/0x430 [ 615.566310][ C1] ? __device_attach_driver+0x2ce/0x530 [ 615.566332][ C1] ? bus_for_each_drv+0x251/0x2e0 [ 615.566348][ C1] ? usb_new_device+0xa39/0x16f0 [ 615.566371][ C1] ? hub_event+0x2958/0x4a20 [ 615.566384][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 615.566404][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 615.566434][ C1] ? __dev_printk+0x131/0x190 [ 615.566457][ C1] _dev_info+0x10a/0x160 [ 615.566484][ C1] ? __pfx__dev_info+0x10/0x10 [ 615.566522][ C1] usb_serial_probe+0x988/0x2d20 [ 615.566555][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.566579][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 615.566600][ C1] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 615.566624][ C1] ? pm_runtime_enable+0x1f3/0x340 [ 615.566647][ C1] usb_probe_interface+0x668/0xc30 [ 615.566671][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 615.566688][ C1] really_probe+0x26d/0x9e0 [ 615.566714][ C1] __driver_probe_device+0x18c/0x2f0 [ 615.566737][ C1] driver_probe_device+0x4f/0x430 [ 615.566762][ C1] __device_attach_driver+0x2ce/0x530 [ 615.566787][ C1] bus_for_each_drv+0x251/0x2e0 [ 615.566803][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 615.566826][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 615.566847][ C1] __device_attach+0x2b8/0x400 [ 615.566869][ C1] ? __pfx___device_attach+0x10/0x10 [ 615.566891][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 615.566923][ C1] bus_probe_device+0x185/0x260 [ 615.566941][ C1] device_add+0x7b6/0xb50 [ 615.566963][ C1] usb_set_configuration+0x1a87/0x20e0 [ 615.566993][ C1] usb_generic_driver_probe+0x8d/0x150 [ 615.567023][ C1] usb_probe_device+0x1c4/0x390 [ 615.567043][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 615.567060][ C1] really_probe+0x26d/0x9e0 [ 615.567085][ C1] __driver_probe_device+0x18c/0x2f0 [ 615.567109][ C1] driver_probe_device+0x4f/0x430 [ 615.567133][ C1] __device_attach_driver+0x2ce/0x530 [ 615.567158][ C1] bus_for_each_drv+0x251/0x2e0 [ 615.567175][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 615.567198][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 615.567219][ C1] __device_attach+0x2b8/0x400 [ 615.567241][ C1] ? __pfx___device_attach+0x10/0x10 [ 615.567265][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 615.567290][ C1] bus_probe_device+0x185/0x260 [ 615.567308][ C1] device_add+0x7b6/0xb50 [ 615.567329][ C1] usb_new_device+0xa39/0x16f0 [ 615.567359][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 615.567384][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.567403][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.567426][ C1] hub_event+0x2958/0x4a20 [ 615.567467][ C1] ? __pfx_hub_event+0x10/0x10 [ 615.567482][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 615.567503][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.567523][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 615.567540][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 615.567560][ C1] process_scheduled_works+0xae1/0x17b0 [ 615.567592][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 615.567619][ C1] worker_thread+0x8a0/0xda0 [ 615.567640][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 615.567665][ C1] ? __kthread_parkme+0x7b/0x200 [ 615.567690][ C1] kthread+0x711/0x8a0 [ 615.567714][ C1] ? __pfx_worker_thread+0x10/0x10 [ 615.567733][ C1] ? __pfx_kthread+0x10/0x10 [ 615.567757][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.567776][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.567798][ C1] ? __pfx_kthread+0x10/0x10 [ 615.567821][ C1] ret_from_fork+0x4bc/0x870 [ 615.567839][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 615.567861][ C1] ? __switch_to_asm+0x39/0x70 [ 615.567875][ C1] ? __switch_to_asm+0x33/0x70 [ 615.567889][ C1] ? __pfx_kthread+0x10/0x10 [ 615.567918][ C1] ret_from_fork_asm+0x1a/0x30 [ 615.567941][ C1] [ 616.468373][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 616.483761][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 616.493345][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 616.503296][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 616.512641][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 616.522271][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 616.553341][ T5908] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 616.577641][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 616.587337][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 3 [ 616.597445][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 616.611609][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 616.622619][ T5908] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 616.647016][ T5908] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 616.679482][ T5908] usb 6-1: USB disconnect, device number 37 [ 616.705232][ T5908] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 616.720477][ T5908] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 616.732424][ T5908] keyspan 6-1:0.0: device disconnected [ 624.257519][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.264083][ T1305] ieee802154 phy1 wpan1: encryption failed: -22