last executing test programs: 10m40.301621359s ago: executing program 32 (id=278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) 9m44.134664697s ago: executing program 33 (id=370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r1, &(0x7f00000082c0)="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", 0x2000, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0xff, 0x2, 0x0, 0x0, 0x100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r0, r1, 0x0) read$FUSE(r3, 0x0, 0x0) 8m54.903374379s ago: executing program 1 (id=464): creat(&(0x7f0000000340)='./file0\x00', 0xe9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 8m54.208375625s ago: executing program 1 (id=466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "576b6ef53b7d29775a598a05bd75178e57e16568b009ec328b5d6764d965e1081fc3c390db93cc994509274386773707579006e9c352280cd69fe358a15ef916", 0x36}, 0x48, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4}) 8m54.204571404s ago: executing program 3 (id=467): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) 8m51.834875028s ago: executing program 1 (id=468): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 8m51.041168752s ago: executing program 1 (id=470): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) unshare(0x20000400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086683, &(0x7f0000000040)) 8m50.517442009s ago: executing program 1 (id=471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000080, 0x0, 0x6}]}) 8m50.437563602s ago: executing program 3 (id=472): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 8m49.774069762s ago: executing program 3 (id=473): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000100)=[{0x0, 0x1, 0x0, 0xfffffffffffffffc}], 0x1}) r1 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000000)={0x0, {0x9, 0xfffffcbb}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2, 0x0, r5}) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2, r5}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="3aa704007fc399"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x8000}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8m49.289034337s ago: executing program 1 (id=474): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) syz_usb_connect(0x0, 0x48, 0x0, 0x0) 8m44.350797535s ago: executing program 3 (id=480): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6e09, 0x24, &(0x7f0000000240)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143f"}], 0x2}) 8m34.553657426s ago: executing program 3 (id=491): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 8m33.612891943s ago: executing program 34 (id=474): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) syz_usb_connect(0x0, 0x48, 0x0, 0x0) 8m33.550499536s ago: executing program 3 (id=494): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048801) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1d69, r2}, 0x38) 8m18.087695427s ago: executing program 35 (id=494): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048801) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1d69, r2}, 0x38) 6m18.004097153s ago: executing program 5 (id=683): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6m16.916838714s ago: executing program 5 (id=688): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x181840, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m14.68173121s ago: executing program 5 (id=696): syz_io_uring_setup(0x559, &(0x7f0000000340)={0x0, 0x8d2dc, 0x1, 0x1, 0xc5}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x4a, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x0, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x56, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m13.584864704s ago: executing program 5 (id=699): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) write$FUSE_WRITE(r2, 0x0, 0x0) 6m10.346588995s ago: executing program 5 (id=706): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) 6m5.176785227s ago: executing program 5 (id=709): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20004806}, 0x200040c6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m49.666191321s ago: executing program 36 (id=709): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20004806}, 0x200040c6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m14.654883025s ago: executing program 6 (id=786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000180)={0x6, @capture={0x1000, 0x1, {0x1, 0x401}, 0x6a, 0x3a1}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a6d42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m13.21361369s ago: executing program 6 (id=790): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 5m11.794903819s ago: executing program 6 (id=792): syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r1) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed, 0x5) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) 5m11.06850536s ago: executing program 6 (id=793): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) read$dsp(r2, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r1, &(0x7f0000002200)="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", 0xfe0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) 5m6.311295285s ago: executing program 6 (id=801): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 5m4.707068009s ago: executing program 6 (id=805): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e4, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3011, 0x0, 0x0, 0x80, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f00000002c0)={0x30003, 0x0, {[0x8000000000000000, 0x5, 0x3, 0x65, 0x80000000, 0x8, 0x0, 0x8]}}) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000440)) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x6, 0x400, 0x0, 0xfa, 0x4, 0x4, 0x7f, 0x7, 0x6, 0x1, 0x0, 0x4, 0x101}, {0x0, 0x6, 0xe, 0x6a, 0x9, 0x23, 0x9, 0x7f, 0xfb, 0x1, 0x81, 0x5, 0xfffffffffffffffa}, {0xfff, 0x7fff, 0x7, 0x0, 0x0, 0x7, 0x5, 0xa, 0x24, 0x7, 0x3, 0x1, 0x10001}]}) 4m49.061415682s ago: executing program 37 (id=805): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e4, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3011, 0x0, 0x0, 0x80, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f00000002c0)={0x30003, 0x0, {[0x8000000000000000, 0x5, 0x3, 0x65, 0x80000000, 0x8, 0x0, 0x8]}}) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000440)) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x6, 0x400, 0x0, 0xfa, 0x4, 0x4, 0x7f, 0x7, 0x6, 0x1, 0x0, 0x4, 0x101}, {0x0, 0x6, 0xe, 0x6a, 0x9, 0x23, 0x9, 0x7f, 0xfb, 0x1, 0x81, 0x5, 0xfffffffffffffffa}, {0xfff, 0x7fff, 0x7, 0x0, 0x0, 0x7, 0x5, 0xa, 0x24, 0x7, 0x3, 0x1, 0x10001}]}) 1m47.65101909s ago: executing program 7 (id=1231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x36a3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xfefffffd}) msgget$private(0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1m42.988160168s ago: executing program 7 (id=1241): r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001400)=""/18, 0x12) 1m41.904381739s ago: executing program 7 (id=1244): unshare(0x20000400) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m40.990157623s ago: executing program 7 (id=1246): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x7}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r2, 0x0, 0x4, 0x3, &(0x7f0000000a80)="e39ce6", 0x1}) 1m39.170646457s ago: executing program 7 (id=1250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 1m37.349711622s ago: executing program 7 (id=1256): socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x9) socket(0x10, 0x803, 0x0) socket(0x2, 0x3, 0xff) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'veth0_to_team\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20008041) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30", 0x6d, 0xfffffffffffffffb) keyctl$revoke(0x3, r6) 1m21.895068518s ago: executing program 38 (id=1256): socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x9) socket(0x10, 0x803, 0x0) socket(0x2, 0x3, 0xff) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'veth0_to_team\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20008041) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30", 0x6d, 0xfffffffffffffffb) keyctl$revoke(0x3, r6) 41.685521606s ago: executing program 0 (id=1357): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 40.351790006s ago: executing program 0 (id=1361): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 29.419842772s ago: executing program 0 (id=1384): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20f) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000dc0)={0x0, 0xfffffffffffffffa, 0x1, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 27.161745295s ago: executing program 0 (id=1391): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000080)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r2, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 20.756899921s ago: executing program 9 (id=1409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, &(0x7f0000000140)=""/21, 0x15) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000101040000000400000000000000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001000000000008000740000000000c"], 0xa0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(0x0, 0x7, 0x220042) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000a40)=ANY=[@ANYBLOB='stack :'], 0xe4) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)={0x20, 0x42, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x800000000006, 0x20001) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 16.856127048s ago: executing program 4 (id=1418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000180)={0x6, @capture={0x1000, 0x1, {0x1, 0x401}, 0x6a, 0x3a1}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a6d42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.745161147s ago: executing program 4 (id=1420): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa4, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6000, 0x390, 0x420, 0x98, 0x130, 0x130, 0x508, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0xff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x5e, 0x6, 0x1e}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffff00, 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x67, 0x1, 0x49}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_bridge\x00', 'pim6reg\x00', {}, {}, 0x5e, 0x0, 0x65}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xa8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 15.106334461s ago: executing program 4 (id=1422): socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 14.095048575s ago: executing program 4 (id=1424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.860897281s ago: executing program 4 (id=1427): socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x101080) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/stat\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd_index=0x8, 0x8000000004, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x18, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) socket$inet(0x2, 0x1, 0x100) r3 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0x4b8a, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2, 0x3}, r6}}, 0x48) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980001, 0x8000, '\x00', @ptr=0x8}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x5}, {0xa, 0x4e20, 0x4, @mcast1, 0x9}, r6, 0x1}}, 0x48) 11.370830326s ago: executing program 39 (id=1391): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000080)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r2, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 11.289249892s ago: executing program 2 (id=1430): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6000, 0x390, 0x420, 0x98, 0x130, 0x130, 0x508, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0xff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x5e, 0x6, 0x1e}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffff00, 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x67, 0x1, 0x49}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_bridge\x00', 'pim6reg\x00', {}, {}, 0x5e, 0x0, 0x65}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xa8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) close_range(r0, 0xffffffffffffffff, 0x0) 10.301359255s ago: executing program 2 (id=1432): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa4, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6000, 0x390, 0x420, 0x98, 0x130, 0x130, 0x508, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0xff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x5e, 0x6, 0x1e}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffff00, 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x67, 0x1, 0x49}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_bridge\x00', 'pim6reg\x00', {}, {}, 0x5e, 0x0, 0x65}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xa8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 9.783565887s ago: executing program 8 (id=1433): sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="05182ca2d94a7e198c46", 0xa, 0x8000, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000c7b000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.588708866s ago: executing program 9 (id=1434): socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 9.173604439s ago: executing program 2 (id=1435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000040), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) 7.162002323s ago: executing program 9 (id=1436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x5, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.612668421s ago: executing program 2 (id=1437): syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffff00401e04"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.367877996s ago: executing program 8 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20f) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000dc0)={0x0, 0xfffffffffffffffa, 0x1, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 5.913722134s ago: executing program 9 (id=1439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller1\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r6, 0x0, r7, 0x0, 0x26, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = fanotify_init(0x200, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa2e86dd6100272400383afffc020000000000000000000000000001ff1200000000000000000000000000010200907800000500663a794500023a00fc020000000000000000000000000001fe80000000000000000000000000003d80293352875364180f35f328820c59e7f58270b7a0810000"], 0x0) fanotify_mark(r10, 0x1, 0x12, r9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5.013909736s ago: executing program 8 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 4.224383917s ago: executing program 9 (id=1441): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6000, 0x390, 0x420, 0x98, 0x130, 0x130, 0x508, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0xff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x5e, 0x6, 0x1e}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffff00, 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x67, 0x1, 0x49}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_bridge\x00', 'pim6reg\x00', {}, {}, 0x5e, 0x0, 0x65}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xa8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) close_range(r0, 0xffffffffffffffff, 0x0) 4.068732863s ago: executing program 8 (id=1442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000440)=ANY=[], 0xfce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x1c2c, 0x10100, 0x0, 0x1d7, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x3ded, 0x4ac1, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 3.334404358s ago: executing program 9 (id=1443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0x80fd, 0x1000, 0x1, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 3.087854769s ago: executing program 2 (id=1444): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 1.967978256s ago: executing program 2 (id=1446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000040), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) 73.698758ms ago: executing program 8 (id=1447): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x6, 0x9}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001680)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) 0s ago: executing program 4 (id=1448): socket(0x2, 0x80805, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000002c0)='\\', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r0 = syz_io_uring_setup(0x54d, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): p5: unable to read partition table [ 726.012618][ T9403] loop5: partition table beyond EOD, truncated [ 726.019611][ T9403] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 726.118483][ T9408] loop2: detected capacity change from 0 to 7 [ 726.173527][ T9408] Dev loop2: unable to read RDB block 7 [ 726.180223][ T9408] loop2: AHDI p2 [ 726.184387][ T9408] loop2: partition table partially beyond EOD, truncated [ 726.481924][ T55] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.598511][ T9412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.796126][ T55] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.137337][ T9417] overlayfs: missing 'lowerdir' [ 727.484516][ T55] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.790857][ T51] Bluetooth: hci5: command tx timeout [ 727.898912][ T55] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.964607][ T9423] loop4: detected capacity change from 0 to 2560 [ 727.984064][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.840'. [ 728.039377][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 728.091536][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 728.190258][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.196985][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.396539][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.908474][ T51] Bluetooth: hci5: command tx timeout [ 730.516535][ T9386] chnl_net:caif_netlink_parms(): no params data found [ 730.676631][ T55] bridge_slave_1: left allmulticast mode [ 730.682473][ T55] bridge_slave_1: left promiscuous mode [ 730.689110][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.778595][ T55] bridge_slave_0: left allmulticast mode [ 730.784542][ T55] bridge_slave_0: left promiscuous mode [ 730.791227][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.703136][ T9446] loop2: detected capacity change from 0 to 40427 [ 731.723554][ T9446] F2FS-fs (loop2): invalid crc value [ 731.730077][ T9452] fuse: Unknown parameter '0x0000000000000005' [ 732.068892][ T9446] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 732.096300][ T9446] F2FS-fs (loop2): Start checkpoint disabled! [ 732.110163][ T9446] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 732.119191][ T9446] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 732.280425][ T6011] kworker/u8:12: attempt to access beyond end of device [ 732.280425][ T6011] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 732.295037][ T6011] CPU: 0 UID: 0 PID: 6011 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 732.295205][ T6011] Tainted: [L]=SOFTLOCKUP [ 732.295256][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 732.295360][ T6011] Workqueue: writeback wb_workfn (flush-7:2) [ 732.295546][ T6011] Call Trace: [ 732.295592][ T6011] [ 732.295642][ T6011] __dump_stack+0x26/0x30 [ 732.295792][ T6011] dump_stack_lvl+0x14c/0x1c0 [ 732.295944][ T6011] dump_stack+0x1e/0x25 [ 732.296084][ T6011] f2fs_handle_critical_error+0xa6f/0xc20 [ 732.296308][ T6011] f2fs_stop_checkpoint+0x65/0x80 [ 732.296449][ T6011] f2fs_write_end_io+0x101c/0x1bb0 [ 732.296629][ T6011] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 732.296765][ T6011] bio_endio+0xf92/0x10e0 [ 732.296919][ T6011] submit_bio_noacct+0x200a/0x2930 [ 732.297121][ T6011] submit_bio+0x57a/0x620 [ 732.297268][ T6011] f2fs_submit_write_bio+0x92/0x250 [ 732.297452][ T6011] __submit_merged_bio+0x16f/0x6a0 [ 732.297625][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.297827][ T6011] __submit_merged_write_cond+0x44a/0x990 [ 732.298022][ T6011] f2fs_write_data_pages+0x4d18/0x57a0 [ 732.298295][ T6011] ? f2fs_balance_fs_bg+0x11ee/0x1250 [ 732.298468][ T6011] ? stack_depot_save_flags+0x35/0x790 [ 732.298628][ T6011] ? kmsan_get_metadata+0xf1/0x160 [ 732.298810][ T6011] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 732.298982][ T6011] ? kmsan_get_metadata+0xf1/0x160 [ 732.299161][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.299355][ T6011] ? kmsan_get_metadata+0xf1/0x160 [ 732.299540][ T6011] ? kmsan_get_metadata+0xf1/0x160 [ 732.299722][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.299905][ T6011] ? kmsan_get_metadata+0xf1/0x160 [ 732.300085][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.300269][ T6011] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 732.300404][ T6011] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 732.300536][ T6011] do_writepages+0x3f2/0x860 [ 732.300668][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.300861][ T6011] ? queue_io+0x771/0x790 [ 732.301003][ T6011] ? kmsan_get_metadata+0xf1/0x160 [ 732.301203][ T6011] __writeback_single_inode+0x101/0x1180 [ 732.301373][ T6011] ? kmsan_get_metadata+0xf1/0x160 [ 732.301573][ T6011] writeback_sb_inodes+0xb2d/0x1f10 [ 732.301827][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.302039][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.302234][ T6011] wb_writeback+0x4d0/0xc00 [ 732.302420][ T6011] ? queue_io+0x471/0x790 [ 732.302573][ T6011] wb_workfn+0x397/0x1910 [ 732.302699][ T6011] ? kmsan_get_metadata+0xf1/0x160 [ 732.302890][ T6011] ? __pfx_wb_workfn+0x10/0x10 [ 732.303018][ T6011] process_scheduled_works+0xb03/0x1da0 [ 732.303203][ T6011] worker_thread+0xede/0x1590 [ 732.303377][ T6011] kthread+0xd5a/0xf00 [ 732.303520][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 732.303677][ T6011] ? __pfx_kthread+0x10/0x10 [ 732.303811][ T6011] ret_from_fork+0x207/0x6f0 [ 732.303928][ T6011] ? __switch_to+0x521/0x750 [ 732.304089][ T6011] ? __pfx_kthread+0x10/0x10 [ 732.304236][ T6011] ret_from_fork_asm+0x1a/0x30 [ 732.304425][ T6011] [ 732.613653][ T6011] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 733.588800][ T8965] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 733.846360][ T8965] usb 9-1: config 0 has no interfaces? [ 733.852140][ T8965] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 733.861828][ T8965] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.111221][ T8965] usb 9-1: config 0 descriptor?? [ 734.375554][ T8965] usb 9-1: USB disconnect, device number 3 [ 734.731368][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.784457][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.834946][ T55] bond0 (unregistering): Released all slaves [ 734.949108][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.9.852'. [ 736.834938][ T9485] loop4: detected capacity change from 0 to 2560 [ 737.075646][ T5838] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 737.169599][ T6113] Buffer I/O error on dev loop4, logical block 0, async page read [ 737.324643][ T6113] Buffer I/O error on dev loop4, logical block 0, async page read [ 737.375502][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 737.399850][ T55] hsr_slave_0: left promiscuous mode [ 737.432164][ T5838] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.436417][ T6113] Buffer I/O error on dev loop4, logical block 0, async page read [ 737.443495][ T5838] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.485524][ T55] hsr_slave_1: left promiscuous mode [ 737.507167][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.515979][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.564367][ T6113] Buffer I/O error on dev loop4, logical block 0, async page read [ 737.591433][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.599365][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.604914][ T5838] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 737.616794][ T5838] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 737.625437][ T5838] usb 3-1: Product: syz [ 737.629785][ T5838] usb 3-1: Manufacturer: syz [ 737.664246][ T9491] loop5: detected capacity change from 0 to 7 [ 737.664934][ T6113] Buffer I/O error on dev loop4, logical block 0, async page read [ 737.766263][ T9491] Dev loop5: unable to read RDB block 7 [ 737.772298][ T9491] loop5: unable to read partition table [ 737.782084][ T55] veth1_macvtap: left promiscuous mode [ 737.799997][ T5838] hub 3-1:4.0: USB hub found [ 737.817138][ T55] veth0_macvtap: left promiscuous mode [ 737.823015][ T55] veth1_vlan: left promiscuous mode [ 737.867338][ T9491] loop5: partition table beyond EOD, truncated [ 737.874095][ T9491] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 738.603475][ T9502] fuse: Unknown parameter '0x0000000000000005' [ 741.055843][ T7891] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 741.264319][ T7891] usb 10-1: config 0 has no interfaces? [ 741.270809][ T7891] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 741.280663][ T7891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.308109][ T55] team0 (unregistering): Port device team_slave_1 removed [ 741.362445][ T7891] usb 10-1: config 0 descriptor?? [ 741.474070][ T55] team0 (unregistering): Port device team_slave_0 removed [ 741.543864][ T9528] netlink: 'syz.7.865': attribute type 21 has an invalid length. [ 741.553564][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.865'. [ 741.689634][ T7770] usb 10-1: USB disconnect, device number 2 [ 742.186934][ T9528] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 742.524254][ T5838] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 742.675361][ T5838] usb 3-1: USB disconnect, device number 15 [ 743.042886][ T9386] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.050540][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.893699][ T9540] loop4: detected capacity change from 0 to 2560 [ 744.009034][ T9386] bridge_slave_0: entered allmulticast mode [ 744.018457][ T9386] bridge_slave_0: entered promiscuous mode [ 744.038791][ T9386] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.047199][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.118967][ T6116] Buffer I/O error on dev loop4, logical block 0, async page read [ 744.303337][ T6116] Buffer I/O error on dev loop4, logical block 0, async page read [ 744.376441][ T6116] Buffer I/O error on dev loop4, logical block 0, async page read [ 744.427357][ T6116] Buffer I/O error on dev loop4, logical block 0, async page read [ 744.550702][ T6116] Buffer I/O error on dev loop4, logical block 0, async page read [ 744.917243][ T9546] loop5: detected capacity change from 0 to 7 [ 744.970959][ T9546] Dev loop5: unable to read RDB block 7 [ 744.977383][ T9546] loop5: unable to read partition table [ 745.010058][ T9386] bridge_slave_1: entered allmulticast mode [ 745.019347][ T9386] bridge_slave_1: entered promiscuous mode [ 745.107929][ T9546] loop5: partition table beyond EOD, truncated [ 745.114584][ T9546] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 745.476146][ T9554] fuse: Unknown parameter '0x0000000000000005' [ 745.486252][ T31] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 745.666367][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 745.705893][ T31] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 745.714415][ T31] usb 10-1: config 0 has no interface number 0 [ 745.817900][ T31] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 745.827398][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.829601][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.836053][ T31] usb 10-1: Product: syz [ 745.845299][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.847241][ T31] usb 10-1: Manufacturer: syz [ 745.859137][ T31] usb 10-1: SerialNumber: syz [ 745.877174][ T9560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.130770][ T31] usb 10-1: config 0 descriptor?? [ 746.252612][ T31] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 746.263432][ T31] usb 10-1: selecting invalid altsetting 1 [ 746.269667][ T31] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 746.367550][ T31] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 746.405067][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 746.414936][ T31] usb 10-1: media controller created [ 746.471056][ T9566] netlink: 'syz.8.875': attribute type 21 has an invalid length. [ 746.482778][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.8.875'. [ 746.817713][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 747.189831][ T9547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.291276][ T9547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.539386][ T9548] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 747.576612][ T31] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 747.584064][ T31] zl10353_read_register: readreg error (reg=127, ret==-32) [ 747.916060][ T5840] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 748.123095][ T5840] usb 3-1: config 0 has no interfaces? [ 748.129096][ T5840] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 748.138627][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.193711][ T5840] usb 3-1: config 0 descriptor?? [ 748.441203][ T5840] usb 3-1: USB disconnect, device number 16 [ 749.660605][ T9386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.680838][ T9566] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 749.774827][ T9386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.849070][ T13] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.924419][ T31] usb 10-1: USB disconnect, device number 3 [ 750.110088][ T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.278771][ T13] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.290240][ T9593] loop4: detected capacity change from 0 to 2560 [ 750.357215][ T9386] team0: Port device team_slave_0 added [ 750.376147][ T13] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.422765][ T9386] team0: Port device team_slave_1 added [ 750.535294][ T9595] loop5: detected capacity change from 0 to 7 [ 750.606857][ T9595] Dev loop5: unable to read RDB block 7 [ 750.613168][ T9595] loop5: unable to read partition table [ 750.704125][ T9595] loop5: partition table beyond EOD, truncated [ 750.710811][ T9595] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 750.877281][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.886315][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.913789][ T9386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.948826][ T9601] fuse: Unknown parameter '0x0000000000000005' [ 751.060739][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 751.107900][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.115029][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.134111][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 751.145876][ T9386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.288500][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 751.336473][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 751.370120][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 751.561983][ T9607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 751.981655][ T9386] hsr_slave_0: entered promiscuous mode [ 752.051361][ T9386] hsr_slave_1: entered promiscuous mode [ 752.978048][ T7891] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 753.189979][ T7891] usb 8-1: config 0 has no interfaces? [ 753.197260][ T7891] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 753.206871][ T7891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.253433][ T7891] usb 8-1: config 0 descriptor?? [ 753.509686][ T9603] usb 8-1: USB disconnect, device number 10 [ 753.816120][ T7891] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 753.918164][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.926718][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.995505][ T7891] usb 3-1: Using ep0 maxpacket: 32 [ 754.049201][ T7891] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 754.060591][ T7891] usb 3-1: config 0 has no interface number 0 [ 754.120781][ T9643] loop5: detected capacity change from 0 to 7 [ 754.123595][ T7891] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 754.139487][ T7891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.147783][ T7891] usb 3-1: Product: syz [ 754.152130][ T7891] usb 3-1: Manufacturer: syz [ 754.160243][ T7891] usb 3-1: SerialNumber: syz [ 754.182724][ T9643] Dev loop5: unable to read RDB block 7 [ 754.188856][ T9643] loop5: unable to read partition table [ 754.232588][ T7891] usb 3-1: config 0 descriptor?? [ 754.250006][ T9643] loop5: partition table beyond EOD, truncated [ 754.256857][ T9643] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 754.324518][ T7891] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 754.333723][ T7891] usb 3-1: selecting invalid altsetting 1 [ 754.339899][ T7891] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 754.489080][ T7891] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 754.546328][ T7891] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 754.554817][ T7891] usb 3-1: media controller created [ 754.892094][ T7891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.029478][ T9634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.137709][ T9634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.369770][ T9651] loop4: detected capacity change from 0 to 2560 [ 755.474621][ T9634] veth0_vlan: left allmulticast mode [ 755.544972][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.600769][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.640805][ T9654] fuse: Unknown parameter '0x0000000000000005' [ 755.655072][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.665087][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.696753][ T9636] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 755.714778][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.733813][ T7891] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 755.742478][ T7891] zl10353_read_register: readreg error (reg=127, ret==-32) [ 756.306508][ T143] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.399353][ T6081] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.546034][ T4280] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.701787][ T4280] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.567708][ T5840] usb 3-1: USB disconnect, device number 17 [ 757.689084][ T9678] loop5: detected capacity change from 0 to 7 [ 757.728939][ T9386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 757.756759][ T9678] Dev loop5: unable to read RDB block 7 [ 757.762635][ T9678] loop5: unable to read partition table [ 757.776424][ T7891] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 757.833045][ T9386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 757.862525][ T9678] loop5: partition table beyond EOD, truncated [ 757.869204][ T9678] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 757.985288][ T7891] usb 10-1: config 0 has no interfaces? [ 757.986936][ T9386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 757.991191][ T7891] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 758.007631][ T7891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.107035][ T9386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 758.139289][ T7891] usb 10-1: config 0 descriptor?? [ 758.397580][ T7919] usb 10-1: USB disconnect, device number 4 [ 758.588685][ T9689] fuse: Unknown parameter '0x0000000000000005' [ 759.017063][ T30] audit: type=1326 audit(2000000518.389:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff77193c0d9 code=0x7ffc0000 [ 759.155621][ T30] audit: type=1326 audit(2000000518.449:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff77193c0d9 code=0x7ffc0000 [ 759.180048][ T30] audit: type=1326 audit(2000000518.449:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff77193c0d9 code=0x7ffc0000 [ 759.203332][ T30] audit: type=1326 audit(2000000518.459:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff77193c0d9 code=0x7ffc0000 [ 759.225834][ T30] audit: type=1326 audit(2000000518.459:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77199acb9 code=0x7ffc0000 [ 759.248415][ T30] audit: type=1326 audit(2000000518.459:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77199acb9 code=0x7ffc0000 [ 759.271173][ T30] audit: type=1326 audit(2000000518.459:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff77193c0d9 code=0x7ffc0000 [ 759.294601][ T30] audit: type=1326 audit(2000000518.459:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff77193c0d9 code=0x7ffc0000 [ 759.317492][ T30] audit: type=1326 audit(2000000518.459:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff77193c0d9 code=0x7ffc0000 [ 759.339955][ T30] audit: type=1326 audit(2000000518.459:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77199acb9 code=0x7ffc0000 [ 759.613436][ T9693] loop4: detected capacity change from 0 to 2560 [ 759.781405][ T9386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.828823][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 759.868059][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 759.910293][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 759.930595][ T9386] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.948650][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 760.040704][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 760.107800][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.115468][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.270212][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.277655][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.395727][ T5840] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 761.590816][ T5840] usb 9-1: Using ep0 maxpacket: 32 [ 761.616594][ T5840] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.652117][ T5840] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.703948][ T5840] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 761.715842][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 761.724224][ T5840] usb 9-1: Product: syz [ 761.728734][ T5840] usb 9-1: Manufacturer: syz [ 761.733495][ T5840] usb 9-1: SerialNumber: syz [ 761.886194][ T5840] usb 9-1: config 0 descriptor?? [ 762.143502][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 762.147532][ T7891] usb 9-1: USB disconnect, device number 4 [ 762.524891][ T9386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.234483][ T9736] loop5: detected capacity change from 0 to 7 [ 763.274972][ T9736] Dev loop5: unable to read RDB block 7 [ 763.281476][ T9736] loop5: unable to read partition table [ 763.337721][ T9736] loop5: partition table beyond EOD, truncated [ 763.344297][ T9736] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 763.376649][ T9603] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 763.575488][ T9603] usb 3-1: Using ep0 maxpacket: 32 [ 763.619244][ T9603] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 763.627774][ T9603] usb 3-1: config 0 has no interface number 0 [ 763.707967][ T9603] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 763.717533][ T9603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.726655][ T9603] usb 3-1: Product: syz [ 763.730991][ T9603] usb 3-1: Manufacturer: syz [ 763.736586][ T9603] usb 3-1: SerialNumber: syz [ 763.853621][ T9603] usb 3-1: config 0 descriptor?? [ 763.941644][ T9603] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 763.950910][ T9603] usb 3-1: selecting invalid altsetting 1 [ 763.957045][ T9603] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 763.993736][ T9748] fuse: Unknown parameter 'fd0x0000000000000005' [ 764.039448][ T9603] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 764.075430][ T9603] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 764.083938][ T9603] usb 3-1: media controller created [ 764.231048][ T9603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 765.010034][ T9755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.116240][ T5840] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 765.218059][ T9730] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 765.246628][ T9603] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 765.254142][ T9603] zl10353_read_register: readreg error (reg=127, ret==-32) [ 765.270686][ T9386] veth0_vlan: entered promiscuous mode [ 765.349921][ T5840] usb 9-1: config 0 has no interfaces? [ 765.355813][ T5840] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 765.365673][ T5840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.429012][ T9386] veth1_vlan: entered promiscuous mode [ 765.460511][ T5840] usb 9-1: config 0 descriptor?? [ 765.708418][ T7770] usb 9-1: USB disconnect, device number 5 [ 765.921189][ T9386] veth0_macvtap: entered promiscuous mode [ 765.972776][ T9386] veth1_macvtap: entered promiscuous mode [ 766.132425][ T9386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.208324][ T9386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.298413][ T6081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.346140][ T6081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.409107][ T6081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.463483][ T6081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.706573][ T9603] usb 3-1: USB disconnect, device number 18 [ 766.932953][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.8.924'. [ 767.626147][ T7919] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 767.704795][ T9788] loop5: detected capacity change from 0 to 7 [ 767.742538][ T9788] Dev loop5: unable to read RDB block 7 [ 767.748814][ T9788] loop5: unable to read partition table [ 767.790058][ T9788] loop5: partition table beyond EOD, truncated [ 767.799669][ T9788] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 767.835437][ T7919] usb 3-1: Using ep0 maxpacket: 32 [ 767.855744][ T7919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.893884][ T7919] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.964340][ T7919] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 767.974014][ T7919] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 767.984059][ T7919] usb 3-1: Product: syz [ 767.989197][ T7919] usb 3-1: Manufacturer: syz [ 767.993981][ T7919] usb 3-1: SerialNumber: syz [ 768.121948][ T7919] usb 3-1: config 0 descriptor?? [ 768.403476][ T5840] usb 3-1: USB disconnect, device number 19 [ 768.503071][ T9795] fuse: Unknown parameter 'fd0x0000000000000005' [ 769.727619][ T5840] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 769.941920][ T5840] usb 3-1: config 0 has no interfaces? [ 769.947754][ T5840] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 769.958129][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.023571][ T5840] usb 3-1: config 0 descriptor?? [ 770.269952][ T9603] usb 3-1: USB disconnect, device number 20 [ 770.355999][ T5840] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 770.416809][ T9814] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.424714][ T9814] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.573828][ T5840] usb 8-1: Using ep0 maxpacket: 32 [ 770.637218][ T5840] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 770.647128][ T5840] usb 8-1: config 0 has no interface number 0 [ 770.704997][ T5840] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 770.714645][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.724413][ T5840] usb 8-1: Product: syz [ 770.728947][ T5840] usb 8-1: Manufacturer: syz [ 770.733643][ T5840] usb 8-1: SerialNumber: syz [ 770.809544][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.936'. [ 770.822462][ T5840] usb 8-1: config 0 descriptor?? [ 770.884772][ T5840] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 770.896517][ T5840] usb 8-1: selecting invalid altsetting 1 [ 770.902437][ T5840] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 770.984145][ T9814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.002716][ T5840] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 771.044016][ T5840] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 771.073092][ T9814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.091825][ T5840] usb 8-1: media controller created [ 771.328394][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.669389][ T9814] veth0_vlan: left allmulticast mode [ 772.309638][ T9816] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 772.408044][ T5840] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 772.415754][ T5840] zl10353_read_register: readreg error (reg=127, ret==-32) [ 773.217612][ T9282] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.265380][ T9282] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.330231][ T9282] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.387624][ T9282] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.723135][ T9843] fuse: Unknown parameter 'fd0x0000000000000005' [ 774.272711][ T5840] usb 8-1: USB disconnect, device number 11 [ 776.389527][ T30] kauditd_printk_skb: 196 callbacks suppressed [ 776.389598][ T30] audit: type=1326 audit(2000000535.749:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 776.495754][ T9282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.503776][ T9282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.565694][ T30] audit: type=1326 audit(2000000535.809:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 776.588830][ T30] audit: type=1326 audit(2000000535.809:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 776.611578][ T30] audit: type=1326 audit(2000000535.809:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 776.634247][ T30] audit: type=1326 audit(2000000535.809:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 776.656730][ T30] audit: type=1326 audit(2000000535.809:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 776.679124][ T30] audit: type=1326 audit(2000000535.809:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 776.701714][ T30] audit: type=1326 audit(2000000535.809:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 776.724303][ T30] audit: type=1326 audit(2000000535.829:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 776.746728][ T30] audit: type=1326 audit(2000000535.829:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.8.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d37b3c0d9 code=0x7ffc0000 [ 777.073557][ T9282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.081655][ T9282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.488233][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.494977][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.980921][ T9880] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 778.017376][ T5840] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 778.226753][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.8.947'. [ 778.265777][ T5840] usb 10-1: config 0 has no interfaces? [ 778.272105][ T5840] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 778.281594][ T5840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.308079][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.948'. [ 778.352860][ T5840] usb 10-1: config 0 descriptor?? [ 778.494665][ T9883] vlan2: entered promiscuous mode [ 778.500208][ T9883] batadv0: entered promiscuous mode [ 778.589303][ T5840] usb 10-1: USB disconnect, device number 5 [ 779.755606][ T5840] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 779.945930][ T5840] usb 8-1: Using ep0 maxpacket: 32 [ 779.977151][ T5840] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 779.985514][ T5840] usb 8-1: config 0 has no interface number 0 [ 780.040296][ T5840] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 780.050295][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.058910][ T5840] usb 8-1: Product: syz [ 780.063251][ T5840] usb 8-1: Manufacturer: syz [ 780.069309][ T5840] usb 8-1: SerialNumber: syz [ 780.076406][ T9917] loop2: detected capacity change from 0 to 7 [ 780.105309][ T9917] Dev loop2: unable to read RDB block 7 [ 780.111492][ T9917] loop2: unable to read partition table [ 780.141440][ T9917] loop2: partition table beyond EOD, truncated [ 780.148274][ T9917] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 780.163866][ T5840] usb 8-1: config 0 descriptor?? [ 780.201735][ T5840] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 780.211502][ T5840] usb 8-1: selecting invalid altsetting 1 [ 780.217950][ T5840] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 780.352585][ T5840] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 780.364775][ T5840] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 780.374374][ T5840] usb 8-1: media controller created [ 780.432922][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 781.456112][ T9900] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 781.497086][ T5840] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 781.504445][ T5840] zl10353_read_register: readreg error (reg=127, ret==-32) [ 781.742069][ T5840] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 782.000722][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.9.961'. [ 782.516127][ T7770] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 782.592539][ T5840] usb 8-1: USB disconnect, device number 12 [ 782.738826][ T7770] usb 5-1: Using ep0 maxpacket: 16 [ 782.779049][ T7770] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.789682][ T7770] usb 5-1: config 0 has no interfaces? [ 782.795578][ T7770] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 782.804796][ T7770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.978109][ T7770] usb 5-1: config 0 descriptor?? [ 783.321609][ T7891] usb 5-1: USB disconnect, device number 2 [ 783.376156][ T5840] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 783.602251][ T5840] usb 10-1: config 0 has no interfaces? [ 783.608390][ T5840] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 783.618097][ T5840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.659960][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.966'. [ 783.754896][ T5840] usb 10-1: config 0 descriptor?? [ 784.019677][ T5840] usb 10-1: USB disconnect, device number 6 [ 784.655766][ T6472] Bluetooth: hci4: command 0x0406 tx timeout [ 785.898171][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.7.973'. [ 787.462061][ T7770] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 787.466300][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.479318][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.721060][ T7770] usb 5-1: Using ep0 maxpacket: 32 [ 787.765811][ T7770] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 787.774242][ T7770] usb 5-1: config 0 has no interface number 0 [ 787.836910][ T9998] netlink: 16 bytes leftover after parsing attributes in process `syz.9.978'. [ 787.857451][ T7770] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 787.867186][ T7770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.875716][ T7770] usb 5-1: Product: syz [ 787.880037][ T7770] usb 5-1: Manufacturer: syz [ 787.884713][ T7770] usb 5-1: SerialNumber: syz [ 788.036089][ T7770] usb 5-1: config 0 descriptor?? [ 788.103230][ T7770] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 788.112609][ T7770] usb 5-1: selecting invalid altsetting 1 [ 788.118831][ T7770] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 788.163076][ T7770] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 788.177214][ T7770] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 788.201141][ T7770] usb 5-1: media controller created [ 788.546872][ T9988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.555022][ T7770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 788.720945][ T9988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.400592][ T9990] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 789.426500][ T7770] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 789.434021][ T7770] zl10353_read_register: readreg error (reg=127, ret==-32) [ 789.657840][ T5838] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 789.931298][ T5838] usb 10-1: config 0 has no interfaces? [ 789.938600][ T5838] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 789.949113][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.037554][ T5838] usb 10-1: config 0 descriptor?? [ 790.278114][ T7891] usb 10-1: USB disconnect, device number 7 [ 790.287472][T10002] syzkaller0: entered promiscuous mode [ 790.293130][T10002] syzkaller0: entered allmulticast mode [ 790.340551][ T7770] usb 5-1: USB disconnect, device number 3 [ 790.342386][ T6019] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.499440][ T6019] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.539214][ T6019] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.570844][ T6019] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.576776][ T7770] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 791.656478][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 791.766098][ T7770] usb 10-1: Using ep0 maxpacket: 16 [ 791.806048][ T7770] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 791.889056][ T7770] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 791.899006][ T7770] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.907676][ T7770] usb 10-1: Product: syz [ 791.912084][ T7770] usb 10-1: Manufacturer: syz [ 791.917077][ T7770] usb 10-1: SerialNumber: syz [ 792.027365][ T7770] usb 10-1: config 0 descriptor?? [ 792.109767][ T7770] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 792.129600][ T7770] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 792.567495][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.990'. [ 792.652208][ T7770] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 793.155604][ T7770] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 793.163958][ T7770] em28xx 10-1:0.0: board has no eeprom [ 793.478794][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.993'. [ 793.518197][T10048] 8021q: VLANs not supported on gre0 [ 794.341819][T10023] em28xx 10-1:0.0: writing to i2c device at 0xfe00 failed (error=-5) [ 794.395424][ T7770] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 794.406216][ T7770] em28xx 10-1:0.0: dvb set to bulk mode. [ 794.413336][ T8085] em28xx 10-1:0.0: Binding DVB extension [ 794.522484][ T7770] usb 10-1: USB disconnect, device number 8 [ 794.540691][T10054] netlink: 'syz.8.994': attribute type 21 has an invalid length. [ 794.549016][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.8.994'. [ 794.589382][ T7770] em28xx 10-1:0.0: Disconnecting em28xx [ 794.635964][T10054] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 794.888912][ T8085] em28xx 10-1:0.0: Registering input extension [ 794.938347][ T7770] em28xx 10-1:0.0: Closing input extension [ 795.077279][ T7770] em28xx 10-1:0.0: Freeing device [ 795.771824][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1002'. [ 796.520483][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 796.626641][T10090] 8021q: VLANs not supported on gre0 [ 797.566270][T10098] netlink: 'syz.4.1008': attribute type 21 has an invalid length. [ 797.574283][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 797.645697][T10098] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 799.828379][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1014'. [ 800.615484][ T7770] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 800.805485][ T7770] usb 9-1: Using ep0 maxpacket: 8 [ 800.836137][ T7770] usb 9-1: unable to get BOS descriptor or descriptor too short [ 800.890282][ T7770] usb 9-1: config 4 interface 0 has no altsetting 0 [ 800.936168][ T7770] usb 9-1: string descriptor 0 read error: -22 [ 800.952765][ T7770] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 800.964073][ T7770] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.158161][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1018'. [ 801.991581][ T7770] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 802.005881][ T7770] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 802.017817][ T7770] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 802.149153][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1016'. [ 802.664457][T10148] netlink: 'syz.2.1021': attribute type 21 has an invalid length. [ 802.673110][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 802.872285][T10148] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 802.873838][ T7770] usb 9-1: media controller created [ 803.036198][ T7770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.285720][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 803.285792][ T30] audit: type=1326 audit(2000000562.629:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e9d9acb9 code=0x7ffc0000 [ 803.316287][ T30] audit: type=1326 audit(2000000562.629:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e9d9acb9 code=0x7ffc0000 [ 803.447980][ T7770] zl10353_read_register: readreg error (reg=127, ret==0) [ 803.573760][ T30] audit: type=1326 audit(2000000562.719:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f57e9d9acb9 code=0x7ffc0000 [ 803.573992][ T30] audit: type=1326 audit(2000000562.729:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10150 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e9d9acb9 code=0x7ffc0000 [ 803.964585][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 804.066443][ T7770] usb 9-1: USB disconnect, device number 6 [ 804.910122][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1030'. [ 807.930829][T10197] netlink: 'syz.4.1034': attribute type 21 has an invalid length. [ 807.939203][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 808.076002][T10197] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 808.300444][T10180] syz.9.1029 (10180): drop_caches: 2 [ 808.770882][ T7891] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 808.991660][ T7891] usb 8-1: Using ep0 maxpacket: 8 [ 809.063815][ T7891] usb 8-1: unable to get BOS descriptor or descriptor too short [ 809.100832][ T7891] usb 8-1: config 4 interface 0 has no altsetting 0 [ 809.158725][ T7891] usb 8-1: string descriptor 0 read error: -22 [ 809.175960][ T7891] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 809.185683][ T7891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.357771][ T7891] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 809.450722][ T7891] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 809.549350][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1035'. [ 809.559067][ T7891] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 809.559195][ T7891] usb 8-1: media controller created [ 809.695821][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 809.778858][ T7891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.983711][ T7891] zl10353_read_register: readreg error (reg=127, ret==0) [ 810.879872][ T7891] usb 8-1: USB disconnect, device number 13 [ 812.086216][T10232] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (13312 ns). Using initial count to start timer. [ 813.816902][T10247] netlink: 'syz.9.1047': attribute type 21 has an invalid length. [ 813.825004][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1047'. [ 813.886019][T10247] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 815.865569][ T7770] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 816.065927][ T7770] usb 10-1: Using ep0 maxpacket: 8 [ 816.114596][ T7770] usb 10-1: unable to get BOS descriptor or descriptor too short [ 816.158337][ T7770] usb 10-1: config 4 interface 0 has no altsetting 0 [ 816.207975][ T7770] usb 10-1: string descriptor 0 read error: -22 [ 816.236733][ T7770] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 816.248810][ T7770] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.333023][ T7770] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 816.387107][ T7770] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 816.415283][ T7770] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 816.430719][ T7770] usb 10-1: media controller created [ 816.499594][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1051'. [ 816.651316][ T7770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 816.866745][ T7770] zl10353_read_register: readreg error (reg=127, ret==0) [ 817.033323][T10278] usb 10-1: dvb_usb_au6610: wlen=5, aborting [ 817.510903][ T7770] usb 10-1: USB disconnect, device number 9 [ 818.546058][T10296] netlink: 'syz.8.1060': attribute type 21 has an invalid length. [ 818.554268][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1060'. [ 818.606545][T10296] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 818.763426][ T7770] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 819.014462][T10286] syz.7.1057 (10286): drop_caches: 2 [ 819.094285][ T7770] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 819.105853][ T7770] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 819.117914][ T7770] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 819.129719][ T7770] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 819.141141][ T7770] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 819.382544][ T7770] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 819.393953][ T7770] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.403560][ T7770] usb 10-1: Product: syz [ 819.408018][ T7770] usb 10-1: Manufacturer: syz [ 819.412791][ T7770] usb 10-1: SerialNumber: syz [ 819.555882][ T7770] usb 10-1: config 0 descriptor?? [ 819.572804][T10298] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 819.672193][ T7770] input: KB Gear Tablet as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input30 [ 819.852919][ T7891] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 819.864745][ C1] kbtab 10-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 819.902163][ T7770] usb 10-1: USB disconnect, device number 10 [ 820.089207][ T7891] usb 9-1: Using ep0 maxpacket: 32 [ 820.136529][ T7891] usb 9-1: config 2 has an invalid interface number: 88 but max is 0 [ 820.145049][ T7891] usb 9-1: config 2 has no interface number 0 [ 820.172506][ T7891] usb 9-1: config 2 interface 88 has no altsetting 0 [ 820.235337][ T7891] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 820.244708][ T7891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.253129][ T7891] usb 9-1: Product: syz [ 820.257516][ T7891] usb 9-1: Manufacturer: syz [ 820.262301][ T7891] usb 9-1: SerialNumber: syz [ 820.682623][T10310] loop4: detected capacity change from 0 to 2560 [ 820.792694][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 820.846655][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 820.916407][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 820.988638][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 821.024094][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 821.339769][T10315] loop5: detected capacity change from 0 to 7 [ 821.445496][T10315] Dev loop5: unable to read RDB block 7 [ 821.451316][T10315] loop5: AHDI p1 p2 p3 [ 821.457554][T10315] loop5: partition table partially beyond EOD, truncated [ 821.618728][ T7891] asix 9-1:2.88: probe with driver asix failed with error -71 [ 821.634729][T10315] loop5: p1 start 1601398130 is beyond EOD, truncated [ 821.642145][T10315] loop5: p2 start 1702059890 is beyond EOD, truncated [ 821.706970][ T7891] usb 9-1: USB disconnect, device number 7 [ 822.296099][ T7770] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 822.479024][ T7770] usb 9-1: Using ep0 maxpacket: 8 [ 822.521528][ T7770] usb 9-1: unable to get BOS descriptor or descriptor too short [ 822.554457][ T7770] usb 9-1: config 4 interface 0 has no altsetting 0 [ 822.594863][ T7770] usb 9-1: string descriptor 0 read error: -22 [ 822.619765][ T7770] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 822.629344][ T7770] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.736297][ T7891] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 822.737185][ T7770] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 822.823697][ T7770] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 822.895747][ T7770] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 822.930242][ T7770] usb 9-1: media controller created [ 822.937550][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1069'. [ 822.992871][ T7891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.004438][ T7891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.014829][ T7891] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 823.024381][ T7891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.045845][T10322] veth0_vlan: entered allmulticast mode [ 823.183103][ T7891] usb 10-1: config 0 descriptor?? [ 823.237313][ T7770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.516764][ T7770] zl10353_read_register: readreg error (reg=127, ret==0) [ 823.737691][ T7891] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 823.822791][ T7891] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 824.017476][ T7891] cp2112 0003:10C4:EA90.0002: Part Number: 0x1A Device Version: 0xC4 [ 824.290039][T10338] netlink: 'syz.4.1072': attribute type 21 has an invalid length. [ 824.300481][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 824.303613][ T7770] usb 9-1: USB disconnect, device number 8 [ 824.415021][T10338] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 824.640548][ T7891] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 824.730191][ T7891] usb 10-1: USB disconnect, device number 11 [ 825.925773][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'. [ 826.608367][T10362] loop5: detected capacity change from 0 to 7 [ 826.621102][ T7781] Dev loop5: unable to read RDB block 7 [ 826.627208][ T7781] loop5: AHDI p1 p2 p3 [ 826.631657][ T7781] loop5: partition table partially beyond EOD, truncated [ 826.698074][ T7781] loop5: p1 start 1601398130 is beyond EOD, truncated [ 826.705096][ T7781] loop5: p2 start 1702059890 is beyond EOD, truncated [ 826.807216][T10362] Dev loop5: unable to read RDB block 7 [ 826.813051][T10362] loop5: AHDI p1 p2 p3 [ 826.817807][T10362] loop5: partition table partially beyond EOD, truncated [ 826.844814][T10362] loop5: p1 start 1601398130 is beyond EOD, truncated [ 826.852302][T10362] loop5: p2 start 1702059890 is beyond EOD, truncated [ 827.436398][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 827.615563][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 827.795044][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 827.876937][ T9] usb 8-1: config 4 interface 0 has no altsetting 0 [ 827.921049][ T9] usb 8-1: string descriptor 0 read error: -22 [ 827.928251][ T9] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 827.938404][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.086076][ T7770] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 828.259148][ T9] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 828.293079][ T9] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 828.326797][ T7770] usb 5-1: Using ep0 maxpacket: 32 [ 828.381678][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1083'. [ 828.428993][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 828.436701][ T9] usb 8-1: media controller created [ 828.478718][T10370] veth0_vlan: entered allmulticast mode [ 828.516974][ T7770] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 828.526119][ T7770] usb 5-1: config 0 has no interface number 0 [ 828.564462][ T7770] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 828.575382][ T7770] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 828.724132][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 828.805718][ T7891] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 828.919695][ T7770] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 828.929319][ T7770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.937672][ T7770] usb 5-1: Product: syz [ 828.941917][ T7770] usb 5-1: Manufacturer: syz [ 828.946799][ T7770] usb 5-1: SerialNumber: syz [ 829.041231][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 829.051953][ T7891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.063570][ T7891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.073838][ T7891] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 829.083292][ T7891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.172148][ T7770] usb 5-1: config 0 descriptor?? [ 829.243505][ T7770] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 829.260579][ T7891] usb 3-1: config 0 descriptor?? [ 829.486617][ T7770] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 829.536397][ T7770] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 829.790387][ T7891] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 829.843905][ T9] usb 8-1: USB disconnect, device number 14 [ 829.918923][ T7891] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 830.036747][ T7891] cp2112 0003:10C4:EA90.0003: Part Number: 0x1A Device Version: 0xC4 [ 830.650463][ T7891] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 830.717170][ T7891] usb 3-1: USB disconnect, device number 21 [ 830.881838][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1090'. [ 831.028299][T10395] fido_id[10395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 833.179267][T10415] syz.2.1093 (10415): drop_caches: 2 [ 833.490548][T10420] loop5: detected capacity change from 0 to 7 [ 833.540301][T10420] Dev loop5: unable to read RDB block 7 [ 833.546217][T10420] loop5: AHDI p1 p2 p3 [ 833.550482][T10420] loop5: partition table partially beyond EOD, truncated [ 833.650240][T10420] loop5: p1 start 1601398130 is beyond EOD, truncated [ 833.657524][T10420] loop5: p2 start 1702059890 is beyond EOD, truncated [ 838.466970][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1102'. [ 838.919911][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.926752][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.345439][ T7770] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 839.439305][ T7891] usb 5-1: USB disconnect, device number 4 [ 839.617198][ T7770] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.628470][ T7770] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.638680][ T7770] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 839.648172][ T7770] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.905373][ T7770] usb 8-1: config 0 descriptor?? [ 840.265613][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 840.443187][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 840.452819][ T7770] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 840.497018][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.507631][ T9] usb 9-1: config 0 has no interfaces? [ 840.515086][ T9] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 840.524569][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.563270][T10470] loop5: detected capacity change from 0 to 7 [ 840.568596][ T7770] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 840.617021][T10470] Dev loop5: unable to read RDB block 7 [ 840.623117][T10470] loop5: AHDI p1 p2 p3 [ 840.628158][T10470] loop5: partition table partially beyond EOD, truncated [ 840.677283][T10470] loop5: p1 start 1601398130 is beyond EOD, truncated [ 840.684399][T10470] loop5: p2 start 1702059890 is beyond EOD, truncated [ 840.712911][ T7770] cp2112 0003:10C4:EA90.0004: Part Number: 0x1A Device Version: 0xC4 [ 841.272976][ T9] usb 9-1: config 0 descriptor?? [ 841.331568][ T7770] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 841.592268][ T7770] usb 8-1: USB disconnect, device number 15 [ 841.788436][ T8085] usb 9-1: USB disconnect, device number 9 [ 842.538053][T10477] fido_id[10477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 843.788477][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1113'. [ 843.840393][T10498] 8021q: VLANs not supported on nlmon0 [ 844.424262][T10506] netlink: 'syz.7.1116': attribute type 21 has an invalid length. [ 844.432534][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1116'. [ 844.506058][T10506] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 845.497171][T10520] syz.7.1119 (10520): drop_caches: 2 [ 845.702058][T10521] loop5: detected capacity change from 0 to 7 [ 845.739978][T10521] Dev loop5: unable to read RDB block 7 [ 845.745871][T10521] loop5: AHDI p1 p2 p3 [ 845.750230][T10521] loop5: partition table partially beyond EOD, truncated [ 845.809573][T10521] loop5: p1 start 1601398130 is beyond EOD, truncated [ 845.816786][T10521] loop5: p2 start 1702059890 is beyond EOD, truncated [ 846.095711][ T6472] Bluetooth: hci5: command 0x0406 tx timeout [ 846.777043][T10525] loop8: detected capacity change from 0 to 4096 [ 846.825548][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 847.077473][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.088696][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.098800][ T5838] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 847.108120][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.268477][ T5838] usb 5-1: config 0 descriptor?? [ 847.879908][ T5838] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 847.920260][ T5838] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 848.053183][ T5838] cp2112 0003:10C4:EA90.0005: Part Number: 0x1A Device Version: 0xC4 [ 848.465847][ T5838] cp2112 0003:10C4:EA90.0005: error setting SMBus config [ 848.548442][ T5838] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 848.652009][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 848.653787][ T5838] usb 5-1: USB disconnect, device number 5 [ 850.557961][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 850.571415][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.582146][ T9] usb 9-1: config 0 has no interfaces? [ 850.591543][ T9] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 850.603299][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.744533][T10538] fido_id[10538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 850.779707][ T9] usb 9-1: config 0 descriptor?? [ 851.007130][T10546] loop2: detected capacity change from 0 to 7 [ 851.057606][ T9] usb 9-1: USB disconnect, device number 10 [ 851.089290][T10546] Dev loop2: unable to read RDB block 7 [ 851.095040][T10546] loop2: unable to read partition table [ 851.268619][T10546] loop2: partition table beyond EOD, truncated [ 851.275441][T10546] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 852.218298][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1127'. [ 852.286293][T10555] 8021q: VLANs not supported on nlmon0 [ 853.003231][T10561] netlink: 'syz.4.1129': attribute type 21 has an invalid length. [ 853.011489][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 853.085389][T10561] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 853.621076][T10570] loop5: detected capacity change from 0 to 7 [ 853.746517][T10570] Dev loop5: unable to read RDB block 7 [ 853.752448][T10570] loop5: AHDI p1 p2 p3 [ 853.757045][T10570] loop5: partition table partially beyond EOD, truncated [ 853.786359][T10570] loop5: p1 start 1601398130 is beyond EOD, truncated [ 853.793531][T10570] loop5: p2 start 1702059890 is beyond EOD, truncated [ 855.743447][T10573] loop9: detected capacity change from 0 to 4096 [ 856.559528][ T5838] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 856.802973][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 856.859339][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.873155][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.883816][ T5838] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 856.893236][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.965520][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 856.990388][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.001589][ T9] usb 3-1: config 0 has no interfaces? [ 857.007471][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 857.016868][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.128286][ T9] usb 3-1: config 0 descriptor?? [ 857.217825][ T5838] usb 5-1: config 0 descriptor?? [ 857.479337][ T9] usb 3-1: USB disconnect, device number 22 [ 857.541343][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1140'. [ 857.609777][T10597] 8021q: VLANs not supported on nlmon0 [ 857.720560][ T5838] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 857.796902][ T5838] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 857.937880][ T5838] cp2112 0003:10C4:EA90.0006: Part Number: 0x1A Device Version: 0xC4 [ 858.345988][ T5838] cp2112 0003:10C4:EA90.0006: error setting SMBus config [ 858.414332][ T5838] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 858.478855][ T5838] usb 5-1: USB disconnect, device number 6 [ 859.008142][T10616] netlink: 'syz.9.1144': attribute type 21 has an invalid length. [ 859.016569][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1144'. [ 859.079729][T10616] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 860.304339][T10630] loop5: detected capacity change from 0 to 7 [ 860.346631][T10630] Dev loop5: unable to read RDB block 7 [ 860.352692][T10630] loop5: unable to read partition table [ 860.389390][T10633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.416563][T10630] loop5: partition table beyond EOD, truncated [ 860.423282][T10630] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 860.856502][T10629] loop2: detected capacity change from 0 to 4096 [ 861.845189][T10641] syz.7.1151 (10641): drop_caches: 2 [ 862.307050][ T5838] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 862.505491][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 862.553968][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.565663][ T5838] usb 3-1: config 0 has no interfaces? [ 862.571368][ T5838] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 862.580939][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.725834][ T5838] usb 3-1: config 0 descriptor?? [ 863.034946][ T5838] usb 3-1: USB disconnect, device number 23 [ 864.453293][T10668] netlink: 'syz.4.1158': attribute type 21 has an invalid length. [ 864.461532][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 864.502232][T10668] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 864.512783][ T5838] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 864.712255][ T5838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.723561][ T5838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.733789][ T5838] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 864.743206][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.894306][ T5838] usb 10-1: config 0 descriptor?? [ 865.368078][ T5838] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 865.389618][ T5838] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 865.562598][ T5838] cp2112 0003:10C4:EA90.0007: Part Number: 0x1A Device Version: 0xC4 [ 865.976287][ T5838] cp2112 0003:10C4:EA90.0007: error setting SMBus config [ 866.032281][ T5838] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 866.174411][ T5838] usb 10-1: USB disconnect, device number 12 [ 866.499035][T10683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.696677][T10686] loop5: detected capacity change from 0 to 7 [ 866.746495][T10686] Dev loop5: unable to read RDB block 7 [ 866.752240][T10686] loop5: unable to read partition table [ 866.857886][T10686] loop5: partition table beyond EOD, truncated [ 866.864398][T10686] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 868.135805][T10693] loop4: detected capacity change from 0 to 4096 [ 869.514510][T10718] netlink: 'syz.9.1170': attribute type 21 has an invalid length. [ 869.522881][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1170'. [ 869.623168][T10718] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 870.295495][ T5838] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 870.521805][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.533985][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.544202][ T5838] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 870.553973][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.743166][ T5838] usb 8-1: config 0 descriptor?? [ 871.174922][T10741] loop5: detected capacity change from 0 to 7 [ 871.218878][ T6153] Dev loop5: unable to read RDB block 7 [ 871.224929][ T6153] loop5: unable to read partition table [ 871.284698][ T6153] loop5: partition table beyond EOD, truncated [ 871.291755][ T5838] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 871.318802][T10741] Dev loop5: unable to read RDB block 7 [ 871.324927][T10741] loop5: unable to read partition table [ 871.357398][T10741] loop5: partition table beyond EOD, truncated [ 871.363980][T10741] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 871.374449][ T5838] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 871.525897][ T5838] cp2112 0003:10C4:EA90.0008: Part Number: 0x1A Device Version: 0xC4 [ 871.723253][ T5838] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 871.800848][ T5838] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -32 [ 871.912276][ T5838] usb 8-1: USB disconnect, device number 16 [ 872.096054][T10745] fido_id[10745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 873.055490][ T5838] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 873.266784][ T5838] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 873.294182][ T5838] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 873.304702][ T5838] usb 3-1: config 0 interface 0 has no altsetting 0 [ 873.400011][ T5838] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 873.409821][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 873.418421][ T5838] usb 3-1: Product: syz [ 873.422759][ T5838] usb 3-1: Manufacturer: syz [ 873.427715][ T5838] usb 3-1: SerialNumber: syz [ 873.442491][ T5838] usb 3-1: config 0 descriptor?? [ 873.489733][ T5838] hub 3-1:0.0: bad descriptor, ignoring hub [ 873.496473][ T5838] hub 3-1:0.0: probe with driver hub failed with error -5 [ 873.530395][T10771] netlink: 'syz.4.1184': attribute type 21 has an invalid length. [ 873.538940][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 873.576691][ T5838] usb 3-1: selecting invalid altsetting 0 [ 873.594595][T10771] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 873.771170][T10773] syz.8.1183 (10773): drop_caches: 2 [ 873.950594][T10775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.099152][T10775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.247247][T10760] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 874.416932][ T5838] usb 3-1: USB disconnect, device number 24 [ 876.036751][T10793] loop5: detected capacity change from 0 to 7 [ 876.113067][T10793] Dev loop5: unable to read RDB block 7 [ 876.120550][T10793] loop5: unable to read partition table [ 876.187826][T10793] loop5: partition table beyond EOD, truncated [ 876.194200][T10793] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 876.403009][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 876.615709][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.627378][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.637586][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 876.647054][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.814458][ T9] usb 5-1: config 0 descriptor?? [ 877.360385][ T9] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 877.435621][ T9] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 877.548905][ T9] cp2112 0003:10C4:EA90.0009: Part Number: 0x1A Device Version: 0xC4 [ 877.750010][ T9] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 877.852771][ T9] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 877.908846][ T9] usb 5-1: USB disconnect, device number 7 [ 878.294261][T10811] fido_id[10811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 878.989389][T10820] netlink: 'syz.4.1196': attribute type 21 has an invalid length. [ 878.997989][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 879.016105][T10820] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 879.745510][ T5838] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 879.955458][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 879.982907][ T5838] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 879.991447][ T5838] usb 3-1: config 2 has no interface number 0 [ 880.035766][ T5838] usb 3-1: config 2 interface 88 has no altsetting 0 [ 880.091181][ T5838] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 880.101100][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.110977][ T5838] usb 3-1: Product: syz [ 880.116020][ T5838] usb 3-1: Manufacturer: syz [ 880.120793][ T5838] usb 3-1: SerialNumber: syz [ 880.765821][ T9603] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 880.962849][ T9603] usb 5-1: Using ep0 maxpacket: 32 [ 881.008409][ T9603] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 881.017095][ T9603] usb 5-1: config 0 has no interface number 0 [ 881.090464][ T9603] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 881.102486][ T9603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.110929][ T9603] usb 5-1: Product: syz [ 881.115356][ T9603] usb 5-1: Manufacturer: syz [ 881.120119][ T9603] usb 5-1: SerialNumber: syz [ 881.279551][ T9603] usb 5-1: config 0 descriptor?? [ 881.284828][ T5838] asix 3-1:2.88: probe with driver asix failed with error -71 [ 881.385665][ T9603] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 881.394675][ T9603] usb 5-1: selecting invalid altsetting 1 [ 881.400850][ T9603] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 881.418343][ T5838] usb 3-1: USB disconnect, device number 25 [ 881.619707][ T9603] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 881.710094][ T9603] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 881.756341][ T9603] usb 5-1: media controller created [ 881.990398][ T9603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 882.305423][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 882.508689][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 882.571855][ T9] usb 8-1: config 0 has an invalid interface number: 42 but max is 0 [ 882.580628][ T9] usb 8-1: config 0 has no interface number 0 [ 882.635363][ T9] usb 8-1: config 0 interface 42 has no altsetting 0 [ 882.694545][ T9] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=aa.7d [ 882.704399][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.712915][ T9] usb 8-1: Product: syz [ 882.717445][ T9] usb 8-1: Manufacturer: syz [ 882.722215][ T9] usb 8-1: SerialNumber: syz [ 882.890419][ T9] usb 8-1: config 0 descriptor?? [ 882.952785][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 883.013221][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 883.064225][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 883.103866][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 883.181061][T10842] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1202'. [ 883.191732][T10842] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 883.196073][ T5838] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 883.266340][ T9603] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 883.273718][ T9603] zl10353_read_register: readreg error (reg=127, ret==-71) [ 883.284803][ T9] usb 8-1: media controller created [ 883.320628][ T9603] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 883.468120][ T5838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.479856][ T5838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.491729][ T5838] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 883.501672][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.992121][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.020461][ T5838] usb 9-1: config 0 descriptor?? [ 884.388154][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 884.395012][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 884.622670][T10861] netlink: 'syz.4.1208': attribute type 21 has an invalid length. [ 884.631126][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 884.646410][ T5838] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 884.821057][T10861] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 884.973660][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input32 [ 886.910081][ T9603] usb 5-1: USB disconnect, device number 8 [ 886.922308][ T5838] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 887.041664][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 887.108098][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 887.157083][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 887.205500][ T7891] dvb-usb: bulk message failed: -22 (1/0) [ 887.211471][ T7891] dvb-usb: error while querying for an remote control event. [ 887.310141][ T9] usb 8-1: USB disconnect, device number 17 [ 887.466837][ T5838] cp2112 0003:10C4:EA90.000A: error requesting version [ 887.554604][ T5838] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 887.697815][ T5838] usb 9-1: USB disconnect, device number 11 [ 888.059306][T10872] loop2: detected capacity change from 0 to 7 [ 888.072120][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 888.132415][T10864] fido_id[10864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 888.148511][T10872] Dev loop2: unable to read RDB block 7 [ 888.154368][T10872] loop2: unable to read partition table [ 888.296596][T10872] loop2: partition table beyond EOD, truncated [ 888.304783][T10872] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 889.124825][T10886] syz.2.1214 (10886): drop_caches: 2 [ 891.955563][ T5838] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 892.288631][ T5838] usb 10-1: config 0 has no interfaces? [ 892.450794][ T5838] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 892.460378][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.469313][ T5838] usb 10-1: Product: syz [ 892.473641][ T5838] usb 10-1: Manufacturer: syz [ 892.478660][ T5838] usb 10-1: SerialNumber: syz [ 892.640589][ T5838] usb 10-1: config 0 descriptor?? [ 892.895935][ T9603] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 893.144136][ T9603] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 893.245503][ T9603] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 893.256315][ T9603] usb 9-1: config 0 interface 0 has no altsetting 0 [ 893.357694][ T9603] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 893.367403][ T9603] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 893.376297][ T9603] usb 9-1: Product: syz [ 893.380714][ T9603] usb 9-1: Manufacturer: syz [ 893.385759][ T9603] usb 9-1: SerialNumber: syz [ 893.440881][ T9603] usb 9-1: config 0 descriptor?? [ 893.471585][ T9603] hub 9-1:0.0: bad descriptor, ignoring hub [ 893.478589][ T9603] hub 9-1:0.0: probe with driver hub failed with error -5 [ 893.632353][ T9603] usb 9-1: selecting invalid altsetting 0 [ 893.890240][ T9603] usb 9-1: USB disconnect, device number 12 [ 894.094782][ T6392] udevd[6392]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.220112][T10923] netlink: 'syz.7.1222': attribute type 21 has an invalid length. [ 894.228442][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1222'. [ 894.404875][T10923] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 897.709307][ T5838] usb 10-1: can't set config #0, error -110 [ 899.609014][T10952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 900.371721][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.378494][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 901.975493][ T9661] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 902.237607][ T5838] usb 10-1: USB disconnect, device number 13 [ 902.255781][ T9661] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 902.306376][ T9661] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 902.316573][ T9661] usb 9-1: config 0 interface 0 has no altsetting 0 [ 902.407773][ T9661] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 902.417405][ T9661] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 902.426318][ T9661] usb 9-1: Product: syz [ 902.430661][ T9661] usb 9-1: Manufacturer: syz [ 902.435547][ T9661] usb 9-1: SerialNumber: syz [ 902.561593][T10974] netlink: 'syz.2.1235': attribute type 21 has an invalid length. [ 902.569847][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 902.595356][T10974] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 902.611365][ T9661] usb 9-1: config 0 descriptor?? [ 902.689513][ T9661] hub 9-1:0.0: bad descriptor, ignoring hub [ 902.697412][ T9661] hub 9-1:0.0: probe with driver hub failed with error -5 [ 902.830094][ T9661] usb 9-1: selecting invalid altsetting 0 [ 903.047591][ T9661] usb 9-1: USB disconnect, device number 13 [ 903.397164][ T6392] udevd[6392]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.141568][ T9603] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 906.338102][ T9603] usb 9-1: Using ep0 maxpacket: 32 [ 906.378357][ T9603] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 906.439868][ T9603] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 906.449463][ T9603] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 906.458286][ T9603] usb 9-1: Product: syz [ 906.462633][ T9603] usb 9-1: Manufacturer: syz [ 906.467503][ T9603] usb 9-1: SerialNumber: syz [ 906.571939][ T9603] usb 9-1: config 0 descriptor?? [ 906.606662][T11001] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 908.076677][ T9603] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 908.897335][ T9603] usb 5-1: Using ep0 maxpacket: 8 [ 908.937055][ T9603] usb 5-1: unable to get BOS descriptor or descriptor too short [ 908.965011][ T9603] usb 5-1: config 4 interface 0 has no altsetting 0 [ 909.032830][ T9603] usb 5-1: string descriptor 0 read error: -22 [ 909.052860][ T9603] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 909.062526][ T9603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.124148][ T5838] usb 9-1: USB disconnect, device number 14 [ 909.248126][ T9603] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 909.298748][ T9603] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 909.398047][ T9603] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 909.437284][ T9603] usb 5-1: media controller created [ 909.673570][ T9603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 909.991207][ T9603] zl10353_read_register: readreg error (reg=127, ret==0) [ 910.637750][ T9603] usb 5-1: USB disconnect, device number 9 [ 911.025471][ T9603] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 911.256129][ T9603] usb 5-1: Using ep0 maxpacket: 32 [ 911.273446][ T9603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.284942][ T9603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.295795][ T9603] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 911.305047][ T9603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.334026][ T9603] usb 5-1: config 0 descriptor?? [ 911.979791][ T9603] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 911.987066][ T9603] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 912.116480][ T9603] ft260 0003:0403:6030.000B: chip code: 6424 8183 [ 912.318659][ T9603] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 912.521904][ T9603] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 912.826895][ T30] audit: type=1326 audit(2000000672.199:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 912.852902][T11042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.894766][T11042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.059915][T11042] ft260 0003:0403:6030.000B: ft260_i2c_read: failed with -38 [ 913.115884][ T8085] usb 5-1: USB disconnect, device number 10 [ 913.157554][T11067] mmap: syz.8.1260 (11067) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 913.186264][ T30] audit: type=1326 audit(2000000672.199:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 913.209012][ T30] audit: type=1326 audit(2000000672.199:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 913.232016][ T30] audit: type=1326 audit(2000000672.199:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 913.254678][ T30] audit: type=1326 audit(2000000672.199:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 913.277380][ T30] audit: type=1326 audit(2000000672.199:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 913.300164][ T30] audit: type=1326 audit(2000000672.199:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 913.322882][ T30] audit: type=1326 audit(2000000672.199:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 913.345670][ T30] audit: type=1326 audit(2000000672.199:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 913.368591][ T30] audit: type=1326 audit(2000000672.199:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.8.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d37b9acb9 code=0x7ffc0000 [ 914.455542][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 914.678938][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 914.714824][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 914.787104][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 914.796760][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 914.805043][ T10] usb 3-1: Product: syz [ 914.809490][ T10] usb 3-1: Manufacturer: syz [ 914.814175][ T10] usb 3-1: SerialNumber: syz [ 914.912070][ T10] usb 3-1: config 0 descriptor?? [ 914.931797][T11074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 915.219299][ T10] usb 3-1: USB disconnect, device number 26 [ 915.412142][ T9661] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 915.615748][ T9661] usb 5-1: Using ep0 maxpacket: 8 [ 915.651962][ T9661] usb 5-1: unable to get BOS descriptor or descriptor too short [ 915.690612][ T9661] usb 5-1: config 4 interface 0 has no altsetting 0 [ 915.846637][ T9661] usb 5-1: string descriptor 0 read error: -22 [ 915.853399][ T9661] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 915.863871][ T9661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.057115][ T9661] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 916.169654][ T9661] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 916.275382][ T9661] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 916.294053][ T9661] usb 5-1: media controller created [ 916.726174][ T9661] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 917.058581][ T9661] zl10353_read_register: readreg error (reg=127, ret==0) [ 917.919594][ T9661] usb 5-1: USB disconnect, device number 11 [ 921.237466][T11115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.255727][ T7891] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 922.327537][ T8085] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 922.465419][ T7891] usb 10-1: Using ep0 maxpacket: 32 [ 922.491509][ T7891] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.501916][ T7891] usb 10-1: config 0 has no interfaces? [ 922.507736][ T7891] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 922.517214][ T7891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.606904][ T8085] usb 9-1: Using ep0 maxpacket: 32 [ 922.625651][ T8085] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 922.674188][ T8085] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 922.676609][ T7891] usb 10-1: config 0 descriptor?? [ 922.683778][ T8085] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 922.697383][ T8085] usb 9-1: Product: syz [ 922.701712][ T8085] usb 9-1: Manufacturer: syz [ 922.706540][ T8085] usb 9-1: SerialNumber: syz [ 922.853263][ T8085] usb 9-1: config 0 descriptor?? [ 922.897279][T11123] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 923.179426][ T7891] usb 9-1: USB disconnect, device number 15 [ 924.547095][ T7891] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 924.725558][ T7891] usb 9-1: Using ep0 maxpacket: 8 [ 924.742391][ T7891] usb 9-1: unable to get BOS descriptor or descriptor too short [ 924.780225][ T7891] usb 9-1: config 4 interface 0 has no altsetting 0 [ 924.838374][ T7891] usb 9-1: string descriptor 0 read error: -22 [ 924.877161][ T7891] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 924.886596][ T7891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.999920][ T7891] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 925.083655][ T9603] usb 10-1: USB disconnect, device number 14 [ 925.114757][ T8085] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 925.247256][ T7891] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 925.292379][ T7891] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 925.315383][ T7891] usb 9-1: media controller created [ 925.345698][ T8085] usb 5-1: Using ep0 maxpacket: 16 [ 925.425755][ T8085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 925.477611][ T8085] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 925.487178][ T8085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.495683][ T8085] usb 5-1: Product: syz [ 925.500010][ T8085] usb 5-1: Manufacturer: syz [ 925.504772][ T8085] usb 5-1: SerialNumber: syz [ 925.612040][ T7891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 925.686111][ T8085] usb 5-1: config 0 descriptor?? [ 925.800718][ T8085] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 925.810521][ T8085] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 925.872744][ T7891] zl10353_read_register: readreg error (reg=127, ret==0) [ 926.367829][ T8085] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 926.605985][ T7891] usb 9-1: USB disconnect, device number 16 [ 926.745068][T11153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.897710][ T8085] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 926.908785][ T8085] em28xx 5-1:0.0: board has no eeprom [ 927.065697][ T8085] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 927.073934][ T8085] em28xx 5-1:0.0: dvb set to bulk mode. [ 927.084926][ T9603] em28xx 5-1:0.0: Binding DVB extension [ 927.309663][ T8085] usb 5-1: USB disconnect, device number 12 [ 927.351207][ T8085] em28xx 5-1:0.0: Disconnecting em28xx [ 927.598595][ T9603] em28xx 5-1:0.0: Registering input extension [ 927.672571][ T8085] em28xx 5-1:0.0: Closing input extension [ 927.818764][ T8085] em28xx 5-1:0.0: Freeing device [ 928.016919][ T7891] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 928.127601][ T6472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 928.138147][ T6472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 928.150606][ T6472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 928.185651][ T6472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 928.201214][ T6472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 928.344914][ T7891] usb 9-1: config 0 has an invalid interface number: 113 but max is 0 [ 928.353538][ T7891] usb 9-1: config 0 has no interface number 0 [ 928.385628][ T7891] usb 9-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 928.398301][ T7891] usb 9-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 928.408719][ T7891] usb 9-1: config 0 interface 113 has no altsetting 0 [ 928.831523][ T7891] usb 9-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 928.841353][ T7891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.849683][ T7891] usb 9-1: Product: syz [ 928.854007][ T7891] usb 9-1: Manufacturer: syz [ 928.858763][ T7891] usb 9-1: SerialNumber: syz [ 929.007091][ T7891] usb 9-1: config 0 descriptor?? [ 929.263141][ C0] usb 9-1: NFC: Urb failure (status -71) [ 929.485719][ T7891] usb 9-1: NFC: Unable to get FW version [ 929.531340][ T7891] pn533_usb 9-1:0.113: probe with driver pn533_usb failed with error -90 [ 930.265435][ T6472] Bluetooth: hci0: command tx timeout [ 931.086144][ T7891] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 931.326137][ T7891] usb 3-1: Using ep0 maxpacket: 32 [ 931.380102][ T7891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.390544][ T7891] usb 3-1: config 0 has no interfaces? [ 931.396342][ T7891] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 931.405629][ T7891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.551866][ T7891] usb 3-1: config 0 descriptor?? [ 932.346441][ T6472] Bluetooth: hci0: command tx timeout [ 933.317128][T11164] chnl_net:caif_netlink_parms(): no params data found [ 933.362809][ T6081] bridge_slave_1: left allmulticast mode [ 933.369281][ T6081] bridge_slave_1: left promiscuous mode [ 933.376271][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.475755][ T6081] bridge_slave_0: left allmulticast mode [ 933.481579][ T6081] bridge_slave_0: left promiscuous mode [ 933.488070][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.164509][ T6081] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 934.218868][ T7891] usb 3-1: USB disconnect, device number 27 [ 934.415593][ T6472] Bluetooth: hci0: command tx timeout [ 934.737149][ T6081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.845862][ T6081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.918646][ T6081] bond0 (unregistering): Released all slaves [ 936.368182][ T6081] hsr_slave_0: left promiscuous mode [ 936.416957][ T6081] hsr_slave_1: left promiscuous mode [ 936.461529][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.516659][ T6472] Bluetooth: hci0: command tx timeout [ 936.567575][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.767705][ T6081] team0 (unregistering): Port device team_slave_1 removed [ 937.871233][ T6081] team0 (unregistering): Port device team_slave_0 removed [ 938.615534][ T9661] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 938.800378][ T9661] usb 5-1: Using ep0 maxpacket: 8 [ 938.829469][ T9661] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 938.839963][ T9661] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 938.853178][ T9661] usb 5-1: config 1 interface 0 has no altsetting 0 [ 938.948223][ T9661] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 938.957571][ T9661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.965869][ T9661] usb 5-1: Product: syz [ 938.970119][ T9661] usb 5-1: Manufacturer: syz [ 938.974787][ T9661] usb 5-1: SerialNumber: syz [ 939.080755][T11253] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 939.590345][ T9603] usb 9-1: USB disconnect, device number 17 [ 939.727999][ T9661] usb 5-1: USB disconnect, device number 13 [ 940.086336][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.093990][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.133625][T11164] bridge_slave_0: entered allmulticast mode [ 940.179198][T11164] bridge_slave_0: entered promiscuous mode [ 940.189012][ T9603] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 940.250950][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.259850][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.296134][T11164] bridge_slave_1: entered allmulticast mode [ 940.339816][T11164] bridge_slave_1: entered promiscuous mode [ 940.395031][ T9603] usb 9-1: Using ep0 maxpacket: 32 [ 940.421493][ T9603] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.433992][ T9603] usb 9-1: config 0 has no interfaces? [ 940.440939][ T9603] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 940.450554][ T9603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.572190][ T9603] usb 9-1: config 0 descriptor?? [ 940.713539][T11164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.836430][T11164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.158270][T11281] tipc: Started in network mode [ 941.163581][T11281] tipc: Node identity ca5e834ac001, cluster identity 4711 [ 941.172039][T11281] tipc: Enabled bearer , priority 0 [ 941.218286][T11286] syzkaller0: entered promiscuous mode [ 941.224114][T11286] syzkaller0: entered allmulticast mode [ 941.290829][T11164] team0: Port device team_slave_0 added [ 941.342937][T11164] team0: Port device team_slave_1 added [ 941.349113][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1313'. [ 941.495342][T11281] tipc: Resetting bearer [ 941.641138][T11164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.648665][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.675294][T11164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.700265][T11164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.707871][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.734457][T11164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.752887][T11279] tipc: Resetting bearer [ 941.765485][T11279] tipc: Disabling bearer [ 942.207112][T11164] hsr_slave_0: entered promiscuous mode [ 942.243183][T11164] hsr_slave_1: entered promiscuous mode [ 942.297293][T11164] debugfs: 'hsr0' already exists in 'hsr' [ 942.303499][T11164] Cannot create hsr debugfs directory [ 943.386959][ T9603] usb 9-1: USB disconnect, device number 18 [ 945.247032][T11164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 945.329629][T11164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 945.436578][T11164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 945.611761][T11164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 947.050466][T11164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.323862][T11164] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.444001][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.451517][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.594091][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.601682][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.303029][T11164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 950.145686][ T9661] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 950.339711][ T9661] usb 9-1: Using ep0 maxpacket: 32 [ 950.371934][ T9661] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.383184][ T9661] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 950.392573][ T9661] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 950.402058][ T9661] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.518167][ T9661] usb 9-1: config 0 descriptor?? [ 950.700138][T11164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.218839][T11164] veth0_vlan: entered promiscuous mode [ 951.333808][T11164] veth1_vlan: entered promiscuous mode [ 951.693637][T11164] veth0_macvtap: entered promiscuous mode [ 951.743634][T11164] veth1_macvtap: entered promiscuous mode [ 951.955633][T11164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.042858][T11164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.164885][ T6081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.223807][ T6081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.319831][ T6081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.369709][ T6081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.597363][T11375] netlink: 'syz.9.1330': attribute type 24 has an invalid length. [ 952.606422][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1330'. [ 952.649309][T11375] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 952.962525][ T8965] usb 9-1: USB disconnect, device number 19 [ 953.356910][ T9661] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 953.560540][ T9661] usb 5-1: Using ep0 maxpacket: 32 [ 953.617687][ T9661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.629064][ T9661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.639615][ T9661] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 953.648990][ T9661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.800333][ T9661] usb 5-1: config 0 descriptor?? [ 954.313257][ T9661] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 954.320896][ T9661] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 954.483058][ T9661] ft260 0003:0403:6030.000C: chip code: 6424 8183 [ 954.694830][ T9661] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 954.938272][ T9661] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 955.288640][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.352429][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.453404][ T9661] usb 5-1: USB disconnect, device number 14 [ 959.497892][ T8085] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 959.715894][ T8085] usb 3-1: Using ep0 maxpacket: 32 [ 959.822345][ T8085] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.832882][ T8085] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 959.842384][ T8085] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 959.851859][ T8085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.898845][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.907083][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.042369][ T8085] usb 3-1: config 0 descriptor?? [ 960.344063][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.352299][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.833159][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.840006][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.435407][ T8085] usb 3-1: USB disconnect, device number 28 [ 962.706131][ T9603] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 962.897274][ T9603] usb 1-1: Using ep0 maxpacket: 32 [ 962.939726][ T9603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.953226][ T9603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.964166][ T9603] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 962.973571][ T9603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.082955][ T9603] usb 1-1: config 0 descriptor?? [ 963.594283][ T9603] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 963.601820][ T9603] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 963.764829][ T9603] ft260 0003:0403:6030.000D: chip code: 6424 8183 [ 963.981722][ T9603] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 964.183481][ T9603] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 964.412729][T11499] loop4: detected capacity change from 0 to 2560 [ 964.437277][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.490344][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.544041][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 964.549945][ T9603] usb 1-1: USB disconnect, device number 3 [ 964.615706][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 964.677675][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 964.746505][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 964.777476][ T7781] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.265672][ T9603] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 967.435384][ T9603] usb 10-1: Using ep0 maxpacket: 32 [ 967.476902][ T9603] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.487585][ T9603] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 967.497112][ T9603] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 967.506719][ T9603] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.576588][ T9603] usb 10-1: config 0 descriptor?? [ 969.975857][ T9603] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 970.107612][ T9661] usb 10-1: USB disconnect, device number 15 [ 970.228065][ T9603] usb 9-1: Using ep0 maxpacket: 32 [ 970.300069][ T9603] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.311490][ T9603] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.321651][ T9603] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 970.333336][ T9603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.905660][ T9603] usb 9-1: config 0 descriptor?? [ 971.399085][ T9603] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 971.407819][ T9603] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 971.561091][ T9603] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 971.781784][ T9603] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 971.977723][ T9603] ft260 0003:0403:6030.000E: failed to retrieve status: -32, no wakeup [ 972.252355][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.321852][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.387491][ T9661] usb 9-1: USB disconnect, device number 20 [ 974.267047][T11581] loop2: detected capacity change from 0 to 7 [ 974.334549][ T6153] Dev loop2: unable to read RDB block 7 [ 974.341225][ T6153] loop2: unable to read partition table [ 974.379349][ T6153] loop2: partition table beyond EOD, truncated [ 974.397277][T11581] Dev loop2: unable to read RDB block 7 [ 974.403216][T11581] loop2: unable to read partition table [ 974.466369][T11581] loop2: partition table beyond EOD, truncated [ 974.472931][T11581] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 977.169897][T11604] loop4: detected capacity change from 0 to 2560 [ 977.459400][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 977.547218][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 977.633935][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 977.701298][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 977.740770][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 977.967681][T11617] tipc: Started in network mode [ 977.972805][T11617] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 978.041141][T11617] tipc: Enabled bearer , priority 10 [ 978.447387][ T5801] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 978.625555][ T5801] usb 3-1: Using ep0 maxpacket: 16 [ 978.670071][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.681678][ T5801] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 978.691162][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.829357][ T5801] usb 3-1: config 0 descriptor?? [ 978.906229][ T9661] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 979.110301][ T9661] usb 9-1: Using ep0 maxpacket: 32 [ 979.175671][ T5840] tipc: Node number set to 4269801494 [ 979.187690][ T9661] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.199388][ T9661] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.209614][ T9661] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 979.219089][ T9661] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.367427][ T5801] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 979.374761][ T5801] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 979.377209][ T9661] usb 9-1: config 0 descriptor?? [ 979.382439][ T5801] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 979.394547][ T5801] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 979.401956][ T5801] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 979.601735][ T5801] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 979.843346][ T5801] usb 3-1: USB disconnect, device number 29 [ 979.982854][ T9661] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 979.990995][ T9661] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 980.144276][ T9661] ft260 0003:0403:6030.0010: chip code: 6424 8183 [ 980.351034][ T9661] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 980.563169][ T9661] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup [ 980.898033][T11626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.935494][T11626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.013682][T11626] ft260 0003:0403:6030.0010: ft260_i2c_read: failed with -38 [ 981.109512][ T9661] usb 9-1: USB disconnect, device number 21 [ 982.153450][T11664] loop4: detected capacity change from 0 to 2560 [ 982.464754][ T6392] Buffer I/O error on dev loop4, logical block 0, async page read [ 982.883786][ T6392] Buffer I/O error on dev loop4, logical block 0, async page read [ 982.922650][ T6392] Buffer I/O error on dev loop4, logical block 0, async page read [ 983.005305][ T6392] Buffer I/O error on dev loop4, logical block 0, async page read [ 983.006073][T11661] veth2: entered promiscuous mode [ 983.014617][ T6392] Buffer I/O error on dev loop4, logical block 0, async page read [ 983.020447][T11661] veth2: entered allmulticast mode [ 983.222437][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 983.282741][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 983.338441][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 983.408666][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 983.456263][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 986.474128][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 986.518168][T11713] 8021q: VLANs not supported on caif0 [ 986.643032][T11712] loop4: detected capacity change from 0 to 2560 [ 986.749414][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 990.976758][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 991.027170][T11755] 8021q: VLANs not supported on caif0 [ 991.606390][T11759] loop4: detected capacity change from 0 to 2560 [ 991.707676][ T6153] buffer_io_error: 4 callbacks suppressed [ 991.707733][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 991.789887][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 991.838092][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 991.889417][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 991.926698][ T6153] Buffer I/O error on dev loop4, logical block 0, async page read [ 998.497309][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 998.516643][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 998.527301][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 998.557145][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 998.616461][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1000.749003][ T6472] Bluetooth: hci2: command tx timeout [ 1002.435974][ T5801] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1002.733062][ T5801] usb 3-1: no configurations [ 1002.738221][ T5801] usb 3-1: can't read configurations, error -22 [ 1002.815567][ T6472] Bluetooth: hci2: command tx timeout [ 1002.985730][ T5801] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1003.227055][T11814] chnl_net:caif_netlink_parms(): no params data found [ 1003.228448][ T5801] usb 3-1: no configurations [ 1003.239203][ T5801] usb 3-1: can't read configurations, error -22 [ 1003.348351][ T5801] usb usb3-port1: attempt power cycle [ 1003.747142][ T5801] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1003.797780][ T5801] usb 3-1: no configurations [ 1003.802673][ T5801] usb 3-1: can't read configurations, error -22 [ 1004.025493][ T5801] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1004.097372][ T5801] usb 3-1: no configurations [ 1004.102186][ T5801] usb 3-1: can't read configurations, error -22 [ 1004.178628][ T5801] usb usb3-port1: unable to enumerate USB device [ 1004.905718][ T6472] Bluetooth: hci2: command tx timeout [ 1005.884533][T11814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.892443][T11814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.976545][T11814] bridge_slave_0: entered allmulticast mode [ 1006.496311][T11814] bridge_slave_0: entered promiscuous mode [ 1006.986086][ T6472] Bluetooth: hci2: command tx timeout [ 1007.061049][T11814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.068668][T11814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.896036][T11814] bridge_slave_1: entered allmulticast mode [ 1007.947238][T11814] bridge_slave_1: entered promiscuous mode [ 1008.111624][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.251583][T11884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.349885][T11886] ===================================================== [ 1008.359446][T11886] BUG: KMSAN: uninit-value in pfn_reader_next+0x1d5a/0x3e50 [ 1008.367057][T11886] pfn_reader_next+0x1d5a/0x3e50 [ 1008.372096][T11886] pfn_reader_first+0xbcf/0xee0 [ 1008.377210][T11886] iopt_area_fill_domains+0x202/0x1590 [ 1008.382773][T11886] iopt_map_pages+0x1ba5/0x2130 [ 1008.387797][T11886] iopt_map_common+0x224/0x610 [ 1008.392625][T11886] iopt_map_user_pages+0x148/0x1c0 [ 1008.397958][T11886] iommufd_ioas_map+0x6a2/0x9b0 [ 1008.403384][T11886] iommufd_fops_ioctl+0x82a/0x9e0 [ 1008.408773][T11886] __se_sys_ioctl+0x23c/0x400 [ 1008.413693][T11886] __x64_sys_ioctl+0x97/0xe0 [ 1008.419581][T11886] x64_sys_call+0x18a7/0x3e70 [ 1008.424450][T11886] do_syscall_64+0xc9/0xf80 [ 1008.429731][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.436028][T11886] [ 1008.438420][T11886] Local variable pfns created at: [ 1008.443517][T11886] iopt_area_fill_domains+0x5c/0x1590 [ 1008.450192][T11886] iopt_map_pages+0x1ba5/0x2130 [ 1008.455274][T11886] [ 1008.457675][T11886] CPU: 0 UID: 0 PID: 11886 Comm: syz.8.1447 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 1008.469241][T11886] Tainted: [L]=SOFTLOCKUP [ 1008.473680][T11886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1008.483891][T11886] ===================================================== [ 1008.490930][T11886] Disabling lock debugging due to kernel taint [ 1008.497654][T11886] Kernel panic - not syncing: kmsan.panic set ... [ 1008.504123][T11886] CPU: 0 UID: 0 PID: 11886 Comm: syz.8.1447 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 1008.515591][T11886] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1008.521178][T11886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1008.531367][T11886] Call Trace: [ 1008.534675][T11886] [ 1008.537638][T11886] __dump_stack+0x26/0x30 [ 1008.542055][T11886] dump_stack_lvl+0x50/0x1c0 [ 1008.546724][T11886] ? dump_stack+0x12/0x25 [ 1008.551138][T11886] dump_stack+0x1e/0x25 [ 1008.555375][T11886] vpanic+0x435/0xd40 [ 1008.559453][T11886] panic+0x15d/0x160 [ 1008.563465][T11886] kmsan_report+0x31a/0x320 [ 1008.568078][T11886] ? __msan_warning+0x1b/0x30 [ 1008.572846][T11886] ? pfn_reader_next+0x1d5a/0x3e50 [ 1008.578045][T11886] ? pfn_reader_first+0xbcf/0xee0 [ 1008.583160][T11886] ? iopt_area_fill_domains+0x202/0x1590 [ 1008.588886][T11886] ? iopt_map_pages+0x1ba5/0x2130 [ 1008.593970][T11886] ? iopt_map_common+0x224/0x610 [ 1008.598965][T11886] ? iopt_map_user_pages+0x148/0x1c0 [ 1008.604312][T11886] ? iommufd_ioas_map+0x6a2/0x9b0 [ 1008.609407][T11886] ? iommufd_fops_ioctl+0x82a/0x9e0 [ 1008.614689][T11886] ? __se_sys_ioctl+0x23c/0x400 [ 1008.619626][T11886] ? __x64_sys_ioctl+0x97/0xe0 [ 1008.624470][T11886] ? x64_sys_call+0x18a7/0x3e70 [ 1008.629422][T11886] ? do_syscall_64+0xc9/0xf80 [ 1008.634193][T11886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.640342][T11886] ? kmsan_get_metadata+0xf1/0x160 [ 1008.645561][T11886] ? kmsan_get_metadata+0xf1/0x160 [ 1008.650777][T11886] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1008.656713][T11886] ? pfn_reader_user_pin+0x1dac/0x20b0 [ 1008.662281][T11886] ? iopt_area_fill_domains+0x202/0x1590 [ 1008.668005][T11886] ? iopt_map_pages+0x1ba5/0x2130 [ 1008.673087][T11886] ? iopt_map_common+0x224/0x610 [ 1008.678081][T11886] ? iopt_map_user_pages+0x148/0x1c0 [ 1008.683427][T11886] ? iommufd_ioas_map+0x6a2/0x9b0 [ 1008.688532][T11886] ? iommufd_fops_ioctl+0x82a/0x9e0 [ 1008.693825][T11886] ? kmsan_get_metadata+0xf1/0x160 [ 1008.699047][T11886] __msan_warning+0x1b/0x30 [ 1008.703637][T11886] pfn_reader_next+0x1d5a/0x3e50 [ 1008.708679][T11886] ? kmsan_get_metadata+0xf1/0x160 [ 1008.713897][T11886] ? kmsan_get_metadata+0xf1/0x160 [ 1008.719132][T11886] ? kmsan_get_metadata+0xf1/0x160 [ 1008.724388][T11886] pfn_reader_first+0xbcf/0xee0 [ 1008.729424][T11886] iopt_area_fill_domains+0x202/0x1590 [ 1008.735034][T11886] ? kmsan_get_metadata+0xf1/0x160 [ 1008.740283][T11886] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1008.746715][T11886] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1008.752884][T11886] ? kmsan_get_metadata+0xf1/0x160 [ 1008.758103][T11886] iopt_map_pages+0x1ba5/0x2130 [ 1008.763159][T11886] iopt_map_common+0x224/0x610 [ 1008.767994][T11886] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1008.773906][T11886] iopt_map_user_pages+0x148/0x1c0 [ 1008.779277][T11886] iommufd_ioas_map+0x6a2/0x9b0 [ 1008.784226][T11886] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 1008.789674][T11886] iommufd_fops_ioctl+0x82a/0x9e0 [ 1008.794817][T11886] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1008.800441][T11886] __se_sys_ioctl+0x23c/0x400 [ 1008.805206][T11886] __x64_sys_ioctl+0x97/0xe0 [ 1008.809883][T11886] x64_sys_call+0x18a7/0x3e70 [ 1008.814741][T11886] do_syscall_64+0xc9/0xf80 [ 1008.819331][T11886] ? clear_bhb_loop+0x40/0x90 [ 1008.824081][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.830049][T11886] RIP: 0033:0x7f0d37b9acb9 [ 1008.834524][T11886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.854209][T11886] RSP: 002b:00007f0d38ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.862697][T11886] RAX: ffffffffffffffda RBX: 00007f0d37e16090 RCX: 00007f0d37b9acb9 [ 1008.870820][T11886] RDX: 0000200000000180 RSI: 0000000000003b85 RDI: 0000000000000003 [ 1008.878838][T11886] RBP: 00007f0d37c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1008.886870][T11886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.894906][T11886] R13: 00007f0d37e16128 R14: 00007f0d37e16090 R15: 00007fff2f55a738 [ 1008.902967][T11886] [ 1008.906522][T11886] Kernel Offset: disabled [ 1008.910923][T11886] Rebooting in 86400 seconds..